CVE-2025-21536

...

CVE-2025-21536

CVE-2025-21536 affects Oracle MySQL Server (Server: Optimizer) with vulnerable versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by a high-privilege attacker with network access via multiple protocols to cause a hang or a complete denial of ...

CVE-2025-21533

CVE-2025-21533 is a local vulnerability in Oracle VM VirtualBox Core affecting older 7.0.x and 7.1.x releases (prior to 7.0.24 and prior to 7.1.6). A low-privilege user with logon can compromise VirtualBox, potentially giving unauthorized access to data. CVSS v3.1 base score 5.5 (C:H, I:N, A:N). ...

CVE-2025-21534

...

CVE-2025-21530

CVE-2025-21530 affects Oracle PeopleSoft’s Enterprise PeopleTools, specifically the Panel Processor in PeopleSoft PeopleTools versions 8.60 and 8.61. The vulnerability allows a low-privilege, network-access attacker (HTTP) to read a subset of data in PeopleSoft Enterprise PeopleTools, with CVSS v...

CVE-2025-21530

...

CVE-2025-21528

...

CVE-2025-21526

CVE-2025-21526 affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access) with affected versions 20.12.1.0–20.12.21.5, 21.12.1.0–21.12.20.0, 22.12.1.0–22.12.16.0 and 23.12.1.0–23.12.10.0. The vulnerability can be exploited by a low-privilege, network-accessing attacker via H...

CVE-2025-21524

CVE-2025-21524 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Monitoring and Diagnostics SEC component. Affected are versions prior to 9.2.9.0; an unauthenticated attacker with network access over HTTP can compromise JD Edwards EnterpriseOne Tools, potentially taking over the too...

CVE-2025-21520

...

CVE-2025-21521

CVE-2025-21521 concerns Oracle MySQL Server (Server: Thread Pooling). Affected: MySQL Server versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by an unauthenticated attacker who can access the server over multiple network protocols, potentia...

CVE-2025-21519

CVE-2025-21519 affects Oracle MySQL Server across multiple lines of product/version targets: 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability targets the Server: Security: Privileges area and is described as a difficult-to-exploit flaw that would allow a high-privil...

CVE-2025-21514

...

CVE-2025-21514

CVE-2025-21514 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC). The vulnerability stems from insufficient input validation in the Web Runtime SEC component, allowing an unauthenticated attacker with network access via HTTP to read a subset of accessible data. Affected product/vers...

CVE-2025-21515

CVE-2025-21515 concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component, affected in versions before 9.2.9.0. The vulnerability allows a low-privileged attacker with network access over HTTP to takeover JD Edwards EnterpriseOne Tools, with CVSS v3.1 base score 8....

CVE-2025-21511

...

CVE-2025-21513

...

CVE-2025-21506

CVE-2025-21506 affects Oracle E-Business Suite Project Foundation (Technology Foundation) with affected 12.2.3–12.2.13. Low-privileged, network-access attacker over HTTP can lead to unauthorized creation, deletion/modification of data or full data access. CVSSv3.1 base score 8.1 (Confidentiality/...

CVE-2025-21501

CVE-2025-21501 is a vulnerability in Oracle MySQL’s Server: Optimizer component affecting MySQL Server versions 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The issue allows low-privilege, network-access attackers to cause a hang or frequent crash (availability impact: high), i.e...

CVE-2025-21503

CVE-2025-21503 is a MySQL Server InnoDB vulnerability affecting Oracle MySQL. Affected: InnoDB component in versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. Description from connected advisories: exploitation can be network-accessible via multiple protocols and may cause the serve...