CVE-2021-35640

CVE-2021-35640 affects Oracle MySQL Server (component: Server: DDL). Affected: MySQL 8.0.26 and earlier. Attack scenario: high-privilege attacker with network access via multiple protocols can exploit the flaw to perform unauthorized updates/inserts/deletes on some MySQL data. Impact per CVE desc...

CVE-2021-35630

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Options. Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attac...

CVE-2021-35625

Removed by vendor...

CVE-2021-35624

Removed by vendor...

CVE-2021-35623

Removed by vendor...

CVE-2021-35585

Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite component: User Interface. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Incentive...

CVE-2021-35570

The CVE-2021-35570 vulnerability affects Oracle E-Business Suite Mobile Field Service (Admin UI) and is exploitable by a low-privilege, network-accessible attacker via HTTP, potentially leading to unauthorized data creation/deletion/modification. Affected versions are 12.1.1–12.1.3 and 12.2.3–12....

CVE-2021-35569

Concretely affecting Oracle E-Business Suite, the Oracle Applications Manager Diagnostics component (OAM) is vulnerable under CVE-2021-35569. The affected supported versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows a high-privilege attacker with network access via HTTP to compromis...

CVE-2021-35567

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows low privileged attack...

CVE-2021-35564

CVE-2021-35564 affects Java SE (Keytool) and Oracle GraalVM Enterprise Edition, with affected Java SE versions 7u311, 8u301, 11.0.12, 17 and GraalVM EE 20.3.3/21.2.0. The vulnerability is exploitable remotely with unauthenticated network access and can lead to unauthorized updates/insertions/dele...

CVE-2021-2485

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Quotes. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful...

CVE-2021-2485

Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite component: Quotes. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful...

CVE-2021-2483

Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite component: Content Item Manager. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Content Manager...

CVE-2021-2474

CVE-2021-2474 affects Oracle E-Business Suite Web Analytics (Admin) with affected 12.1.1–12.1.3. The vulnerability allows a low-privileged, network-accessing attacker over HTTP to compromise data, enabling unauthorized creation, deletion or modification of Oracle Web Analytics data, or broader ac...

CVE-2021-2471

Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/J. Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful...

CVE-2021-35550

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated...

CVE-2021-38150

When an attacker manages to get access to the local memory, or the memory dump of a victim, for example by a social engineering attack, SAP Business Client versions - 7.0, 7.70, will allow him to read extremely sensitive data, such as credentials. This would allow the attacker to compromise the...

CVE-2021-30683

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-003 Catalina, Security Update 2021-004 Mojave. A malicious application could execute arbitrary code leading to compromise of user information...

RATES SYSTEM 1.0 - (Multiple) SQL Injections Vulnerabilities

Exploit Title: RATES SYSTEM 1.0 - 'Multiple' SQL Injections Exploit Author: Halit AKAYDIN hLtAkydn Software Link: https://www.sourcecodester.com/php/14904/rates-system.html Version: V1.0 Category: Webapps Tested on: Linux/Windows Description: PHP Dashboards is prone to an SQL-injection...

PT-2021-6468 · Xen +1 · Xen +1

Name of the Vulnerable Software and Affected Versions: Xen affected versions not specified Description: The issue is related to weaknesses in the authentication procedure of the Xen hypervisor. Exploitation of this issue allows an attacker to access confidential data, compromise its integrity, an...