CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
MySQL Server (versions 8.4.0-8.4.10, 9.7.0-9.7.1) and MySQL Cluster (versions 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1) have a vulnerability in the Server: Replication component. A privileged attacker with local access can cause a hang or frequent crashes (complete DOS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is difficult, requires network access via multiple protocols.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. A high-privileged attacker with difficult exploitation can cause a hang or frequent crashes (DOS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service (hang or frequent crash).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Group Replication Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) affects MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1 and MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. A high-privileged attacker with local access can take over the server or cluster. Exploitation is difficult.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Difficult-to-exploit vulnerability in MySQL Server and MySQL Cluster, requiring user interaction. A low-privileged attacker with logon access can take over the server.
Vulnerability in MySQL Server and MySQL Cluster (Server: Clone Plugin component) in versions: MySQL Server 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster 8.0.0-8.0.47, 8.4.0-8.4.10, 9.7.0-9.7.1. Difficult to exploit vulnerability allows a high-privileged attacker with network access via multiple protocols to take over MySQL Server and MySQL Cluster.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Clone Plugin) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in the Optimizer component of MySQL Server and MySQL Cluster. A low-privileged attacker can remotely cause a hang or frequent crashes (full DOS).
Vulnerability in Oracle Autonomous Health Framework (component: Developer triaging platform) affects versions 26.0.0, 26.1.0, and 26.2.0. A high-privileged attacker with local access, requiring user interaction, can take over the framework. Exploitation is difficult.
Vulnerability in Oracle MySQL's MySQL Cluster product (component: Server: Optimizer). Affected versions are 8.0.0-8.0.47. Easily exploitable by a high-privileged attacker with network access via multiple protocols, potentially causing a hang or frequent crash (full DOS) of the MySQL Cluster.
Vulnerability in Oracle Cost Management Enterprise Command Center component. A high-privileged attacker via HTTP can access and modify critical data.
Vulnerability in Oracle VM VirtualBox (component: Core) affects version 7.2.12. A high-privileged attacker with local access can gain unauthorized access to critical data or all VirtualBox data and cause partial denial of service. Attacks may impact additional products (scope change). Exploitation is difficult.
Oracle VM VirtualBox version 7.2.12 has a vulnerability in the Core component. An unauthenticated attacker with local access, after tricking a user into interaction, can cause a hang or frequent crashes (complete DOS) and unauthorizedly update, insert, or delete data.
Oracle VM VirtualBox version 7.2.12 has a vulnerability in the Core component. A low-privileged attacker with local access to the infrastructure can exploit this difficult-to-exploit vulnerability, leading to unauthorized modification of critical data and partial denial of service (DOS) of VirtualBox, also affecting other products.
Vulnerability in Oracle APEX (General). An unauthenticated attacker via HTTP can read a subset of data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS