[CVE_SUBSCRIPTIONS]

Receive alerts for specific vendors, products, or severities
📡 [FLUX RSS CVE]

Subscribe to the CVE feed

7 derniers jours

> FILTERS

> Last 7 Days

STATISTIQUES

Total CVE: 425103
> CVE-2024-20985 [MEDIUM 6.5]
[PUBLISHED: 2024-01-16] [EPSS 1.10%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server....
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20983 [MEDIUM 4.9]
[PUBLISHED: 2024-01-16] [EPSS 0.93%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks...
AFFECTED_PRODUCTS: Oracle Mysql
> CVE-2024-20981 [MEDIUM 4.9]
[PUBLISHED: 2024-01-16] [EPSS 1.04%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server....
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20979 [MEDIUM 5.4]
[PUBLISHED: 2024-01-16] [EPSS 0.27%]
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 6.4.0.0.0, 7.0.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher...
AFFECTED_PRODUCTS: Oracle Bi Publisher, Oracle Bi Publisher, Oracle Bi Publisher
> CVE-2024-20977 [MEDIUM 6.5]
[PUBLISHED: 2024-01-16] [EPSS 1.06%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Se...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20975 [MEDIUM 6.5]
[PUBLISHED: 2024-01-16] [EPSS 0.89%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful atta...
AFFECTED_PRODUCTS: Oracle Mysql
> CVE-2024-20973 [MEDIUM 6.5]
[PUBLISHED: 2024-01-16] [EPSS 1.06%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Se...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20971 [MEDIUM 4.9]
[PUBLISHED: 2024-01-16] [EPSS 1.04%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL S...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20969 [MEDIUM 5.5]
[PUBLISHED: 2024-01-16] [EPSS 0.84%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server....
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20967 [MEDIUM 5.5]
[PUBLISHED: 2024-01-16] [EPSS 0.82%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20965 [MEDIUM 4.9]
[PUBLISHED: 2024-01-16] [EPSS 1.54%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL S...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20963 [MEDIUM 6.5]
[PUBLISHED: 2024-01-16] [EPSS 1.10%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromi...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20961 [MEDIUM 6.5]
[PUBLISHED: 2024-01-16] [EPSS 1.10%]
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Se...
AFFECTED_PRODUCTS: Oracle Mysql, Oracle Mysql
> CVE-2024-20959 [MEDIUM 4.4]
[PUBLISHED: 2024-01-16] [EPSS 0.18%]
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to com...
AFFECTED_PRODUCTS: Oracle Zfs Storage Appliance Kit
> CVE-2024-20957 [LOW 2.7]
[PUBLISHED: 2024-01-16] [EPSS 0.47%]
Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Package Build SEC). Supported versions that are affected are Prior to 9.2.8.1. Easily exploitable vulnerability allows high privileged attacker with network access via JDENET to compromise JD Edwards Enterp...
AFFECTED_PRODUCTS: Oracle Jd Edwards Enterpriseone Tools
> CVE-2024-20955 [LOW 3.7]
[PUBLISHED: 2024-01-16] [EPSS 0.52%]
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and 22.3.4. Difficult to exploit vulne...
AFFECTED_PRODUCTS: Oracle Graalvm, Oracle Graalvm, Oracle Graalvm ... (+2)
> CVE-2024-20952 [HIGH 7.4]
[PUBLISHED: 2024-01-16] [EPSS 0.92%]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM...
AFFECTED_PRODUCTS: Debian Debian Linux, Oracle Jre, Oracle Jre ... (+15)
> CVE-2024-20950 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.33%]
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Custom...
AFFECTED_PRODUCTS: Oracle Customer Interaction History
> CVE-2024-20948 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.31%]
Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Manage...
AFFECTED_PRODUCTS: Oracle Knowledge Management
> CVE-2024-20946 [MEDIUM 5.5]
[PUBLISHED: 2024-01-16] [EPSS 0.18%]
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...
AFFECTED_PRODUCTS: Oracle Solaris
> CVE-2024-20944 [MEDIUM 5.4]
[PUBLISHED: 2024-01-16] [EPSS 0.16%]
Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSupport. Successful...
AFFECTED_PRODUCTS: Oracle Isupport
> CVE-2024-20942 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.17%]
Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: LOV). Supported versions that are affected are 11.5, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Co...
AFFECTED_PRODUCTS: Oracle Complex Maintenance\, Repair\, And Overhaul, Oracle Complex Maintenance\, Repair\, And Overhaul, Oracle Complex Maintenance\, Repair\, And Overhaul
> CVE-2024-20940 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.17%]
Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Create, Update, Authoring Flow). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...
