CVE-2024-21103

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21059

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

CVE-2024-21001

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics component: BI Platform Security. The supported version that is affected is 7.0.0.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2024-20994

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromis...

CVE-2024-21121

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

UBUNTU-CVE-2024-21115

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21115

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21110

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

UBUNTU-CVE-2024-21113

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

UBUNTU-CVE-2024-21106

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21114

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

UBUNTU-CVE-2024-21121

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21119

CVE-2024-21119 affects Oracle Outside In Technology (Outside In Core) within Oracle Fusion Middleware. Affected: Oracle Outside In Technology versions 8.5.6–8.5.7. Local authenticated attackers can gain update/insert/delete permissions and read access to data, with potential partial denial of ser...

CVE-2024-21116

CVE-2024-21116 concerns Oracle VM VirtualBox (Core) on Linux hosts, affected before 7.0.16. The vulnerability enables a local, low-privilege attacker with logon rights to compromise VirtualBox, potentially taking over the VMs or the host as stated in the CVSS 3.1 base score 7.8 (C/I/A: High). Con...

CVE-2024-21115

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21112

Oracle VM VirtualBox Core is affected (prior to 7.0.16). The CVE-2024-21112 issue allows a low-privilege, locally authenticated attacker to compromise VirtualBox, with potential scope change to impact other products and complete takeover. Public sources (NVD/NCSC/Mageia/NASL highlights) corrobora...

CVE-2024-21110

CVE-2024-21110 affects Oracle VM VirtualBox core in Oracle Virtualization. Affected are supported versions prior to 7.0.16. The vulnerability allows a low-privilege, locally logged-on attacker (with required user interaction) to take over VirtualBox. CVSS 3.1 base score 7.3 (C/H, I/H, A/H). Mitig...

CVE-2024-21111

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2024-21103

CVE-2024-21103 concerns Oracle VM VirtualBox (Core) on Linux hosts. Affected are versions prior to 7.0.16; vulnerability allows a local, low-privilege attacker with logon to the host to compromise VirtualBox, potentially leading to takeover. The CVSS v3.1 base score is 7.8 (High impact on confide...

CVE-2024-3505

JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read the proxy configuration. This does not affect JFrog cloud deployments...