CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Data Integrator (component: Patchset Assistant) affects versions 12.2.1.4.0 and 14.1.2.0.0. A low-privileged attacker with local access can gain unauthorized access to critical data or all Oracle Data Integrator accessible data. Attacks may impact additional products (scope change).
Vulnerability in MySQL Server and MySQL Cluster (Server: Optimizer). A low-privileged attacker can cause a complete denial of service.
Vulnerability in the Appraisals component of Oracle Performance Management (part of Oracle E-Business Suite) versions 12.2.3-12.2.15. Easily exploitable over network (HTTP) with low privileges. Attacker can unauthorized update, insert or delete data and read a subset of data.
Vulnerability in Oracle Coherence (component: Core). Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Easily exploitable with low privileges and network access via HTTP. Successful attack allows unauthorized read access to a subset of data.
Vulnerability in Oracle Coherence of Oracle Fusion Middleware (component: Core). Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can cause a complete denial of service (complete DOS).
Vulnerability in Oracle Coherence (component: Core) allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS). The attack is easy to exploit.
Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via HTTP can read a subset of data.
Vulnerability in Oracle Coherence (Core component) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can gain unauthorized read and write (update/insert/delete) access to some data.
Vulnerability in Oracle Coherence (component: Core) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is easy, requires network access via HTTP.
Vulnerability in Oracle Coherence (Core). Difficult to exploit, but an unauthenticated attacker via TLS can gain full access to data.
Vulnerability in Oracle Coherence (Core component) allows a high-privileged attacker with local access to gain unauthorized access to critical data. The attack may affect other products.
Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via HTTP can read a subset of data.
Vulnerability in Oracle Coherence (Core component). A low-privileged attacker via TCP can cause a hang or frequent crashes (full DOS).
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Difficult to exploit, allows an unauthenticated attacker via HTTP to unauthorized read and modify data.
Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via TCP can read a subset of data.
Vulnerability in Oracle Coherence (component: Core) version 15.1.1.0.0. A low-privileged attacker with network access via TCP can cause a partial denial of service (partial DOS).
Vulnerability in Oracle Coherence (versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0) in the Core component. A low-privileged attacker via HTTP can gain unauthorized read and modify access to data.
Vulnerability in Oracle Coherence (component: Core) allows an unauthenticated attacker to cause a hang or crash (DOS) and modify data. The attack is difficult, requires network access via HTTP.
Vulnerability in the JSON Duality component of MySQL Server and MySQL Cluster. A high-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
Vulnerability in the JSON Duality component of MySQL Server and MySQL Cluster. A high-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS