CVE-2024-21069

Removed by vendor...

CVE-2024-21062

Removed by vendor...

CVE-2024-21056

CVE-2024-21056 affects Oracle MySQL Server (Server: DML); supported versions 8.0.34 and prior are impacted. The vulnerability allows a high-privileged attacker with network access via multiple protocols to cause a hang or frequent, complete denial of service of MySQL Server. CVSS 3.1 base score 4...

CVE-2024-21056

Removed by vendor...

CVE-2024-21053

CVE-2024-21053 affects Oracle MySQL Server (component: Server: DML). Affected: MySQL 8.0.34 and earlier. The vulnerability enables a high-privilege attacker with network access via multiple protocols to cause a hang or crash (complete DOS) of MySQL Server. Exploitation and impact details are docu...

CVE-2024-21052

CVE-2024-21052 affects Oracle MySQL Server (component: Server: DML). Affected: MySQL 8.0.34 and prior. The vulnerability could be exploited by a highly privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVS...

CVE-2024-21051

Removed by vendor...

CVE-2024-21047

Removed by vendor...

CVE-2024-21045

CVE-2024-21045 affects Oracle E-Business Suite, specifically the LOV component in the Complex Maintenance, Repair, and Overhaul product. Affected: EBS versions 12.2.3–12.2.13. Root cause: insufficient input validation in LOV allows an unauthenticated attacker with network access via HTTP to compr...

CVE-2024-21040

CVE-2024-21040 affects Oracle E-Business Suite, specifically the LOV component in Oracle Complex Maintenance, Repair, and Overhaul (12.2.3–12.2.13). The issue allows an unauthenticated attacker with network access over HTTP to read and modify data, with human interaction required for exploitation...

CVE-2024-21031

The CVE-2024-21031 entry concerns Oracle E-Business Suite, Oracle Complex Maintenance, Repair, and Overhaul LOV component. Affected versions are 12.2.3–12.2.13. The issue allows an unauthenticated attacker with network access over HTTP to compromise data after user interaction, potentially enabli...

CVE-2024-21024

CVE-2024-21024 affects Oracle E-Business Suite, specifically the LOV component in Oracle Complex Maintenance, Repair, and Overhaul. Affected versions are 12.2.3–12.2.13. The issue stems from insufficient input validation in LOV, allowing a remote, unauthenticated attacker with network access via ...

CVE-2024-21021

CVE-2024-21021 affects Oracle E-Business Suite, specifically the LOV component in the Complex Maintenance, Repair, and Overhaul module. Affected versions are 12.2.3–12.2.13. The vulnerability is exploitable over HTTP by an unauthenticated attacker and, though it requires user interaction, can lea...

CVE-2024-21018

CVE-2024-21018 affects Oracle E-Business Suite, specifically the Oracle Complex Maintenance, Repair, and Overhaul (LOV) component. Affected versions are 12.2.3–12.2.13. The issue allows an unauthenticated attacker with network access via HTTP, with required human interaction, to compromise LOV an...

CVE-2024-21019

The CVE-2024-21019 issue affects Oracle E-Business Suite, specifically the Complex Maintenance, Repair, and Overhaul (LOV) component, with affected versions 12.2.3–12.2.13. The vulnerability allows an unauthenticated attacker, with network access over HTTP, to compromise data confidentiality and ...

CVE-2024-21015

Removed by vendor...

CVE-2024-21011

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracl...

CVE-2024-20993

CVE-2024-20993 affects Oracle MySQL Server, specifically the Optimizer component. Affected versions are MySQL 8.0.35 and earlier and 8.2.0 and earlier. The vulnerability is exploitable by an attacker with network access via multiple protocols and is described as capable of causing a hang or a fre...

Electrolink FM/DAB/TV Transmitter

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : Electrolink Equipment : FM/DAB/TV Transmitter Vulnerabilities : Authentication Bypass by Assumed-Immutable Data, Reliance on Cookies without Validation and...

CVE-2024-3522

A vulnerability classified as critical has been found in Campcodes Online Event Management System 1.0. This affects an unknown part of the file /api/process.php. The manipulation of the argument userId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...