CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.08.31)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to gain unauthorized access to all data. Exploitation is easy.
Vulnerability in Oracle Coherence (component: Core). Easily exploitable, allows an unauthenticated attacker with physical access to the communication segment to take over Oracle Coherence.
Vulnerability in Oracle Coherence product of Oracle Fusion Middleware (Core component). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, causing a hang or frequently repeatable crash (complete DOS) of Oracle Coherence and unauthorized update, insert or delete access to some data.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via TCP. The attack is easily exploitable.
Vulnerability in Oracle Coherence (part of Oracle Fusion Middleware, component: Core). The attack requires user interaction and is difficult to exploit, but can lead to unauthorized access and modification of critical data in other products. CVSS 7.2.
Vulnerability in Oracle Coherence (Core component) version 15.1.1.0.0 allows an unauthenticated attacker via TCP to cause DOS, modify and read some data.
Vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. An unauthenticated attacker via TCP can cause a hang or repeatable crash (full DOS) of Oracle Coherence.
Vulnerability in Oracle Coherence product of Oracle Fusion Middleware (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise Oracle Coherence, potentially leading to a takeover.
Vulnerability in Oracle Fusion Middleware's Oracle Coherence product (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via TCP to compromise Oracle Coherence.
Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have an easily exploitable vulnerability that allows an attacker with low privileges and access to the communication segment to compromise data confidentiality and integrity. The attack may affect other products.
Vulnerability in Oracle Coherence (component: Core) in Oracle Fusion Middleware. An unauthenticated attacker with access to the physical communication segment can take over Oracle Coherence.
Vulnerability in Oracle WebLogic Server (Core component) allows a low-privileged attacker to take over the server via HTTP. The attack does not affect other products.
Vulnerability in Oracle WebLogic Server (component: Core) allows a low-privileged attacker with network access via HTTP to compromise the system. No user interaction is required.
Vulnerability in Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise Oracle WebLogic Server, potentially leading to a takeover.
Vulnerability in Oracle WebLogic Server (Core component) allows a high-privileged attacker with physical access to the communication segment to take over the server. The attack may impact additional products (scope change).
Vulnerability in MySQL Connectors (component: Connector/Net) versions 9.7.0-9.7.1. It is difficult to exploit, requires low privileges and network access. Attack may affect additional products (scope change) and lead to takeover of MySQL Connectors.
Vulnerability in MySQL Connectors product of Oracle MySQL (component: Connector/Net). Affected versions are 9.7.0 and 9.7.1. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, potentially leading to a takeover.
Vulnerability in MySQL Connectors (Connector/C++ component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via multiple protocols. The attack is easily exploitable.
Vulnerability in MySQL Connectors (component: Connector/C++) versions 9.7.0-9.7.1. An unauthenticated attacker with network access via multiple protocols can gain full access to critical data and modify it.
Vulnerability in Oracle Payments (part of Oracle E-Business Suite) allows a low-privileged attacker via HTTP to access critical data and cause partial denial of service.