Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

Code injection

Vulnerability in the PL/SQL component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute on sys.utlhttp privilege with network access via Oracle Net to...

CVE-2023-22078

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2023-22127

CVE-2023-22127 affects Oracle Outside In Technology (Content Access SDK, Image Export SDK, PDF Export SDK, and HTML Export SDK) in Oracle Fusion Middleware, specifically version 8.5.6. The vulnerability allows a low-privileged, network-accessible attacker over HTTP to read data, perform unauthori...

CVE-2023-22129

CVE-2023-22129 affects Oracle Solaris 11 kernel on SPARC systems. The vulnerability allows a low-privilege user with logon to the host to cause a hang or frequently repeatable crash (DoS) of Oracle Solaris, with impact on availability and no confidentiality/integrity impact per the CVSS data. Con...

CVE-2023-22115

Removed by vendor...

CVE-2023-22114

Removed by vendor...

CVE-2023-22110

CVE-2023-22110 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.33 and earlier. Vulnerability allows a high-privilege, remote attacker to cause a hang or frequent, repeatable crashes (complete DOS) via network access across multiple protocols. Base score 4.9 (Availability impa...

CVE-2023-22110

Removed by vendor...

CVE-2023-22112

CVE-2023-22112 concerns Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.34 and earlier. Exploitation requires remote authentication with network access; impact is availability: attacker can cause hang or complete DoS via multiple protocols. Several connected advisories (Debian, AlmaL...

CVE-2023-22111

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: UDF. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks o...

CVE-2023-22108

CVE-2023-22108 is a vulnerability in Oracle WebLogic Server (Oracle Fusion Middleware) affecting Core in versions 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker with network access via T3/IIOP can compromise the server, potentially leading to unauthorized data access or full server access...

CVE-2023-22104

Removed by vendor...

CVE-2023-22097

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-22098

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.12. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2023-22095

Removed by vendor...

CVE-2023-22094

CVE-2023-22094 : Vulnerability in Oracle MySQL Installer (component: Installer: General). Affected: MySQL Installer versions prior to 1.6.8. Attack requires logon to the infrastructure where MySQL Installer runs and user interaction. Successful exploitation can lead to unauthorized creation, dele...

CVE-2023-22089

CVE-2023-22089 affects Oracle WebLogic Server (Fusion Middleware), specifically Core component in 12.2.1.4.0 and 14.1.1.0.0. The issue allows an unauthenticated attacker with network access via T3, IIOP (and other protocols per sources) to potentially takeover the WebLogic Server. Public risk fac...

CVE-2023-22084

Disclaimer: This data contains information about vulnerable...

CVE-2023-22079

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...