6697 matches found
CVE-2023-21940
Removed by vendor...
CVE-2023-21939
CVE-2023-21939 affects Oracle Java SE and GraalVM Enterprise Edition Swing component across several versions (e.g., Java 8u361, 11.0.18, 17.0.6, 20; GraalVM EE 20.3.9/21.3.5/22.3.1). It is an easily exploitable, unauthenticated remote issue over HTTP that can lead to unauthorized update/insert/de...
CVE-2023-21939
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Swing. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Easily exploitable...
CVE-2023-21937
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to explo...
CVE-2023-21937
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to explo...
CVE-2023-21934
The CVE-2023-21934 issue affects Oracle Database Server (Java VM component) in 19c and 21c. The root cause is described in connected sources as insufficient input validation in the Java VM, enabling a low-privileged user with network access via TLS to compromise the Java VM and potentially read, ...
CVE-2023-21933
CVE-2023-21933 affects Oracle MySQL Server (component: Server: DDL). Affected: MySQL 8.0.32 and earlier. Described as an easily exploitable vulnerability where a high-privilege attacker, through network access via multiple protocols, can cause the server to hang or crash (DoS). The F5 advisory no...
CVE-2023-21930
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...
CVE-2023-21930
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...
CVE-2023-21930
CVE-2023-21930 affects Oracle Java SE and GraalVM Enterprise Edition (JSSE component) on Java 8u361, 11.0.18, 17.0.6, 20 and GraalVM 20.3.9/21.3.5/22.3.1. An unauthenticated attacker with network access over TLS can compromise data confidentiality and integrity; exploitation is possible via TLS h...
CVE-2023-21927
CVE-2023-21927 affects Oracle JD Edwards EnterpriseOne Tools (Interoperability SEC). Affected versions are prior to 9.2.7.3. An attacker with network access via HTTP and low privileges can obtain unauthorized read access to a subset of JD Edwards EnterpriseOne Tools data. CVSSv3.1 score is 4.3 (C...
CVE-2023-21929
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DDL. Supported versions that are affected are 8.0.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...
CVE-2023-21924
The CVE-2023-21924 entry concerns Oracle Health Sciences InForm (Core) within Oracle Health Sciences Applications. Affected versions are prior to 6.3.1.3 and prior to 7.0.0.1. The vulnerability is exploitable by a high-privilege attacker with network access via HTTP, with user interaction require...
CVE-2023-21923
The CVE-2023-21923 vulnerability affects Oracle Health Sciences InForm (Core) within Oracle Health Sciences Applications. Affected versions are prior to 6.3.1.3 and prior to 7.0.0.1. An attacker with low privileges who can reach the system over HTTP can compromise InForm, leading to unauthorized ...
CVE-2023-21920
Summary: CVE-2023-21920 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.32 and earlier. Exploitable with network access via multiple protocols by a highly privileged attacker, leading to a hang or frequent crashes (DoS) of MySQL Server. CVSS v3.1 base score 4.9 (Impact: Avail...
CVE-2023-21919
Removed by vendor...
CVE-2023-21917
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2023-21912
The CVE-2023-21912 entry refers to Oracle MySQL Server (Server: Security: Privileges) with affected versions 5.7.41 and earlier and 8.0.30 and earlier. An unauthenticated attacker can reach the service over network protocols and cause a hang or a frequently repeatable crash (DOS). The vulnerabili...