Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Stored Procedure. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2021-2032

Vulnerability in the MySQL Server product of Oracle MySQL component: Information Schema. Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

Code injection

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Code injection

Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYS Account privilege with network access via Oracle Net to compromise Unified...

Design/Logic Flaw

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain component: Dialog Box. Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

Code injection

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM component: Search. Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework...

CVE-2021-2130

CVE-2021-2130 affects Oracle VM VirtualBox (Core) before version 6.1.18. The vulnerability allows a high-privilege local attacker to cause a hang or crash of VirtualBox (DoS). Exploitation details are not provided in the supplied documents. Remediation: upgrade to VirtualBox 6.1.18 or later (upst...

CVE-2021-2131

CVE-2021-2131 concerns Oracle VM VirtualBox (Core) with affected versions prior to 6.1.18. The issue, described across multiple trusted sources, arises from an insufficient validation/handling in VirtualBox that, when exploited by a high-privilege user with local logon, can compromise the Virtual...

CVE-2021-2127

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2122

Removed by vendor...

CVE-2021-2128

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...

CVE-2021-2124

The CVE-2021-2124 vulnerability affects Oracle VM VirtualBox (Core) and is exploitable on a host where VirtualBox runs. Affected versions are prior to 6.1.18; the issue enables a high-privilege attacker who can log into the infrastructure to compromise VirtualBox, potentially causing a hang or a ...

CVE-2021-2116

Vulnerability in the Oracle Application Express Opportunity Tracker component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to...

CVE-2021-2120

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2086

CVE-2021-2086 : A vulnerability in Oracle VM VirtualBox (Core) affects versions prior to 6.1.18. A high-privilege attacker with local access could compromise VirtualBox, potentially causing a hang or frequent crashes (DOS) and impacting additional Oracle products. The issue is local in scope with...

CVE-2021-2086

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2021-2084

CVE-2021-2084 affects Oracle E-Business Suite (Oracle CRM Technical Foundation, component: Preferences). Affected versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle CRM Technical Foundation, with human...

CVE-2021-2087

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server...

CVE-2021-2087

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server...

CVE-2021-2091

CVE-2021-2091 affects Oracle E-Business Suite Oracle Scripting (Miscellaneous) and is documented across multiple sources. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The flaw allows an unauthenticated attacker who can reach Oracle Scripting over HTTP to compromise data; attacks may re...