Oracle MySQL Server Component Access Control Error Vulnerability (CNVD-2019-26535)

MyOracle MySQL is an open source relational database management system from Oracle, MySQL Server is one of the database server components. An Access Control Error vulnerability exists in the Server: Replication subcomponent of the MySQL Server component of Oracle MySQL, version 5.7.25 and earlier...

PT-2019-6353 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.0.12 and prior Description: The issue is related to insufficient access control in the MySQL Server component, specifically in the Server: GIS subcomponent. It allows a high-privileged attacker with network access via...

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS attacks. The vulnerability exists in the subcomponent Server: DML in the MySQL Server component of Oracle MySQL. A high privileged attacker with network access via multiple protocols could compromise MySQL Server resulting in a frequently repeatable...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in an unknown functionality of the subcomponent AWT. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedded, JRockit causing a partial DoS condition...

Important: Red Hat Security Advisory: rhvm-appliance security update

An update for rhvm-appliance is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Oracle WebLogic Server deserialization remote code execution

Added: 05/02/2019 CVE: CVE-2019-2725 BID: 108074 Background Oracle WebLogic Server formerly BEA WebLogic Server is a Java web application platform. Problem Oracle WebLogic Server component of Oracle Fusion Middleware has a deserialization vulnerability in Web Services subcomponent, which allows...

The vulnerability of the Messages sub-component of the Oracle Work in Process component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to protected data.

The vulnerability of the Messages sub-component of the Oracle Work in Process component in the Oracle E-Business Suite is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected data using the...

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool (formerly XML Publisher) allows a malicious individual to gain access to modify, add, or delete data.

The vulnerability of the BI Publisher Security sub-component of the BI Publisher reporting tool formerly XML Publisher is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or delete data using the HTTP protocol...

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system allows a perpetrator to gain access to modify, add, or delete data.

The vulnerability of the Renewals sub-component of the Oracle Service Contracts component in the Oracle E-Business Suite system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to modify, add, or delete data...

CVE-2019-2622

Vulnerability in the Oracle Service Contracts component of Oracle E-Business Suite subcomponent: Renewals. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with...

The vulnerability of the Preferences sub-component of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite allows a perpetrator to access data for modification, addition, or deletion.

The vulnerability of the Preferences sub-component of the Oracle CRM Technical Foundation component of the Oracle E-Business Suite is related to lack of access control. Exploiting this vulnerability could allow an attacker, operating remotely, to modify, add, or delete data using the HTTP protoco...

Oracle Java SE Access Control Error Vulnerability (CNVD-2019-26756)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. An access control error vulnerability exists in the 2D subcomponent of Oracle Java SE versions 7u211 and 8u202. An attacker...

Unspecified Vulnerability in Oracle Virtualization VM VirtualBox Component (CNVD-2019-36160)

Oracle Virtualization is a set of virtualization solutions from Oracle Corporation. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the virtual...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-11754)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer subcomponent of the MySQL Server component in Oracle MySQL, version 8.0.15 and earlier. An...

Oracle Java SE Access Control Error Vulnerability (CNVD-2019-26757)

Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. An Access Control Error vulnerability exists in the 2D subcomponent of the component in Oracle Java SE versions 7u211 and...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-11751)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Optimizer subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and earlier. An...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-12173)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Security: Privileges subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-12172)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Options subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and earlier. An...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-12451)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the Server: Security: Privileges subcomponent of the MySQL Server component of Oracle MySQL, version 8.0.15 and...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2019-10375)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the InnoDB subcomponent of the MySQL Serve component of Oracle MySQL, version 8.0.15 and earlier. An attacker coul...