CVE-2023-21882

CVE-2023-21882 affects Oracle MySQL Server (Server: Optimizer). Affected: MySQL 8.0.31 and earlier. attacker with network access via multiple protocols can compromise data integrity (unauthorized updates) with high privileges and no user interaction. Root cause: Server: Optimizer vulnerability. R...

CVE-2023-21883

Removed by vendor...

CVE-2023-21884

CVE-2023-21884 affects Oracle VM VirtualBox (Core) where affected versions are prior to 6.1.42 and prior to 7.0.6. An attacker with local logon and high privileges can cause a hang or frequent crashes (DoS) of VirtualBox. Multiple connected advisories corroborate the same fixed versions: upgrade ...

CVE-2023-21883

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21880

CVE-2023-21880 affects Oracle MySQL Server (InnoDB) with affected versions 8.0.31 and earlier. The described impact is the attacker, with network access via multiple protocols and with high privileges, can cause a hang or frequent crashes (DoS) and may achieve unauthorized update/insert/delete on...

CVE-2023-21880

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of thi...

CVE-2023-21878

Removed by vendor...

CVE-2023-21878

CVE-2023-21878 affects MySQL Server (component: Server: Optimizer) with affected versions 8.0.31 and earlier. The vulnerability allows an attacker with network access (via multiple protocols) to potentially cause a hang or frequent crash (DoS). Public advisories in connected docs show remediation...

CVE-2023-21873

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.31 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21872

Removed by vendor...

CVE-2023-21870

CVE-2023-21870 is a MySQL Server vulnerability in the Server: Optimizer component. Affected versions are 8.0.31 and earlier. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or complete denial of service (DOS) on the MySQL Server, per the initi...

CVE-2023-21871

CVE-2023-21871 concerns Oracle MySQL Server, component InnoDB. The connected documents confirm affected versions up to 8.0.31 and earlier, with an attacker able to exploit remotely across multiple protocols to achieve a hang or crash (complete DOS) of MySQL Server. The material does not provide s...

CVE-2023-21866

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2023-21868

CVE-2023-21868 is a vulnerability in Oracle MySQL Server (Server: Optimizer). Affected are MySQL 8.0.31 and earlier. A low-privilege, network-access attacker can cause a hang or crash (DOS). This is corroborated by connected advisories stating the same affected component/versions and impact. Reme...

CVE-2023-21866

Removed by vendor...

CVE-2023-21864

CVE-2023-21864 is a MySQL Server vulnerability in the Oracle MySQL product (component: Server: Optimizer). Affected versions listed across connected docs are 8.0.30 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or repeat...

CVE-2023-21865

Removed by vendor...

CVE-2023-21845

Affected product: Oracle PeopleSoft – PeopleTools, Panel Processor component in version 8.60. Vulnerability details: insufficient input validation in Panel Processor allows a low-privileged, network-accessible attacker via HTTP to perform unauthorized update/insert/delete on some data and unautho...

CVE-2023-21840

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PS. Supported versions that are affected are 5.7.40 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

CVE-2023-21838

The CVE-2023-21838 entry affects Oracle WebLogic Server (Fusion Middleware Core) with versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The issue is due to insufficient input validation in the Core component, allowing an unauthenticated attacker with network access via T3 or IIOP to trigger a hang...