CVE-2019-2696

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2679

CVE-2019-2679 affects the Oracle VM VirtualBox core component. Affected products/versions: Oracle VirtualBox prior to 5.2.28 and prior to 6.0.6. The vulnerability allows a low-privileged, local attacker with logon to the infrastructure running VirtualBox to compromise the component, potentially c...

CVE-2019-2680

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2681

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2019-2665

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: CRM User Management Framework. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2019-2657

Vulnerability: Oracle VM VirtualBox core component is affected in versions before 5.2.28 and before 6.0.6. Root cause unspecified in the provided text, but the issue is described as easily exploitable with a low-privileged, logon-required attacker, potentially leading to takeover of VirtualBox an...

CVE-2019-2657

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2681

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2019-2680

CVE-2019-2680 affects the Oracle VM VirtualBox Core component. Affected products (VirtualBox) include versions before 5.2.28 and before 6.0.6; exploitation requires a local logon and can lead to takeover of Oracle VM VirtualBox, with potential impact on surrounding products. The CVSS v3 base scor...

CVE-2019-2678

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2657

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2680

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2635

CVE-2019-2635: Vulnerability in the MySQL Server component (subcomponent: Replication). Affected are Oracle MySQL 8.0.15 and prior. Exploitation via network and multiple protocols can lead to a hang or frequent crash (DoS) of MySQL Server. Severity in CVSS 3.0 Base: 4.9 (Availability impact). Rem...

CVE-2019-2652

CVE-2019-2652 affects Oracle E-Business Suite iStore, Shopping Cart subcomponent. Vulnerable in supported E-Business Suite versions 12.1.1–12.2.8; attack surface is Oracle iStore via HTTP. The vulnerability allows an unauthenticated remote attacker with network access to compromise iStore and may...

CVE-2019-2656

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.2.28 and prior to 6.0.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2019-2638

The CVE-2019-2638 entry concerns Oracle E-Business Suite General Ledger, specifically the Consolidation Hierarchy Viewer component. Affected versions include 12.1.1–12.1.3 and 12.2.3–12.2.8. The root cause is an access-control weakness in the Consolidation Hierarchy Viewer that lets a low-privile...

CVE-2019-2625

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2019-2627

CVE-2019-2627 affects the MySQL Server component (Server: Security: Privileges). Public details show affected versions: 5.6.43 and prior, 5.7.25 and prior, and 8.0.15 and prior. The vulnerability is exploitable over network by a high-privilege attacker and can lead to a hang or crash (DoS) of MyS...

CVE-2019-2631

Mode C: CVE-2019-2631 is a vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Information Schema). Affected versions are 8.0.15 and earlier. It allows a high-privileged attacker who can access the server over network protocols to cause the MySQL Server to hang or crash (co...

CVE-2019-2625

CVE-2019-2625 is a vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Affected versions are 8.0.15 and prior. An attacker with network access and high privileges can exploit this to cause a hang or a complete denial of service on the MySQL Server. The C...