[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities

📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 424789
> CVE-2024-21283 [HIGH 8.1]
Vulnerability in the PeopleSoft Enterprise HCM Global Payroll Core product of Oracle PeopleSoft (component: Global Payroll for Core). Supported versions that are affected are 9.2.48-9.2.50. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Pe...
AFFECTED_PRODUCTS: Oracle Peoplesoft Enterprise
> CVE-2024-21282 [HIGH 8.1]
Vulnerability in the Oracle Financials product of Oracle E-Business Suite (component: Common Components). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials. Successfu...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21281 [MEDIUM 5.3]
Vulnerability in the Oracle Banking Liquidity Management product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.7.0.6.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromis...
AFFECTED_PRODUCTS: Oracle Banking Liquidity Management
> CVE-2024-21280 [HIGH 8.1]
Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported versions that are affected are 12.2.5-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Contracts. Suc...
AFFECTED_PRODUCTS: Oracle Service Contracts
> CVE-2024-21279 [HIGH 8.1]
Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Auctions). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful attacks of...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21278 [HIGH 8.1]
Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (component: Award Processes). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compr...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21277 [HIGH 8.1]
Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Device Integration). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle ME...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21276 [HIGH 8.1]
Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Messages). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process. Successf...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21275 [HIGH 8.1]
Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.7-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21274 [HIGH 7.5]
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Serv...
AFFECTED_PRODUCTS: Oracle WebLogic Server
> CVE-2024-21273 [MEDIUM 6.0]
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox ex...
AFFECTED_PRODUCTS: Oracle Vm Virtualbox, Oracle Vm Virtualbox
> CVE-2024-21272 [HIGH 7.5]
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Succes...
AFFECTED_PRODUCTS: Oracle Mysql
> CVE-2024-21271 [HIGH 8.1]
Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Field Service Engineer Portal). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field S...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21270 [HIGH 8.1]
Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Supported versions that are affected are 12.2.6-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applicati...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21269 [HIGH 8.1]
Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: Compensation Plan). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Incentive...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21268 [HIGH 8.1]
Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2.11-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications Mana...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21267 [HIGH 8.1]
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.12-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management. Su...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21266 [HIGH 8.1]
Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price List). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Pricing. Succ...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21265 [HIGH 8.1]
Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Site Hierarchy Flows). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful...
AFFECTED_PRODUCTS: Oracle E-Business Suite
> CVE-2024-21264 [MEDIUM 5.4]
Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Peop...
AFFECTED_PRODUCTS: Oracle Peoplesoft Enterprise Cost Center Common Application Objects
> CVE-2024-21263 [MEDIUM 6.1]
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox exe...
AFFECTED_PRODUCTS: Oracle Vm Virtualbox, Oracle Vm Virtualbox
> CVE-2024-21262 [MEDIUM 6.5]
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successfu...
AFFECTED_PRODUCTS: Oracle Mysql
> CVE-2024-21261 [MEDIUM 4.9]
Vulnerability in Oracle Application Express (component: General). Supported versions that are affected are 23.2 and 24.1. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Express. While the vulnerability is in Oracle A...
AFFECTED_PRODUCTS: Oracle Application Express, Oracle Application Express
> CVE-2024-21260 [HIGH 7.5]
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Ser...
AFFECTED_PRODUCTS: Oracle WebLogic Server, Oracle WebLogic Server
> CVE-2024-21259 [HIGH 7.5]
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...
AFFECTED_PRODUCTS: Oracle Vm Virtualbox, Oracle Vm Virtualbox
> CVE-2024-21258 [MEDIUM 5.3]
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Suc...
AFFECTED_PRODUCTS: Oracle Installed Base
> CVE-2024-21257 [LOW 3.0]
Vulnerability in the Oracle Hyperion BI+ product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.2.18.0.000. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware...
AFFECTED_PRODUCTS: Oracle Hyperion Bi\+
> CVE-2024-21255 [HIGH 8.8]
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: XMLPublisher). Supported versions that are affected are 8.59, 8.60 and 8.61. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterpr...
AFFECTED_PRODUCTS: Oracle Peoplesoft Enterprise Peopletools, Oracle Peoplesoft Enterprise Peopletools, Oracle Peoplesoft Enterprise Peopletools
> CVE-2024-21254 [HIGH 8.8]
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 7.0.0.0.0, 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher...
AFFECTED_PRODUCTS: Oracle Bi Publisher, Oracle Bi Publisher, Oracle Bi Publisher
> CVE-2024-21253 [LOW 2.3]
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...
AFFECTED_PRODUCTS: Oracle Vm Virtualbox
> CVE-2024-21252 [HIGH 8.1]
Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful a...
AFFECTED_PRODUCTS: Oracle Product Hub
> CVE-2024-21251 [LOW 3.1]
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.24, 21.3-21.15 and 23.4-23.5. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to...
AFFECTED_PRODUCTS: Oracle Database Server, Oracle Database Server, Oracle Database Server
> CVE-2024-21250 [HIGH 8.1]
Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Manager Specification). Supported versions that are affected are 12.2.13-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP...
AFFECTED_PRODUCTS: Oracle Process Manufacturing Product Development, Oracle Process Manufacturing Product Development
> CVE-2024-21249 [MEDIUM 4.3]
Vulnerability in the PeopleSoft Enterprise FIN Expenses product of Oracle PeopleSoft (component: Expenses). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Expenses....
AFFECTED_PRODUCTS: Oracle Peoplesoft Enterprise Fin Expenses
> CVE-2024-21248 [MEDIUM 5.3]
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.22 and prior to 7.1.2. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox e...
AFFECTED_PRODUCTS: Oracle Vm Virtualbox, Oracle Vm Virtualbox
> CVE-2024-21247 [LOW 3.8]
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to c...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql ... (+1)
> CVE-2024-21246 [HIGH 7.5]
Vulnerability in the Oracle Service Bus product of Oracle Fusion Middleware (component: OSB Core Functionality). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Service Bus. Su...
AFFECTED_PRODUCTS: Oracle Service Bus
> CVE-2024-21244 [LOW 2.2]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2024-21243 [LOW 2.2]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2024-21242 [LOW 3.5]
Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 19.3-19.24, 21.3-21.15 and 23.4-23.5. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via HTTP to compromise XML Datab...
AFFECTED_PRODUCTS: Oracle Xml Database, Oracle Xml Database, Oracle Xml Database ... (+1)
> CVE-2024-21241 [MEDIUM 4.9]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to c...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql ... (+1)
> CVE-2024-21239 [MEDIUM 4.9]
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise M...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql ... (+1)
> CVE-2024-21238 [MEDIUM 5.3]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.1 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocol...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql ... (+1)
> CVE-2024-21237 [LOW 2.2]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql ... (+1)
> CVE-2024-21236 [MEDIUM 4.9]
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise M...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql ... (+1)
> CVE-2024-21235 [MEDIUM 4.8]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; O...
AFFECTED_PRODUCTS: Oracle Jre, Oracle Jre, Oracle Jre ... (+12)
> CVE-2024-21234 [HIGH 7.5]
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Ser...
AFFECTED_PRODUCTS: Oracle WebLogic Server, Oracle WebLogic Server
> CVE-2024-21233 [MEDIUM 4.3]
Vulnerability in the Oracle Database Core component of Oracle Database Server. Supported versions that are affected are 19.3-19.24, 21.3-21.15 and 23.4-23.5. Easily exploitable vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compro...
AFFECTED_PRODUCTS: Oracle Database Server, Oracle Database Server, Oracle Database Server ... (+1)
> CVE-2024-21232 [LOW 2.2]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to comprom...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql
> CVE-2024-21231 [LOW 3.1]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to co...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql, Oracle Mysql ... (+1)