CVE-2024-21159

CVE-2024-21159 (MySQL InnoDB) affects Oracle MySQL Server, specifically InnoDB. Affected releases: 8.0.36 and prior, and 8.3.0 and prior. An attacker with network access through multiple protocols can cause the server to hang or crash (DoS). The CVSS base score is 4.9 (Availability impact). No ex...

CVE-2024-21153

CVE-2024-21153 affects Oracle E-Business Suite, specifically the Quality Management Specs in the Process Manufacturing Product Development area, with affected version 12.2.13. The vulnerability allows a low-privileged attacker who can reach the system over HTTP to compromise data, enabling unauth...

CVE-2024-21154

CVE-2024-21154 affects Oracle’s PeopleSoft Enterprise HCM Human Resources (component: Human Resources) , specifically affected in version 9.2 . The vulnerability arises from insufficient input validation in the Human Resources module, enabling a low-privileged attacker with network access via HTT...

CVE-2024-21150

CVE-2024-21150 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) with versions prior to 9.2.8.2. The issue arises from insufficient input validation in the Web Runtime SEC component, allowing an unauthenticated attacker with network access via HTTP to compromise the tools, potential...

CVE-2024-21152

CVE-2024-21152 affects Oracle E-Business Suite, specifically the Allocation Rules component in Oracle Process Manufacturing Financials. Affected versions are 12.2.12–12.2.13. The issue allows a low-privileged, HTTP-network attacker to compromise data integrity and confidentiality, enabling unauth...

CVE-2024-21145

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1;...

CVE-2024-21145

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: 2D. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1;...

CVE-2024-21141

CVE-2024-21141 affects Oracle VM VirtualBox (Core) with affected versions prior to 7.0.20. The vulnerability is described as easily exploitable by a high-privileged attacker who can log on to the infrastructure where VirtualBox runs, potentially allowing takeover of VirtualBox and impacting other...

CVE-2024-21142

Removed by vendor...

CVE-2024-21140

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

CVE-2024-21138

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0....

CVE-2024-21135

CVE-2024-21135 concerns Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL Server 8.0.36 and prior, 8.3.0 and prior. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or frequent crash (DoS). The CVSS 3.1 ba...

CVE-2024-21137

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2024-21132

CVE-2024-21132 affects Oracle E-Business Suite Oracle Purchasing (component: Approvals) and is listed for affected 12.2.3–12.2.13. The vulnerability permits a low-privileged, network-accessible attacker (HTTP) to compromise Oracle Purchasing, with human interaction required, and could lead to una...

CVE-2024-21134

Removed by vendor...

CVE-2024-21130

Removed by vendor...

CVE-2024-21127

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.37 and prior and 8.4.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2024-21126

CVE-2024-21126 affects Oracle Database Server’s portable clusterware component. The issue stems from insufficient input validation in Oracle Database Portable Clusterware, allowing an unauthenticated attacker with network access via DNS to compromise the component and potentially cause a partial ...

CVE-2024-21123

The CVE-2024-21123 issue affects Oracle Database Server (Oracle Database Core). Affected versions are 19.3 through 19.23. The root cause is insufficient input validation in the Oracle Database Core component, enabling a high-privileged attacker with SYSDBA privileges to compromise the Core when l...

CVE-2024-20996

Removed by vendor...