CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) affects MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can take over the server or cluster. Exploitation is difficult.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Difficult-to-exploit vulnerability in MySQL Server and MySQL Cluster, requiring user interaction. A low-privileged attacker with logon access can take over the server.
Vulnerability in MySQL Server and MySQL Cluster (Server: Clone Plugin component) in versions: MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. Difficult to exploit vulnerability allows a high-privileged attacker with network access via multiple protocols to take over MySQL Server and MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in the Optimizer component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform) affects versions 26.0.0, 26.1.0, and 26.2.0. A high-privileged attacker with local access, requiring user interaction, can take over the framework. Exploitation is difficult.
Vulnerability in Oracle MySQL's MySQL Cluster product (component: Server: Optimizer). Affected versions are 8.0.0-8.0.47. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the MySQL Cluster.
Vulnerability in Oracle Cost Management Enterprise Command Center component. A high-privileged attacker via HTTP can access and modify critical data.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.12. A high-privileged attacker with local access can gain unauthorized access to critical data or all VirtualBox data and cause partial denial of service. Attacks may impact additional products (scope change). Exploitation is difficult.
Oracle VM VirtualBox version 7.2.12 has a vulnerability in the Core component. An unauthenticated attacker with local access, after tricking a user into interaction, can cause a hang or frequent crashes (complete DOS) and unauthorizedly update, insert, or delete data.
Oracle VM VirtualBox version 7.2.12 has a vulnerability in the Core component. A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit vulnerability, leading to unauthorized modification of critical data and partial denial of service (DOS) of VirtualBox, also affecting other products.
Vulnerability in Oracle APEX (General). An unauthenticated attacker via HTTP can read a subset of data.
Vulnerability in Oracle Application Object Library (versions 12.2.3-12.2.15) in the Core component. A low-privileged attacker via HTTP can gain unauthorized read and modify access to data.
Vulnerability in PeopleSoft Enterprise PeopleTools (component: Panel Processor). Affects versions 8.61 and 8.62. Easily exploitable by an unauthenticated attacker with network access via HTTP, but requires user interaction. Successful attack allows unauthorized modification and read access to data.
Vulnerability in Oracle Workflow (Workflow Notification Mailer component) versions 12.2.3-12.2.15. Requires privileged local access and is difficult to exploit. Can lead to complete denial of service (DOS) and unauthorized read, write, and modification of data.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: Security) in multiple versions. Easily exploitable flaw allows an unauthenticated attacker with network access via multiple protocols to unauthorizedly update, insert, delete, or read a subset of data.
Vulnerability in Oracle Access Manager (component: Authentication Engine) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, requires user interaction, allows an unauthenticated attacker via HTTP to unauthorized read and modify data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS