CVE-2021-35545

CVE-2021-35545 affects Oracle VM VirtualBox prior to 6.1.28 (Core component). The vulnerability enables a high-privilege attacker with local access to compromise VirtualBox, potentially leading to a hang/complete DoS and unauthorized read access to a subset of data. Several connected sources corr...

CVE-2021-35545

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-35546

The CVE-2021-35546 entry concerns Oracle MySQL Server (component: Server: Replication). Affected software: MySQL Server 8.0.26 and earlier. Description in sources indicates an easily exploitable vulnerability where a highly privileged attacker with network access via multiple protocols can cause ...

CVE-2021-35543

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Activity Guide Composer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2021-35543

Affected product: Oracle PeopleSoft, specifically PeopleSoft Enterprise CC Common Application Objects (Activity Guide Composer) in version 9.2. Root cause/impact: a vulnerability that enables a low-privileged, network-accessing attacker (via HTTP) to gain unauthorized access to or modify critical...

CVE-2021-35542

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.28. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-35538

CVE-2021-35538 affects Oracle VM VirtualBox prior to 6.1.28. The vulnerability is described as a sandbox escape allowing a low-privileged user with logon to the infrastructure running VirtualBox to compromise the host VirtualBox instance, with potential takeover. The issue is part of a set of fix...

CVE-2021-35537

Removed by vendor...

CVE-2021-35536

Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Deal Management...

CVE-2021-35536

Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite component: Miscellaneous. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Deal Management...

CVE-2021-2485

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Quotes. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful...

CVE-2021-35536

CVE-2021-35536 affects Oracle E-Business Suite Deal Management (Miscellaneous); affected versions are 12.1.1–12.1.3. An easily exploitable issue allows a low-privileged attacker with network access via HTTP to compromise Deal Management, enabling unauthorized creation, deletion, or modification o...

CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2484

Vulnerability in the Oracle Operations Intelligence product of Oracle E-Business Suite component: BIS Operations Intelligence. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2021-2483

The CVE-2021-2483 entry affects Oracle E-Business Suite’s Content Manager, specifically the Content Item Manager component, with affected versions 12.1.1–12.1.3. A low-privileged, network-accessible attacker (HTTP) can exploit this to compromise confidentiality and integrity by unauthorized creat...

CVE-2021-2482

CVE-2021-2482 affects Oracle E-Business Suite Payables, Invoice Approvals (versions 12.1.1–12.1.3). The Red Hat/NVD entries corroborate a vulnerability that can be exploited by a low-privilege, remote attacker over HTTP to compromise Oracle Payables, leading to unauthorized creation/deletion/modi...

CVE-2021-2481

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2021-2480

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware component: Web Listener. The supported version that is affected is 11.1.1.9.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful...

CVE-2021-2478

Removed by vendor...

CVE-2021-2476

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Authentication. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportation...