CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
Browse vulnerabilities by packageCISA KEV catalog updated: (v2026.10.15)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in the JDBC component of Oracle Database Server in versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2. Easily exploitable flaw requires human interaction and allows a high-privileged attacker with network access via Oracle Net to take over the JDBC component.
Vulnerability in Oracle VM VirtualBox version 7.2.12 (Core component). Easily exploitable by an attacker with low privileges and local access. Can cause complete denial of service (DOS) through hangs or frequent crashes.
Vulnerability in Oracle VM VirtualBox 7.2.12 allows a high-privileged attacker with local access to cause a hang or frequent crash (DOS) of the VM. Attacks may impact additional products.
Vulnerability in the Java VM component of Oracle Database Server allows a low-privileged attacker with Create Session privilege and network access via Oracle Net to unauthorized create, delete, or modify critical data. The attack is easy to exploit.
Vulnerability in Oracle Java SE (component: Libraries) allows an unauthenticated attacker with network access to cause a partial denial of service (partial DOS). The attack is easy to exploit and can be triggered via APIs, e.g., through a web service.
Vulnerability in PeopleSoft Enterprise PeopleTools (Panel Processor component) allows a low-privileged attacker via HTTP to gain unauthorized read and modify access to data. Requires user interaction.
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is easy, requires network access via multiple protocols.
Vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: 2D). Affects multiple versions. An unauthenticated attacker with network access via multiple protocols can cause a partial denial of service (partial DOS).
Vulnerability in Oracle Java SE (component: JavaFX). Affects version 8u491. An unauthenticated attacker with network access via multiple protocols can cause a partial denial of service (partial DOS).
Vulnerability in MySQL Server and MySQL Cluster (component: Server: Optimizer) in multiple versions. Requires a privileged attacker with network access and is difficult to exploit, but can lead to a complete denial of service.
Vulnerability in Oracle Agile PLM (component: Folders, Files & Attachments) version 9.3.6. Easily exploitable by an unauthenticated attacker with network access via HTTP, requiring user interaction. Successful attack can result in unauthorized access to critical data or complete access to all Agile PLM data. CVSS 6.5 (Confidentiality).
Vulnerability in MySQL Server and MySQL Cluster (component: InnoDB) allows a high-privileged attacker to cause a hang or frequent crash (DOS). The attack is easy, requires network access via multiple protocols.
Vulnerability in Oracle Enterprise Manager Base Platform product (component: UI Framework). Affects versions 13.5 and 24.1. Difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized access to critical data or complete access to all platform data.
Vulnerability in Oracle Enterprise Manager Base Platform (component: UI Framework). Affects versions 13.5 and 24.1. Easily exploitable by an unauthenticated attacker with network access via HTTPS, requires user interaction. Successful attack may impact additional products (scope change) and allows unauthorized modification and read access to data.
Vulnerability in Oracle Enterprise Manager Base Platform (Web Services Framework component) allows a low-privileged attacker with network access via HTTPS to perform unauthorized update, insert, delete, and read access to some data. Easily exploitable, CVSS 5.4.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Metadata Plugin) versions 13.5 and 24.1. A low-privileged attacker via HTTPS can gain unauthorized access to critical data (create, delete, modify).
Vulnerability in Oracle Enterprise Manager Base Platform (component: Enterprise Config Management) versions 13.5 and 24.1. It is easily exploitable, requires local access and low privileges. Successful attack can lead to unauthorized read and modification of some data.
Vulnerability in Oracle Enterprise Manager Base Platform product (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized read access to a subset of platform data.
Vulnerability in Oracle Enterprise Manager Base Platform (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable by an unauthenticated attacker with network access via HTTPS. Successful attack allows unauthorized read access to a subset of data.
Vulnerability in Oracle Enterprise Manager Base Platform product (component: Agent Next Gen). Affects versions 13.5 and 24.1. Easily exploitable vulnerability allows an unauthenticated attacker with network access via HTTPS to gain unauthorized read access to a subset of platform data.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS