1949 matches found
CVE-2025-21557
...
CVE-2025-21551
CVE-2025-21551 is a vulnerability in Oracle Solaris 11 affecting the File system component. It enables a locally authenticated, high-privilege attacker to compromise Solaris, potentially leading to unauthorized data creation/deletion/modification and a complete denial of service (hangs/crashes). ...
CVE-2025-21542
CVE-2025-21542 affects Oracle Communications Order and Service Management (OC OSM) in versions 7.4.0, 7.4.1 and 7.5.0. The issue is described as an access control weakness in the Security component that, with network access over HTTP and using low privileges, allows unauthorized update/insert/del...
CVE-2025-21543
...
CVE-2025-21541
...
CVE-2025-21540
...
CVE-2025-21533
CVE-2025-21533 is a local vulnerability in Oracle VM VirtualBox Core affecting older 7.0.x and 7.1.x releases (prior to 7.0.24 and prior to 7.1.6). A low-privilege user with logon can compromise VirtualBox, potentially giving unauthorized access to data. CVSS v3.1 base score 5.5 (C:H, I:N, A:N). ...
CVE-2025-21532
...
CVE-2025-21534
...
CVE-2025-21531
...
CVE-2025-21530
...
CVE-2025-21527
...
CVE-2025-21522
CVE-2025-21522 affects Oracle MySQL Server (component: Server: Parser). Affected versions are MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability can be exploited remotely by a low-privilege attacker with network access via multiple protocols, leading to an unaut...
CVE-2025-21523
...
CVE-2025-21518
...
CVE-2025-21519
...
CVE-2025-21516
...
CVE-2025-21513
The CVE-2025-21513 issue affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) prior to 9.2.9.0. An unauthenticated attacker with network access via HTTP can compromise JD Edwards EnterpriseOne Tools, requiring user interaction for exploitation. Impacts include unauthorized update/inser...
CVE-2025-21512
CVE-2025-21512 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC). Vulnerable in JD Edwards EnterpriseOne Tools prior to 9.2.9.0. An unauthenticated attacker with network access via HTTP can exploit a flaw in the Web Runtime SEC component to read and modify data, with potential impac...