CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in PeopleSoft Enterprise PeopleTools (Panel Processor component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is easy, requires network access via multiple protocols.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: 2D). Affects multiple versions. An unauthenticated attacker with network access via multiple protocols can cause a partial denial of service (partial DOS).
Vulnerability in Oracle Java SE (component: JavaFX). Affects version 8u491. An unauthenticated attacker with network access via multiple protocols can cause a partial denial of service (partial DOS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) version 9.3.6. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring user interaction. Successful attack can result in unauthorized access to critical data or complete access to all Agile PLM data. CVSS 6.5 (Confidentiality).
Vulnerability in MySQL Server and MySQL Cluster (component: InnoDB) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is easy, requires network access via multiple protocols.
Vulnerability in Oracle Enterprise Manager Base Platform product (component: UI Framework). Affects versions 13.5 and 24.1. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized access to critical data or complete access to all platform data.
Vulnerability in Oracle Enterprise Manager Base Platform (component: UI Framework). Affects versions 13.5 and 24.1. Easily exploitable by an unauthenticated attacker with network access via HTTPS, requires user interaction. Successful attack may impact additional products (scope change) and allows unauthorized modification and read access to data.
Vulnerability in Oracle Enterprise Manager Base Platform (Web Services Framework component) allows a low-privileged attacker with network access via HTTPS to perform unauthorized update, insert, delete, and read access to some data. Easily exploitable, CVSS 5.4.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Metadata Plugin) versions 13.5 and 24.1. A low-privileged attacker via HTTPS can gain unauthorized access to critical data (create, delete, modify).
Vulnerability in Oracle Enterprise Manager Base Platform (component: Enterprise Config Management) versions 13.5 and 24.1. It is easily exploitable, requires local access and low privileges. Successful attack can lead to unauthorized read and modification of some data.
Vulnerability in Oracle Enterprise Manager Base Platform product (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized read access to a subset of platform data.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable by an unauthenticated attacker with network access via HTTPS. Successful attack allows unauthorized read access to a subset of data.
Vulnerability in Oracle Enterprise Manager Base Platform product (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized read access to a subset of platform data.
Vulnerability in Oracle Utilities Network Management System (Oracle Utilities Applications) in multiple versions. A low-privileged attacker via HTTP can gain unauthorized read access.
Vulnerability in the RDBMS component of Oracle Database Server. Affects versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2. An unauthenticated attacker with network access via Oracle Net can exploit it without user interaction. Successful attack allows unauthorized update, insert, or delete access to some RDBMS data, with potential impact on additional products (scope change).
Vulnerability in Oracle Java SE (component: JSSE) in multiple versions including 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1 and GraalVM. Difficult to exploit, an unauthenticated attacker via TLS can gain unauthorized access to critical data (creation, deletion, modification).
Vulnerability in Oracle Utilities Network Management System (Security component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: DDL) in multiple versions. A high-privileged attacker with difficult exploitation can cause a hang or frequent crashes (DOS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS