25592 matches found
CVE-2024-21272
CVE-2024-21272 involves Oracle MySQL Connectors (Connector/Python). Affected: MySQL Connectors product, Connector/Python component, versions 9.0.0 and earlier. Vulnerability allows a remote, low-privilege attacker with network access via multiple protocols to compromise the MySQL Connectors, pote...
Access Control Bypass
Overview mysql-connector-python is a MySQL driver written in Python which does not depend on MySQL C client libraries and implements the DB API v2.0 specification PEP-249. Affected versions of this package are vulnerable to Access Control Bypass via multiple protocols. An attacker can take over t...
CVE-2024-21272
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...
CVE-2024-21272
Vulnerability in the MySQL Connectors product of Oracle MySQL component: Connector/Python. Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors...
CVE-2024-21260
CVE-2024-21260 affects Oracle WebLogic Server (Fusion Middleware Core). The vulnerability concerns Core input handling in WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0, reported to be exploitable without authentication over T3/IIOP and capable of causing a hang or complete denial of service....
CVE-2024-21254
CVE-2024-21254 affects Oracle Analytics’ Oracle BI Publisher Web Server component (and concerns Layout Templates) with versions 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. The flaw allows a low-privileged, network-accessing attacker over HTTP to compromise Oracle BI Publisher, potentially takeover the p...
CVE-2024-21255
CVE-2024-21255 concerns Oracle PeopleSoft PeopleTools, specifically the XMLPublisher component in PeopleSoft Enterprise PeopleTools. The connected PT-2023-9582 entry provides concrete details: affected software is PeopleSoft Enterprise PeopleTools versions 8.59–8.61, with a flaw in input validati...
CVE-2024-21252
CVE-2024-21252 affects Oracle E-Business Suite, Oracle Product Hub (Item Catalog) in versions 12.2.3–12.2.13. The issue allows a low-privileged attacker with network access via HTTP to gain unauthorized creation, deletion or modification of data, and unauthorized data access (Confidentiality/Inte...
CVE-2024-21250
CVE-2024-21250 affects Oracle E-Business Suite, specifically the Process Manufacturing Product Development module’s Quality Manager Specification. Affected are versions 12.2.13–12.2.14. The underlying issue is an authorization weakness in the Quality Manager Specification component, allowing a lo...
CVE-2024-21247
Technical details for CVE-2024-21247 are not provided in the connected documents. The available content lists affected MySQL Client versions and impact but lacks root cause, exploit specifics, or remediation details; monitor for updates.
CVE-2024-21247
Removed by vendor...
CVE-2024-21239
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...
CVE-2024-21239
CVE-2024-21239: Oracle MySQL Server InnoDB vulnerability affecting MySQL Server 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. An attacker with network access via multiple protocols can exploit this to cause a denial of service (hang or frequently repeating crash) in MySQL Server. ...
CVE-2024-21241
CVE-2024-21241 affects Oracle MySQL Server (component: Server: Optimizer). Affected: MySQL 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability can be exploited by a network-adjacent attacker with high privileges via multiple protocols to cause a hang or crash (DoS) in ...
CVE-2024-21241
Removed by vendor...
CVE-2024-21239
Removed by vendor...
CVE-2024-21242
Oracle Database Server – XML Database : The XML Database component has errors in resource release that affect 19.3–19.24, 21.3–21.15, and 23.4–23.5. It is remotely exploitable via HTTP with low privileges and requires user interaction, potentially causing a partial DoS of the XML Database. Remedi...
CVE-2024-21238
CVE-2024-21238 (MySQL Server, Oracle) : Vulnerability in MySQL Server (Server: Thread Pooling) affects 8.0.39 and earlier, 8.4.1 and earlier, and 9.0.1 and earlier. A low-privileged attacker with network access via multiple protocols can cause the MySQL Server to hang or crash (DoS). No exploits ...
CVE-2024-21236
Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...