CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Item Master (iSet-up bugs component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
Vulnerability in Oracle Banking Origination (Oracle Financial Services Applications) version 14.5.0.16.0. An unauthenticated attacker via HTTP, with user interaction, can gain unauthorized read and write access to some data, and the attack may impact other products (scope change).
Vulnerability in Oracle Security Service (Oracle SSL API component) version 12.2.1.4.0. A low-privileged attacker with network access via TLS can exploit this vulnerability, but user interaction is required. Successful attack may lead to unauthorized creation, deletion, or modification of critical data and access to all Oracle Security Service data.
Vulnerability in the Payroll component of Oracle Payroll (Oracle E-Business Suite). A low-privileged attacker via HTTP can gain unauthorized data access (updates, inserts, deletions, read) and cause partial DoS.
Vulnerability in Oracle Labor Distribution (Internal Operations component) versions 12.2.3-12.2.15. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
Vulnerability in Oracle Agile Engineering Data Management (component: Core) version 6.2.1. A low privileged attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DOS) of the system.
Vulnerability in Oracle Agile Engineering Data Management (component: Core) version 6.2.1. A low privileged attacker with network access via TCP can cause a hang or frequently repeatable crash (complete DOS) of the system.
Oracle Agile Engineering Data Management version 6.2.1 has a vulnerability in the Install component. The vulnerability is difficult to exploit but allows a low-privileged attacker with network access via HTTP to cause a hang or frequent crashes (full DoS) of the system.
Vulnerability in Oracle Agile Engineering Data Management (component: Document Management) version 6.2.1. A low privileged attacker with local access to the infrastructure can perform unauthorized update, insert, or delete operations on some data and cause a partial denial of service (partial DOS).
Vulnerability in Oracle Agile Engineering Data Management product of Oracle Supply Chain (component: Install) version 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise the system. Requires human interaction. Successful attack can lead to unauthorized creation, deletion, or modification of critical data and access to it.
Vulnerability in Oracle Agile Engineering Data Management (Install component) version 6.2.1. A low-privileged attacker with local access can easily exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all Oracle Agile Engineering Data Management data. The attack may impact other products.
Vulnerability in Oracle Agile Product Lifecycle Management for Process (component: Data Import) version 6.2.4. Allows a high-privileged attacker with local access to take over the system.
Vulnerability in Oracle Product Lifecycle Analytics (component: Installation Issues) version 3.6.1. A high privileged attacker with network access via HTTP can gain unauthorized access to critical data, modify or delete it, and cause a partial denial of service (partial DOS).
Vulnerability in Oracle Agile PLM (Security component) version 9.3.6. A low-privileged attacker with local access can easily exploit this vulnerability, potentially leading to unauthorized access to critical data or full access to all Oracle Agile PLM data. The attack may impact other products.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (Experience Manager component) version 11.4.0. Low-privileged attacker via HTTP can unauthorizedly read and modify data.
Vulnerability in Oracle Commerce Guided Search / Oracle Commerce Experience Manager (component: Content Acquisition System) version 11.4.0. An unauthenticated attacker with local access can cause a complete denial of service (DOS).
Vulnerability in Oracle MySQL's MySQL Server and MySQL Cluster (component: Server: Optimizer). Affected versions are MySQL Server 9.7.0-9.7.1 and MySQL Cluster 9.7.0-9.7.1. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the server.
Vulnerability in Oracle Communications Convergent Charging Controller (part of Oracle Communications) versions 15.0.0.0.0 and 15.2.0.0.0. A high-privileged attacker with network access via HTTP, with user interaction, can take over the system.
Vulnerability in Oracle Commerce Platform (component: Dynamo Application Framework) version 11.4.0. Difficult to exploit flaw allows a low-privileged attacker with network access via HTTP to unauthorizedly create, delete, or modify critical data and access all platform data.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) allows a high-privileged attacker to cause a hang or frequent crash (DOS) over the network. Network access and multiple protocols are required.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS