Buffer overflow

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

UBUNTU-CVE-2023-22001

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2023-21988

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.44 and Prior to 7.0.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2023-22000

CVE-2023-22000 affects Oracle VM VirtualBox Core. Affected versions are prior to 6.1.44 and prior to 7.0.8. The issue is exploitable by a local attacker with logon to the infrastructure where VirtualBox executes and can lead to unauthorized read/update/delete of Oracle VM VirtualBox data, with co...

CVE-2023-21991

Summary: CVE-2023-21991 affects Oracle VM VirtualBox (Core). The vulnerability is present in supported VirtualBox versions prior to 6.1.44 and prior to 7.0.8. It enables a high-privilege attacker with local logon to the host to compromise VirtualBox, with potential unauthorized read access to a s...

CVE-2023-21971

CVE-2023-21971 concerns Oracle MySQL Connectors, specifically the Connector/J component. Affected are 8.0.32 and earlier versions. The vulnerability, described as difficult to exploit, allows a high-privilege attacker with network access via multiple protocols to compromise MySQL Connectors. Impa...

CVE-2023-21968

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploi...

CVE-2023-21930

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...

CVE-2023-21929

CVE-2023-21929 affects Oracle MySQL Server (component: Server: DDL) in MySQL 8.0.32 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DoS) and perform unauthorized data updates/inserts/deletes on accessible data. R...

Oracle Business Intelligence Enterprise Edition 安全漏洞

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle. Visualize and analyze enterprise data to aid decision-making, reduce total cost of ownership, and increase ROI across the organization. A security vulnerability exists in Oracle Business...

PT-2023-2497 · Oracle · Oracle Hospitality Opera 5 Property Services

Name of the Vulnerable Software and Affected Versions: Oracle Hospitality OPERA 5 Property Services version 5.6 Description: The issue is related to insufficient input validation in the OXI component of Oracle Hospitality OPERA 5 Property Services. This allows a remote attacker with high privileg...

Oracle WebLogic Server 安全漏洞

Oracle WebLogic Server is an application services middleware for cloud and legacy environments from Oracle Corporation that provides a modern lightweight development platform that supports the entire lifecycle management of applications from development to production and simplifies application...

PT-2023-2526 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19c and 21c Description: The issue is related to insufficient input validation in the Java VM component of the Oracle Database Server. This can be exploited by a remote attacker to gain read, modify, add, or...

PT-2023-2634 · Oracle · Oracle Banking Virtual Account Management

Name of the Vulnerable Software and Affected Versions: Oracle Banking Virtual Account Management versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the OBVAM Trn Journal Domain component. It allows a high-privileged attacker with network access via HT...

PT-2023-2668 · Mysql Server +2 · Mysql Connectors +2

Name of the Vulnerable Software and Affected Versions: MySQL Connectors versions 8.0.32 and prior Description: The vulnerability exists due to insufficient input validation in the Connector/J component of the MySQL Connectors product. A difficult to exploit vulnerability allows a high privileged...

Oracle Java SE和Oracle GraalVM 安全漏洞

Oracle Java SE and Oracle GraalVM are both products of Oracle Corporation.Oracle Java SE is a product for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle GraalVM is a set of on-the-fly compilers written in the Java language...

Oracle Siebel CRM 安全漏洞

Oracle Siebel CRM is a set of customer relationship management solutions from Oracle Oracle. The solution includes modules for sales management, marketing management, customer service system, and call center. A security vulnerability exists in Oracle Siebel CRM version 23.3 and earlier versions,...

Oracle Java SE和Oracle GraalVM 安全漏洞

Oracle Java SE and Oracle GraalVM are both products of Oracle Corporation.Oracle Java SE is a product for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments.Oracle GraalVM is a set of on-the-fly compilers written in the Java language...

PT-2023-2635 · Oracle · Oracle Banking Virtual Account Management

Name of the Vulnerable Software and Affected Versions: Oracle Banking Virtual Account Management versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the OBVAM Trn Journal Domain component. It allows a high-privileged attacker with network access via HT...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause unauthorized MySQL connector hangs or frequent and repeated crashes, as well as unauthorized update, insert, or delete acces...