CVE-2024-21202

CVE-2024-21202 affects Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) with affected 8.59–8.61. The issue is exploitable over HTTP by unauthenticated network access; successful attacks require user interaction and may lead to unauthorized data updates, inserts, deletes, or reads wi...

CVE-2024-21200

Removed by vendor...

CVE-2024-21200

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2024-21199

Removed by vendor...

CVE-2024-21199

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2024-21197

Removed by vendor...

CVE-2024-21198

CVE-2024-21198: Oracle MySQL Server (Server: DDL) is affected in 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability allows an attacker with network access via multiple protocols and high privileges to cause a hang or repeatable crash (complete DoS) of MySQL Server. Th...

CVE-2024-21197

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Information Schema. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple...

CVE-2024-21196

CVE-2024-21196 affects the Oracle MySQL Server (component: Server: X Plugin). Affected versions are 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The description states that a low-privileged attacker with network access via multiple protocols can exploit this to cause the MySQL Se...

CVE-2024-21193

CVE-2024-21193 (MySQL Server) : Oracle MySQL Server, component Server: PS, is affected in versions 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior. The entry states that a high-privilege attacker with network access via multiple protocols can cause a denial of service (hang or crash) in My...

CVE-2024-21194

Removed by vendor...

CVE-2024-21194

CVE-2024-21194 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or complete denial of service (A: High, availabi...

CVE-2024-21194

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

CVE-2024-21193

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: PS. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromis...

CVE-2024-21172

CVE-2024-21172 affects Oracle Hospitality OPERA 5 (Opera Servlet). Affected versions are 5.6.19.19, 5.6.25.8, and 5.6.26.4. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise OPERA 5, with potential takeover and impact to confidentiality, integrity, a...

PT-2024-7230 · Oracle · Oracle Service Bus

Name of the Vulnerable Software and Affected Versions: Oracle Service Bus versions 12.2.1.4.0 Description: The issue is related to a vulnerability in the Oracle Service Bus product, specifically in the OSB Core Functionality component. This vulnerability allows an unauthenticated attacker with...

PT-2024-8114 · Oracle · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL versions 8.4.2 and prior Oracle MySQL versions 9.0.1 and prior Description: The issue is related to insufficient input validation in the MySQL Client product, specifically in the mysqldump component. It allows a high-privileged...

PT-2024-7007 · Oracle · Oracle Product Hub +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: The issue is related to a vulnerability in the Item Catalog component of Oracle Product Hub, which can be exploited by a low-privileged attacker with network access via HTTP...

PT-2024-7116 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: The issue is related to improper authentication in Microsoft Dataverse, allowing an authorized attacker to elevate privileges over a network. This can potentially lead to...

CVE-2024-9487

An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed SAML SSO authentication to be bypassed resulting in unauthorized provisioning of users and access to the instance. Exploitation required the encrypted assertions feature to be...