CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.06)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Access Manager (Authentication Engine component) allows an unauthenticated attacker to access critical data. The attack may impact other products.
Vulnerability in Oracle Fusion Middleware Oracle JDeveloper (ADF Shared Components component). Versions 12.2.1.4.0 and 14.1.2.0.0 are affected. A high-privileged attacker with network access via HTTP can easily exploit this, leading to full system takeover.
A vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker with network access via HTTP to compromise the server.
Vulnerability in Oracle Project Costing (component: Enterprise Command Center). Affected versions are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to take over the system.
Vulnerability in Oracle WebCenter Content (component: Content Server). Affected versions are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to take over the system.
Vulnerability in Oracle WebCenter Content (Content Server component) allows a low-privileged attacker to take over the system over the network via HTTP. Versions 12.2.1.4.0 and 14.1.2.0.0 are affected.
Vulnerability in Oracle Identity Manager (versions 12.2.1.4.0 and 14.1.2.1.0) in OIM Legacy UI component. Difficult to exploit, low-privileged attacker via HTTP can take over the system, and attacks may impact other products (scope change).
Vulnerability in Oracle Fusion Middleware Oracle Access Manager product (Authentication Engine component). Affects versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable by unauthenticated attacker via HTTP. Can lead to unauthorized access to all Oracle Access Manager data.
Vulnerability in Oracle Access Manager product of Oracle Fusion Middleware, component Authentication Engine. Affects versions 12.2.1.4.0 and 14.1.2.1.0. An easily exploitable vulnerability allows a low-privileged attacker with access to the physical communication segment to take over Oracle Access Manager.
Vulnerability in Oracle Identity Manager (part of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable, allows an attacker with low privileges via HTTP to gain unauthorized access and modification of critical data.
Vulnerability in Oracle Data Integrator (Patchset Assistant component) allows an unauthenticated attacker via HTTP to gain unauthorized access to all data.
Difficult to exploit vulnerability in MySQL Connector/Net versions 9.7.0-9.7.1. An unauthenticated attacker with network access can gain unauthorized access to critical data and the ability to create, delete, or modify it.
Vulnerability in MySQL Server and MySQL Cluster (X Plugin component) allows a high-privileged attacker via network to take over the system. Exploitation is easy.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: X Plugin) in multiple versions. It is easy to exploit, requires no authentication and network access. Successful attack can cause hang or frequent crashes (complete denial of service) and unauthorized read access to some data.
Vulnerability in MySQL Router (component: Router: General) versions 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable, no authentication required, attacker with network access via HTTP can cause hang or frequent crashes (DOS) of MySQL Router.
Vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker with network access via RMI to take over the server. The attack is easily exploitable.
Vulnerability in Oracle WebLogic Server (Core component) allows an unauthenticated attacker via T3 or IIOP to take over the server. Exploitation is difficult.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with physical access to the communication segment to take over Coherence. The attack is easily exploitable.
Vulnerability in Oracle Coherence allows a low-privileged attacker with network access via TCP to unauthorizedly create, delete, or modify critical data and read a subset of data. Exploitation is easy, with significant confidentiality and integrity impact.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via TCP. The attack is easily exploitable.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS