2304 matches found
CVE-2024-24444
creationtimestamp| type| source ---|---|--- 2025-01-21 22:15:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbuvuon6p2f 2025-01-21 23:01:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2505 2025-01-21 23:40:28+00:00| seen| https://t.me/cvedetector/16037...
CVE-2025-21570
The CVE-2025-21570 entry concerns Oracle Life Sciences Argus Safety (component: Login) with affected version 8.2.3. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access, with exploitation requiring user interaction, and can lead to unauthorized update/inse...
CVE-2025-21570
...
CVE-2025-21565
...
CVE-2025-21562
CVE-2025-21562 concerns Oracle PeopleSoft PeopleSoft Enterprise CC Common Application Objects (Run Control Management) version 9.2. The vulnerability allows a low-privileged attacker with network access over HTTP to read a subset of data from the affected object, with CVSS 3.1 base score 4.3 (Con...
CVE-2025-21559
CVE-2025-21559 affects Oracle MySQL Server (InnoDB) with vulnerable versions listed as 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability can be exploited by a high-privileged attacker remotely over multiple protocols to cause a hang or crash (complete DoS) and may al...
CVE-2025-21544
Oracle Communications Order and Service Management (part of Oracle Communications Applications) is affected in versions 7.4.0–7.5.0. The issue arises from improper permission handling/storage in the component, enabling a low-privileged, network-accessing attacker (HTTP) to modify or read accessib...
CVE-2025-21542
...
CVE-2025-21539
...
CVE-2025-21537
CVE-2025-21537 affects Oracle PeopleSoft, specifically the Cash Management component of PeopleSoft Enterprise FIN Cash Management, version 9.2. The vulnerability arises from weaknesses in the authorization mechanism of Cash Management that can be exploited remotely over HTTP by a low-privilege at...
CVE-2025-21535
...
CVE-2025-21535
CVE-2025-21535 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. The vulnerable products are WebLogic Server versions 12.2.1.4.0 and 14.1.1.0.0. The flaw allows an unauthenticated attacker with network access via T3 or IIOP to take over the WebLogic Server, with impacts on confid...
CVE-2025-21529
...
CVE-2025-21519
...
CVE-2025-21516
CVE-2025-21516 affects Oracle E-Business Suite Customer Care (Service Requests) in versions 12.2.5–12.2.13. The issue allows a low-privilege, unauthenticated or lightly authenticated attacker with network access via HTTP to compromise Oracle Customer Care, potentially leading to unauthorized crea...
CVE-2025-21517
...
CVE-2025-21516
...
CVE-2025-21510
...
CVE-2025-21508
CVE-2025-21508 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected versions are prior to 9.2.9.0. The vulnerability allows a low-privileged, unauthenticated attacker with network access over HTTP to cause a hang or frequent crashes (complete denial ...