9437 matches found
CVE-2025-21546
CVE-2025-21546 affects Oracle MySQL Server (Server: Privileges) with vulnerable ranges: 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The Nessus-based sources describe this as an easily exploitable, network-accessible vulnerability that can let a high-privileged attacker update, insert,...
CVE-2025-21540
...
CVE-2025-21537
...
CVE-2025-21535
...
CVE-2025-21536
...
CVE-2025-21536
CVE-2025-21536 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or a complete denial of ...
CVE-2025-21533
CVE-2025-21533 is a local vulnerability in Oracle VM VirtualBox Core affecting older 7.0.x and 7.1.x releases (prior to 7.0.24 and prior to 7.1.6). A low-privilege user with logon can compromise VirtualBox, potentially giving unauthorized access to data. CVSS v3.1 base score 5.5 (C:H, I:N, A:N). ...
CVE-2025-21534
...
CVE-2025-21530
CVE-2025-21530 affects Oracle PeopleSoft’s Enterprise PeopleTools, specifically the Panel Processor in PeopleSoft PeopleTools versions 8.60 and 8.61. The vulnerability allows a low-privilege, network-access attacker (HTTP) to read a subset of data in PeopleSoft Enterprise PeopleTools, with CVSS v...
CVE-2025-21530
...
CVE-2025-21528
...
CVE-2025-21526
CVE-2025-21526 affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access) with affected versions 20.12.1.0–20.12.21.5, 21.12.1.0–21.12.20.0, 22.12.1.0–22.12.16.0 and 23.12.1.0–23.12.10.0. The vulnerability can be exploited by a low-privilege, network-accessing attacker via H...
CVE-2025-21524
CVE-2025-21524 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Monitoring and Diagnostics SEC component. Affected are versions prior to 9.2.9.0; an unauthenticated attacker with network access over HTTP can compromise JD Edwards EnterpriseOne Tools, potentially taking over the too...
CVE-2025-21520
...
CVE-2025-21521
CVE-2025-21521 concerns Oracle MySQL Server (Server: Thread Pooling). Affected: MySQL Server versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by an unauthenticated attacker who can access the server over multiple network protocols, potentia...
CVE-2025-21519
CVE-2025-21519 affects Oracle MySQL Server across multiple lines of product/version targets: 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability targets the Server: Security: Privileges area and is described as a difficult-to-exploit flaw that would allow a high-privil...
CVE-2025-21514
CVE-2025-21514 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC). The vulnerability stems from insufficient input validation in the Web Runtime SEC component, allowing an unauthenticated attacker with network access via HTTP to read a subset of accessible data. Affected product/vers...
CVE-2025-21515
CVE-2025-21515 concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component, affected in versions before 9.2.9.0. The vulnerability allows a low-privileged attacker with network access over HTTP to takeover JD Edwards EnterpriseOne Tools, with CVSS v3.1 base score 8....