CVE-2024-21209

CVE-2024-21209 concerns the Oracle MySQL Client (Client: mysqldump). Affected: MySQL Client versions 8.4.2 and earlier, and 9.0.1 and earlier. Description indicates a high-privilege attacker with network access across multiple protocols could compromise the client, requiring human interaction, po...

CVE-2024-21206

CVE-2024-21206 affects Oracle E-Business Suite, Oracle Enterprise Command Center Framework (Diagnostics) with ECC 11–13. The issue stems from insufficient input validation in Diagnostics, enabling a low-privileged, network-authenticated attacker over HTTP to read a subset of data. The vulnerabili...

CVE-2024-21208

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;...

CVE-2024-21203

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromi...

CVE-2024-21205

CVE-2024-21205 affects Oracle Fusion Middleware’s Oracle Service Bus (OSB Core Functionality) in version 12.2.1.4.0. The vulnerability allows a low-privilege, network-accessible attacker via HTTP to access or compromise Oracle Service Bus data, with a CVSS base score of 6.5 (Confidentiality impac...

CVE-2024-21203

Removed by vendor...

CVE-2024-21201

CVE-2024-21201 pertains to Oracle MySQL Server (Server: Optimizer). Affected versions include 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability is described as a high-privilege, network-accessible flaw that could enable a complete denial-of-service (hang or crash) of...

CVE-2024-21200

CVE-2024-21200 is a MySQL Server vulnerability (component: Server: Optimizer) affecting MySQL 8.0.35 and earlier. It can be triggered by an attacker with network access via multiple protocols to cause a hang or complete DOS. Several connected advisories/plugin data (e.g., Nessus plugin UNPATCHED_...

CVE-2024-21202

CVE-2024-21202 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) with affected 8.59–8.61. The issue is exploitable over HTTP by unauthenticated network access; successful attacks require user interaction and may lead to unauthorized data updates, inserts, deletes, or reads wi...

CVE-2024-21200

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2024-21199

CVE-2024-21199 is a MySQL Server/InnoDB vulnerability affecting Oracle MySQL. The entry states that versions 8.0.39 and older, 8.4.2 and older, and 9.0.1 and older are affected. It is described as easily exploitable, with a high-privileged attacker able to exploit it over network via multiple pro...

CVE-2024-21199

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2024-21199

Removed by vendor...

CVE-2024-21195

CVE-2024-21195 affects Oracle BI Publisher (Oracle Analytics) - Layout Templates. Affected: 7.0.0.0.0, 7.6.0.0.0, 12.2.1.4.0. Root cause: insufficient input validation in Layout Templates. Risk: remote, network-accessible via HTTP, low privileges; may result in unauthorized data access, data modi...

CVE-2024-21196

Removed by vendor...

CVE-2024-21194

Removed by vendor...

RHSA-2024:1576 Red Hat Security Advisory: ruby:3.1 security, bug fix, and enhancement update

Bulletin has no description...

ZKteco iClock 信息泄露漏洞

ZKTeco iClock is a biometric fingerprint reader for time and attendance and access control applications from ZKTeco, a Chinese company. An information disclosure vulnerability exists in ZKteco iClock version v3.1-168, which originates from the exposure of sensitive information to unauthorized use...

BIT-MARIADB-2023-22084

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

WordPress WordPress Simple HTML Sitemap plugin <= 3.1 - Authenticated (Admin+) SQL Injection vulnerability

Authenticated Admin+ SQL Injection vulnerability discovered by Nguyễn Trung Kiên in WordPress Plugin WP Simple HTML Sitemap versions = 3.1...