CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.11.09)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with access to the physical communication segment can gain unauthorized update, insert, delete, and read access to some data. Requires user interaction and is difficult to exploit.
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by low-privileged attacker over network (multiple protocols). Successful attack can cause complete DoS.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw requires login and user interaction; a low-privileged attacker can gain unauthorized access to data and cause partial denial of service.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to system data.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows an unauthenticated attacker over HTTP to gain unauthorized read access to a subset of system data.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. This difficult-to-exploit flaw allows an unauthenticated attacker with physical access to the communication segment to gain complete access to data and modify it.
Vulnerability in Oracle Fusion Middleware Helidon (Imperative Web Server component) affects versions 1.0.0-1.4.19 and 3.0.0-3.2.17. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to take over Helidon. CVSS score 9.8.
Vulnerability in MySQL Connectors (Connector/ODBC component) version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a complete denial of service (hang or frequent crashes).
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A low-privileged attacker with logon access can cause a partial denial of service. Easily exploitable.
Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An easily exploitable flaw allows a low-privileged attacker with physical access to the communication segment to gain unauthorized modification and read access to a subset of data.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. A low-privileged attacker can remotely (HTTP) gain unauthorized access to critical data or all accessible data.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. A low-privileged attacker via HTTP, under difficult conditions, can take over the system.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. An unauthenticated attacker via HTTP, under difficult conditions, can take over the system.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) affects version 3.6. A low-privileged attacker via HTTP can easily take over the system.
Vulnerability in Oracle Agile PLM MCAD Connector (component: CAX Client) version 3.6. An unauthenticated attacker with local access and user interaction can modify, insert, or delete some data and cause partial denial of service.
Vulnerability in Oracle Fusion Middleware Helidon (Imperative Web Server) versions 3.0.0-3.2.17. Allows unauthenticated attacker via HTTP to gain unauthorized access to data and perform unauthorized update, insert, or delete of some data. Attacks may impact additional products (scope change). CVSS 9.3.
Vulnerability in the Portable Clusterware component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with access to the physical communication segment can take over the component. CVSS score is 9.6.
Vulnerability in the Portable Clusterware component of Oracle Database Server affects versions 19.3-19.32, 21.3-21.23, and 23.4.0-23.26.3. An unauthenticated attacker with access to the physical communication segment can take over the component. CVSS score is 9.6.
Vulnerability in the RDBMS component of Oracle Database Server affects versions 23.4.0-23.26.3. A low-privileged attacker (Authenticated User) via Oracle Net, under difficult conditions, can take over the system and impact other products.
Vulnerability in Oracle Business Intelligence Enterprise Edition (component: BI Platform Security) affects versions 8.2.0.0.0 and 26.01.0.0.0. An unauthenticated attacker via HTTP can easily gain unauthorized access to critical data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS