UBUNTU-CVE-2024-21235

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracl...

CVE-2024-21285

Oracle Banking Liquidity Management (Oracle Financial Services Applications) is affected in version 14.5.0.12.0, specifically the Reports component. The issue allows a low-privilege, network-access attacker (HTTP) to compromise the system, with human interaction required, potentially resulting in...

CVE-2024-21284

CVE-2024-21284 affects Oracle Banking Liquidity Management (Oracle Financial Services Applications), component Reports, in version 14.5.0.12.0. The vulnerability can be exploited by a low-privileged attacker with HTTP network access, requiring user interaction, and can lead to takeover of the aff...

CVE-2024-21277

CVE-2024-21277 affects Oracle E-Business Suite (Oracle MES for Process Manufacturing, Device Integration) with supported versions 12.2.3–12.2.13. The vulnerability allows a low-privileged, network-accessing attacker over HTTP to cause unauthorized creation, deletion or modification of data, or un...

CVE-2024-21275

CVE-2024-21275 affects Oracle E-Business Suite, specifically the Oracle Quoting UI component, with affected versions 12.2.7–12.2.13. The issue arises from weaknesses in the authorization mechanism, enabling a low-privileged, network-accessible attacker (HTTP) to cause unauthorized creation, delet...

CVE-2024-21272

CVE-2024-21272 involves Oracle MySQL Connectors (Connector/Python). Affected: MySQL Connectors product, Connector/Python component, versions 9.0.0 and earlier. Vulnerability allows a remote, low-privilege attacker with network access via multiple protocols to compromise the MySQL Connectors, pote...

Access Control Bypass

Overview mysql-connector-python is a MySQL driver written in Python which does not depend on MySQL C client libraries and implements the DB API v2.0 specification PEP-249. Affected versions of this package are vulnerable to Access Control Bypass via multiple protocols. An attacker can take over t...

CVE-2024-21272

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

CVE-2024-21272

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...

CVE-2024-21260

CVE-2024-21260 affects Oracle WebLogic Server (Fusion Middleware Core). The vulnerability concerns Core input handling in WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0, reported to be exploitable without authentication over T3/IIOP and capable of causing a hang or complete denial of service....

CVE-2024-21254

CVE-2024-21254 affects Oracle Analytics’ Oracle BI Publisher Web Server component (and concerns Layout Templates) with versions 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. The flaw allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle BI Publisher, potentially takeover the p...

CVE-2024-21255

CVE-2024-21255 concerns Oracle PeopleSoft PeopleTools, specifically the XMLPublisher component in PeopleSoft Enterprise PeopleTools. The connected PT-2023-9582 entry provides concrete details: affected software is PeopleSoft Enterprise PeopleTools versions 8.59–8.61, with a flaw in input validati...

CVE-2024-21252

CVE-2024-21252 affects Oracle E-Business Suite, Oracle Product Hub (Item Catalog) in versions 12.2.3–12.2.13. The issue allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification of data, and unauthorized data access (Confidentiality/Inte...

CVE-2024-21250

CVE-2024-21250 affects Oracle E-Business Suite, specifically the Process Manufacturing Product Development module’s Quality Manager Specification. Affected are versions 12.2.13–12.2.14. The underlying issue is an authorization weakness in the Quality Manager Specification component, allowing a lo...

CVE-2024-21247

Removed by vendor...

CVE-2024-21247

Technical details for CVE-2024-21247 are not provided in the connected documents. The available content lists affected MySQL Client versions and impact but lacks root cause, exploit specifics, or remediation details; monitor for updates.

CVE-2024-21239

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2024-21241

Removed by vendor...

CVE-2024-21241

CVE-2024-21241 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by a network-adjacent attacker with high privileges via multiple protocols to cause a hang or crash (DoS) in ...

CVE-2024-21239

CVE-2024-21239: Oracle MySQL Server InnoDB vulnerability affecting MySQL Server 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. An attacker with network access via multiple protocols can exploit this to cause a denial of service (hang or frequently repeating crash) in MySQL Server. ...