42967 matches found
CVE-2024-21218
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
CVE-2024-21216
CVE-2024-21216 affects Oracle WebLogic Server (Fusion Middleware core) with affected versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability enables an unauthenticated attacker who can reach the server over T3 or IIOP to execute code and potentially take over the WebLogic Server. CVSS 3.1 base scor...
CVE-2024-21217
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;...
CVE-2024-21213
Removed by vendor...
CVE-2024-21213
CVE-2024-21213 concerns Oracle MySQL Server (InnoDB) with affected versions: 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability is described as an easily exploitable denial of service causing a hang or crash of MySQL Server, enabling a high-privilege attacker who can ...
CVE-2024-21209
CVE-2024-21209 concerns the Oracle MySQL Client (Client: mysqldump). Affected: MySQL Client versions 8.4.2 and earlier, and 9.0.1 and earlier. Description indicates a high-privilege attacker with network access across multiple protocols could compromise the client, requiring human interaction, po...
CVE-2024-21206
CVE-2024-21206 affects Oracle E-Business Suite, Oracle Enterprise Command Center Framework (Diagnostics) with ECC 11–13. The issue stems from insufficient input validation in Diagnostics, enabling a low-privileged, network-authenticated attacker over HTTP to read a subset of data. The vulnerabili...
CVE-2024-21208
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;...
CVE-2024-21205
CVE-2024-21205 affects Oracle Fusion Middleware’s Oracle Service Bus (OSB Core Functionality) in version 12.2.1.4.0. The vulnerability allows a low-privilege, network-accessible attacker via HTTP to access or compromise Oracle Service Bus data, with a CVSS base score of 6.5 (Confidentiality impac...
CVE-2024-21203
Removed by vendor...
CVE-2024-21203
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: FTS. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromi...
CVE-2024-21201
CVE-2024-21201 pertains to Oracle MySQL Server (Server: Optimizer). Affected versions include 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability is described as a high-privilege, network-accessible flaw that could enable a complete denial-of-service (hang or crash) of...
CVE-2024-21200
CVE-2024-21200 is a MySQL Server vulnerability (component: Server: Optimizer) affecting MySQL 8.0.35 and earlier. It can be triggered by an attacker with network access via multiple protocols to cause a hang or complete DOS. Several connected advisories/plugin data (e.g., Nessus plugin UNPATCHED_...
CVE-2024-21202
CVE-2024-21202 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) with affected 8.59–8.61. The issue is exploitable over HTTP by unauthenticated network access; successful attacks require user interaction and may lead to unauthorized data updates, inserts, deletes, or reads wi...
CVE-2024-21200
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2024-21199
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
CVE-2024-21199
Removed by vendor...
CVE-2024-21199
CVE-2024-21199 is a MySQL Server/InnoDB vulnerability affecting Oracle MySQL. The entry states that versions 8.0.39 and older, 8.4.2 and older, and 9.0.1 and older are affected. It is described as easily exploitable, with a high-privileged attacker able to exploit it over network via multiple pro...
CVE-2024-21195
CVE-2024-21195 affects Oracle BI Publisher (Oracle Analytics) - Layout Templates. Affected: 7.0.0.0.0, 7.6.0.0.0, 12.2.1.4.0. Root cause: insufficient input validation in Layout Templates. Risk: remote, network-accessible via HTTP, low privileges; may result in unauthorized data access, data modi...