CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in TimesTen In-Memory Database (Kubernetes Operator component). A low-privileged attacker via HTTPS can cause a hang or frequent crashes (full DOS).
Vulnerability in TimesTen In-Memory Database (component: Kubernetes Operator). Affects version 26.1.1.1.0. A low-privileged attacker with network access via HTTPS can cause a complete denial of service (complete DOS) by hanging or frequent crashes.
A vulnerability in TimesTen In-Memory Database's Kubernetes Operator allows a low-privileged attacker with local access to gain complete access to all database data, with impact on other products.
Vulnerability in Oracle GoldenGate (component: Receiver Service Executable). Affects versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. A low-privileged attacker with network access via HTTP can cause a complete denial of service (complete DOS).
Vulnerability in Oracle GoldenGate (Admin Server Executable) versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, and 23.4-23.26.1. Easily exploitable by an unauthenticated attacker with access to the physical communication segment. Successful attack may cause partial denial of service. CVSS 4.3 (Availability impacts).
In Oracle GoldenGate (versions 19.1.0.0.0-19.30.0.0, 21.3-21.21, 23.4-23.26.1), there is an easily exploitable vulnerability in the Admin Server component. A low-privileged attacker with network access via HTTP can gain unauthorized read access to a subset of data.
Vulnerability in Oracle GoldenGate (Admin Server Executable). An unauthenticated attacker with network access via HTTPS can read a subset of data.
Vulnerability in Oracle JDeveloper (versions 12.2.1.4.0 and 14.1.2.0.0) in the ADF Faces component. Difficult to exploit; an unauthenticated attacker via HTTP can gain unauthorized read and modify access to data.
Vulnerability in Oracle JDeveloper (ADF Faces component) allows a low-privileged attacker with local access to gain unauthorized access to critical data. The attack may affect other products.
Vulnerability in Oracle JDeveloper of Oracle Fusion Middleware (component: Java Business Objects). Affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with network access via HTTP can gain full access to JDeveloper data and cause a partial denial of service (partial DOS).
Vulnerability in Oracle JDeveloper (ADF Faces). Difficult to exploit, but an unauthenticated attacker via HTTP can gain full access to data.
Vulnerability in Oracle HRMS (France) (component: French HR Payroll) versions 12.2.3-12.2.15. A low-privileged attacker via HTTP can gain unauthorized read and modify access to data.
Vulnerability in Oracle Access Manager (Authentication Engine). An unauthenticated attacker via HTTP can read a subset of data.
Vulnerability in Oracle Project Manufacturing (part of Oracle E-Business Suite, component: PJM Command Center) version V16. A high-privileged attacker with local access can access critical data and modify some data.
Vulnerability in Oracle Project Manufacturing (PJM Command Center component) version V16. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to unauthorized creation, deletion, or modification of critical data and access to all Oracle Project Manufacturing data.
Vulnerability in MySQL Server and MySQL Cluster (Server: Group Replication GCS component) in versions MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of MySQL Server and MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (Server: Replication component) in versions MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can exploit this vulnerability, potentially leading to takeover of MySQL Server and MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) versions 9.7.0-9.7.1. A low-privileged attacker via network can cause a hang or frequent crashes (DOS).
Vulnerability in Oracle Applications Manager component of Oracle E-Business Suite (Oracle Diagnostics Interfaces). Affects versions 12.2.3-12.2.15. An unauthenticated attacker with network access via HTTP can exploit it without user interaction. Successful attack allows unauthorized update, insert, or delete access to some data and read access to a subset of data.
Oracle Project Manufacturing (part of Oracle E-Business Suite) version V16 has a vulnerability in the PJM Command Center component. A privileged attacker with local access can unauthorizedly create, delete, or modify critical data and gain full access to all data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS