6790 matches found
CVE-2026-35241
...
CVE-2026-35242
CVE-2026-35242 affects Oracle VM VirtualBox (Core) with affected version 7.2.6. The vulnerability is exploitable by a high-privilege attacker with local logon to the host running Oracle VM VirtualBox, potentially leading to takeover of Oracle VM VirtualBox. CVSS 3.1 base score 7.5 (High) with loc...
CVE-2026-35242
...
CVE-2026-35236
CVE-2026-35236 affects Oracle MySQL Server (InnoDB) across MySQL 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. A high-privilege attacker with network access via multiple protocols can cause the server to hang or crash (DoS). No exploitation details are provided in the documents. Remediation/mitigat...
CVE-2026-34323
The CVE affects Oracle Life Sciences InForm (IDM Authentication) in Oracle Life Sciences Applications, with affected versions 7.0.1.0 and 7.0.1.1. It is exploitable over HTTP by an unauthenticated network attacker and requires user interaction for a successful attack. Impact includes unauthorized...
CVE-2026-34318
...
CVE-2026-34310
...
CVE-2026-34305
Oracle WebLogic Server (Oracle Fusion Middleware) Web Services component across 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 is affected. The vulnerability allows unauthenticated, network-accessible HTTP attacker to gain unauthorized access to or full access to WebLogic Server data. CVSS v3...
CVE-2026-34303
...
CVE-2026-34298
...
CVE-2026-34296
CVE-2026-34296 affects Oracle Agile Product Lifecycle Management for Process (Product Quality Management) in version 6.2.4. The vulnerability, exploitable by a low-privileged user with network access over HTTP, can lead to unauthorized read access to a subset of data. The provided documents speci...
CVE-2026-34294
The vulnerability is in Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: Microsoft Active Directory), affecting version 12.2.1.4.0. The issue allows a low-privilege, network-adjacent attacker with LDAP access to compromise the Oracle Identity Manager Connector, enabling un...
CVE-2026-34292
...
CVE-2026-34284
CVE-2026-34284 affects Oracle Fusion Middleware’s Oracle Business Process Management Suite (Human workflow 11g+) in supported versions 12.2.1.4.0 and 14.1.2.0.0. The vulnerability is exploitable over HTTP with network access and does not require exploited code to be pre-authenticated; however, us...
CVE-2026-34285
...
CVE-2026-34285
...
CVE-2026-34276
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...
CVE-2026-34270
CVE-2026-34270 affects Oracle MySQL Server specifically the Group Replication Plugin. Affects 8.0.0–8.0.45, 8.4.0–8.4.8, and 9.0.0–9.6.0. The vulnerability arises in the Group Replication Plugin within MySQL Server and can be exploited by a low-privileged attacker with network access via multiple...