CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.03)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in MySQL Server and MySQL Cluster (Server: Security: Encryption component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows an unauthenticated network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (InnoDB component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: GIS component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. Difficult to exploit, allows a low-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Client programs component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: RAPID component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: Components Services component) affecting MySQL Server 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 9.7.0-9.7.3, 26.7.0-26.7.1. Difficult to exploit, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (Server: Group Replication GCS component) affecting MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1. Easily exploitable, allows a high-privileged network attacker to cause a hang or frequently repeatable crash (complete DoS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A high-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (availability impact).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Security: Encryption) affects MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. A high-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 4.9 (availability impact).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Security: Audit) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in MySQL Server and MySQL Cluster (component: InnoDB) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. An unauthenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible in the application. CVSS 3.1 Base Score 5.3 (confidentiality impact).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: GIS) affects MySQL Server 26.7.0-26.7.1 and MySQL Cluster 26.7.0-26.7.1. A low-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. A difficult-to-exploit attack by an unauthenticated attacker with access to the physical communication segment attached to the hardware running the application can lead to unauthorized access to critical data or complete access to all data accessible in the application. CVSS 3.1 Base Score 5.3 (confidentiality impact).
Vulnerability in Oracle Java SE (component: Compiler) affects version 26.0.2. A difficult-to-exploit attack by an unauthenticated attacker with network access via multiple protocols can cause a hang or frequently repeatable crash (complete DoS). The vulnerability can only be exploited by supplying data to APIs in the specified component without using untrusted Java Web Start applications or untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (availability impact).
Vulnerability in Oracle Agile Engineering Data Management (component: Engineering Communication Interface) affects version 6.2.1. A low-privileged authenticated attacker with network access via HTTP can gain unauthorized read access to a subset of data accessible in the application. CVSS 3.1 Base Score 4.3 (confidentiality impact).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: JSON) affects MySQL Server 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1 and MySQL Cluster 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. A low-privileged authenticated attacker with network access can cause a hang or frequently repeatable crash (complete DoS). CVSS 3.1 Base Score 6.5 (availability impact).
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Optimizer component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
Vulnerability in Oracle MySQL (MySQL Server and MySQL Cluster) in the Server: Optimizer component. An authenticated high-privileged attacker with network access can cause a hang or repeatable crash of the server (complete DoS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS