9437 matches found
CVE-2025-21491
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
CVE-2025-21521
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols ...
CVE-2025-21558
creationtimestamp| type| source ---|---|--- 2025-01-21 21:01:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2478 2025-01-21 21:19:14+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrqw335o27 2025-01-21 22:50:09+00:00| seen| https://t.me/cvedetector/16023...
CVE-2025-21571
creationtimestamp| type| source ---|---|--- 2025-01-21 21:00:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2465 2025-01-21 21:19:51+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrrufkno2f 2025-01-21 22:05:00+00:00| seen|...
CVE-2025-21569
...
CVE-2025-21567
...
CVE-2025-21563
...
CVE-2025-21564
...
CVE-2025-21564
Oracle Agile PLM Framework (Oracle Supply Chain) is affected in version 9.3.6, specifically the Agile Integration Services component. The CVE entry describes an easily exploitable vulnerability allowing a low-privileged attacker with network access via HTTP to obtain unauthorized access to critic...
CVE-2025-21560
...
CVE-2025-21560
CVE-2025-21560 affects Oracle Agile PLM Framework (component: SDK) with vulnerable 9.3.6. A low-privilege, network-access attacker (HTTP) can compromise the framework, potentially gaining unauthorized access to critical data or all data accessible by Oracle Agile PLM Framework. Concrete details f...
CVE-2025-21555
...
CVE-2025-21553
CVE-2025-21553 affects Oracle Database Server Java VM. Affected versions: 19.3–19.25, 21.3–21.16, 23.4–23.6. The issue enables a low-privilege user with Create Session/Create Procedure and network access via Oracle Net to compromise the Java VM, potentially enabling unauthorized updates/deletes a...
CVE-2025-21553
...
CVE-2025-21551
...
CVE-2025-21552
CVE-2025-21552 affects JD Edwards EnterpriseOne Orchestrator (E1 IOT Orchestrator Security). Connected PT-2025-4274 details a vulnerability due to insufficient input validation in the E1 IOT Orchestrator Security component, with affected versions prior to 9.2.9.2.Impact: low-privilege attacker wi...
CVE-2025-21548
The CVE-2025-21548 entry concerns Oracle MySQL Connectors (Connector/Python) with affected versions 9.1.0 and prior. The vulnerability enables a high-privileged attacker, with network access via multiple protocols, to compromise MySQL Connectors. Attacks require user interaction from someone othe...
CVE-2025-21547
...
CVE-2025-21549
CVE-2025-21549 relates to Oracle WebLogic Server (Fusion Middleware) core in version 14.1.1.0.0. The vulnerability permits an unauthenticated attacker with network access over HTTP/2 to cause the WebLogic Server to hang or crash (complete DOS). This aligns with the CVSS v3.1 base score of 7.5 (Av...