CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.09.25)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the SQL*Plus component of Oracle Database Server, affecting versions 11.2.0.4 and 12.1.0.2. A high-privileged attacker with Local Logon privilege can compromise SQL*Plus, but this requires interaction from a third party.
A vulnerability in the Oracle FLEXCUBE Private Banking component allows a low privileged attacker to access critical data. Versions 2.0.0, 2.0.1, 2.2.0.1, and 12.0.1 are susceptible to easily exploitable attacks via HTTP.
A vulnerability in the Oracle FLEXCUBE Private Banking component allows a low privileged attacker with network access via HTTP to compromise the system. The attacker can unauthorizedly create, delete, or modify critical data in Oracle FLEXCUBE Private Banking.
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached) allows an unauthenticated attacker with network access to compromise the MySQL Server. Successful attacks can lead to hanging or frequent crashes of the MySQL Server, resulting in a complete denial of service.
A vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks require human interaction, potentially leading to unauthorized access to critical data and the ability to modify it.
A vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a third party, which may lead to unauthorized access to critical data.
A vulnerability in the Oracle Marketing component of Oracle E-Business Suite allows an unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. It requires human interaction from a person other than the attacker, and attacks may significantly impact additional products.
Vulnerability in the MySQL Server component of Oracle MySQL related to thread management allows an unauthenticated attacker with network access to compromise the MySQL server. The attacker can cause hangs or frequent crashes of the server, leading to a complete denial of service.
Vulnerability in the MySQL Server component of Oracle MySQL allows a low privileged attacker with network access to compromise the MySQL Server. Attacks may lead to hanging or frequently repeatable crashes of the server, resulting in a complete denial of service (DoS).
Vulnerability in the MySQL Server component of Oracle MySQL allows a low privileged attacker with network access to compromise MySQL Server. Attacks may lead to hangs or frequent crashes of the server, resulting in complete denial of service.
A vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL allows a high privileged attacker with network access to compromise the system. It requires interaction from a third party, making it easily exploitable.
A vulnerability in the Oracle Retail Invoice Matching component allows an unauthenticated attacker with network access via HTTP to compromise the system. It requires interaction from a person other than the attacker, potentially leading to unauthorized access to critical data and the ability to update, insert, or delete data.
Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools, affecting versions prior to 5.7. It allows a low privileged attacker with access to the infrastructure where ASR runs to compromise the component.
Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools, affecting versions prior to 5.7. It allows easy exploitation by an unauthenticated attacker with network access via HTTP, potentially leading to unauthorized creation, deletion, or modification of ASR data.
A vulnerability in the Oracle Fusion Middleware MapViewer component allows unauthenticated attackers with network access via HTTP to compromise the system. Attackers can create, delete, or modify data and gain unauthorized access to a subset of data.
Buffer overflow in nvhost_job.c in the NVIDIA video driver for Android, affecting Shield TV before OTA 3.3, Shield Tablet before OTA 4.4, and Shield Tablet TK1 before OTA 1.5.
Integer overflow in nvhost_job.c in the NVIDIA video driver for Android allows local users to cause a denial of service (system crash) via unspecified vectors, triggering a buffer overflow.
WebKit, as used in Safari 5.0.6, allows remote attackers to cause a denial of service (process crash) or arbitrary code execution.
There is a CSRF vulnerability in Serendipity version 2.0.5 that allows attackers to install any themes via a GET request.
The WHIZZ plugin before version 1.1.1 for WordPress has a CSRF vulnerability that allows attackers to delete any WordPress users and change the plugin's status via a GET request.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS