9710 matches found
CVE-2025-21555
...
CVE-2025-21553
CVE-2025-21553 affects Oracle Database Server Java VM. Affected versions: 19.3–19.25, 21.3–21.16, 23.4–23.6. The issue enables a low-privilege user with Create Session/Create Procedure and network access via Oracle Net to compromise the Java VM, potentially enabling unauthorized updates/deletes a...
CVE-2025-21553
...
CVE-2025-21551
...
CVE-2025-21552
CVE-2025-21552 affects JD Edwards EnterpriseOne Orchestrator (E1 IOT Orchestrator Security). Connected PT-2025-4274 details a vulnerability due to insufficient input validation in the E1 IOT Orchestrator Security component, with affected versions prior to 9.2.9.2.Impact: low-privilege attacker wi...
CVE-2025-21547
...
CVE-2025-21549
CVE-2025-21549 relates to Oracle WebLogic Server (Fusion Middleware) core in version 14.1.1.0.0. The vulnerability permits an unauthenticated attacker with network access over HTTP/2 to cause the WebLogic Server to hang or crash (complete DOS). This aligns with the CVSS v3.1 base score of 7.5 (Av...
CVE-2025-21548
The CVE-2025-21548 entry concerns Oracle MySQL Connectors (Connector/Python) with affected versions 9.1.0 and prior. The vulnerability enables a high-privileged attacker, with network access via multiple protocols, to compromise MySQL Connectors. Attacks require user interaction from someone othe...
CVE-2025-21545
...
CVE-2025-21546
CVE-2025-21546 affects Oracle MySQL Server (Server: Privileges) with vulnerable ranges: 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The Nessus-based sources describe this as an easily exploitable, network-accessible vulnerability that can let a high-privileged attacker update, insert,...
CVE-2025-21540
...
CVE-2025-21537
...
CVE-2025-21535
...
CVE-2025-21536
CVE-2025-21536 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or a complete denial of ...
CVE-2025-21536
...
CVE-2025-21533
CVE-2025-21533 is a local vulnerability in Oracle VM VirtualBox Core affecting older 7.0.x and 7.1.x releases (prior to 7.0.24 and prior to 7.1.6). A low-privilege user with logon can compromise VirtualBox, potentially giving unauthorized access to data. CVSS v3.1 base score 5.5 (C:H, I:N, A:N). ...
CVE-2025-21534
...
CVE-2025-21530
CVE-2025-21530 affects Oracle PeopleSoft’s Enterprise PeopleTools, specifically the Panel Processor in PeopleSoft PeopleTools versions 8.60 and 8.61. The vulnerability allows a low-privilege, network-access attacker (HTTP) to read a subset of data in PeopleSoft Enterprise PeopleTools, with CVSS v...