28677 matches found
CVE-2024-21254
CVE-2024-21254 affects Oracle Analytics’ Oracle BI Publisher Web Server component (and concerns Layout Templates) with versions 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. The flaw allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle BI Publisher, potentially takeover the p...
CVE-2024-21255
CVE-2024-21255 concerns Oracle PeopleSoft PeopleTools, specifically the XMLPublisher component in PeopleSoft Enterprise PeopleTools. The connected PT-2023-9582 entry provides concrete details: affected software is PeopleSoft Enterprise PeopleTools versions 8.59–8.61, with a flaw in input validati...
CVE-2024-21252
CVE-2024-21252 affects Oracle E-Business Suite, Oracle Product Hub (Item Catalog) in versions 12.2.3–12.2.13. The issue allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification of data, and unauthorized data access (Confidentiality/Inte...
CVE-2024-21250
CVE-2024-21250 affects Oracle E-Business Suite, specifically the Process Manufacturing Product Development module’s Quality Manager Specification. Affected are versions 12.2.13–12.2.14. The underlying issue is an authorization weakness in the Quality Manager Specification component, allowing a lo...
CVE-2024-21247
Technical details for CVE-2024-21247 are not provided in the connected documents. The available content lists affected MySQL Client versions and impact but lacks root cause, exploit specifics, or remediation details; monitor for updates.
CVE-2024-21247
Removed by vendor...
CVE-2024-21239
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
CVE-2024-21241
CVE-2024-21241 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by a network-adjacent attacker with high privileges via multiple protocols to cause a hang or crash (DoS) in ...
CVE-2024-21239
CVE-2024-21239: Oracle MySQL Server InnoDB vulnerability affecting MySQL Server 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. An attacker with network access via multiple protocols can exploit this to cause a denial of service (hang or frequently repeating crash) in MySQL Server. ...
CVE-2024-21241
Removed by vendor...
CVE-2024-21239
Removed by vendor...
CVE-2024-21242
Oracle Database Server – XML Database : The XML Database component has errors in resource release that affect 19.3–19.24, 21.3–21.15, and 23.4–23.5. It is remotely exploitable via HTTP with low privileges and requires user interaction, potentially causing a partial DoS of the XML Database. Remedi...
CVE-2024-21238
CVE-2024-21238 (MySQL Server, Oracle) : Vulnerability in MySQL Server (Server: Thread Pooling) affects 8.0.39 and earlier, 8.4.1 and earlier, and 9.0.1 and earlier. A low-privileged attacker with network access via multiple protocols can cause the MySQL Server to hang or crash (DoS). No exploits ...
CVE-2024-21236
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
CVE-2024-21238
Removed by vendor...
CVE-2024-21236
CVE-2024-21236 is an Oracle MySQL Server InnoDB vulnerability (denial-of-service). Affected are MySQL 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. An attacker with network access via multiple protocols (remote authenticated) can cause a hang or crash of MySQL Server (DOS). The CV...
CVE-2024-21237
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication GCS. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...
CVE-2024-21231
CVE-2024-21231 : Vulnerability in Oracle MySQL Server (component: Client programs). Affected versions are 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The issue is described as difficult to exploit and allows a low-privilege attacker with network access via multiple protocols to ...