AFFECTED_PRODUCTS: Oracle Knowledge Management
> CVE-2024-20938 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.31%]
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: ECC). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require hum...
AFFECTED_PRODUCTS: Oracle Istore
> CVE-2024-20936 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.31%]
Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfil...
AFFECTED_PRODUCTS: Oracle One To One Fulfillment
> CVE-2024-20934 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.17%]
Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed...
AFFECTED_PRODUCTS: Oracle Installed Base
> CVE-2024-20932 [HIGH 7.5]
[PUBLISHED: 2024-01-16] [EPSS 0.78%]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and 22.3.4. Eas...
AFFECTED_PRODUCTS: Oracle Jre, Oracle Jdk, Oracle Graalvm ... (+2)
> CVE-2024-20930 [MEDIUM 6.3]
[PUBLISHED: 2024-01-16] [EPSS 0.37%]
Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Export SDK). The supported version that is affected is 8.5.6. Easily exploitable vulnerability allows low privileged attacker with network ac...
AFFECTED_PRODUCTS: Oracle Outside In Technology
> CVE-2024-20928 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.33%]
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Content....
AFFECTED_PRODUCTS: Oracle Webcenter Content
> CVE-2024-20926 [MEDIUM 5.9]
[PUBLISHED: 2024-01-16] [EPSS 1.04%]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20...
AFFECTED_PRODUCTS: Debian Debian Linux, Oracle Jre, Oracle Jre ... (+11)
> CVE-2024-20924 [HIGH 7.6]
[PUBLISHED: 2024-01-16] [EPSS 0.43%]
Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected are 20.1-20.9. Difficult to exploit vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Audit Vault and Database Firewall. Success...
AFFECTED_PRODUCTS: Oracle Audit Vault And Database Firewall
> CVE-2024-20922 [LOW 2.5]
[PUBLISHED: 2024-01-16] [EPSS 0.30%]
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated att...
AFFECTED_PRODUCTS: Oracle Jre, Oracle Jdk, Oracle Graalvm ... (+1)
> CVE-2024-20920 [LOW 3.8]
[PUBLISHED: 2024-01-16] [EPSS 0.19%]
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While t...
AFFECTED_PRODUCTS: Oracle Solaris
> CVE-2024-20918 [HIGH 7.4]
[PUBLISHED: 2024-01-16] [EPSS 0.92%]
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM...
AFFECTED_PRODUCTS: Debian Debian Linux, Oracle Jre, Oracle Jre ... (+11)
> CVE-2024-20916 [HIGH 8.3]
[PUBLISHED: 2024-01-16] [EPSS 0.34%]
Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management). The supported version that is affected is 13.5.0.0. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment at...
AFFECTED_PRODUCTS: Oracle Enterprise Manager
> CVE-2024-20914 [LOW 2.3]
[PUBLISHED: 2024-01-16] [EPSS 0.19%]
Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to com...
AFFECTED_PRODUCTS: Oracle Zfs Storage Appliance Kit
> CVE-2024-20912 [LOW 2.7]
[PUBLISHED: 2024-01-16] [EPSS 0.34%]
Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected are 20.1-20.9. Easily exploitable vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Audit Vault and Database Firewall. Successfu...
AFFECTED_PRODUCTS: Oracle Audit Vault And Database Firewall
> CVE-2024-20910 [LOW 3.0]
[PUBLISHED: 2024-01-16] [EPSS 0.33%]
Vulnerability in Oracle Audit Vault and Database Firewall (component: Firewall). Supported versions that are affected are 20.1-20.9. Difficult to exploit vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle Audit Vault and Database Firewall. While t...
AFFECTED_PRODUCTS: Oracle Audit Vault And Database Firewall
> CVE-2024-20908 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.33%]
Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebCenter Sites. Succe...
AFFECTED_PRODUCTS: Oracle Webcenter Sites
> CVE-2024-20906 [MEDIUM 4.8]
[PUBLISHED: 2024-01-16] [EPSS 0.31%]
Vulnerability in the Integrated Lights Out Manager (ILOM) product of Oracle Systems (component: System Management). Supported versions that are affected are 3, 4 and 5. Easily exploitable vulnerability allows high privileged attacker with network access via ICMP to compromise Integrated Lights Out...
AFFECTED_PRODUCTS: Oracle Integrated Lights Out Manager Firmware, Oracle Integrated Lights Out Manager Firmware, Oracle Integrated Lights Out Manager Firmware
> CVE-2024-20904 [MEDIUM 5.0]
[PUBLISHED: 2024-01-16] [EPSS 0.38%]
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin). Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Ora...
AFFECTED_PRODUCTS: Oracle Business Intelligence, Oracle Business Intelligence
> CVE-2024-0603 [HIGH 7.3]
[PUBLISHED: 2024-01-16] [EPSS 0.86%]
A vulnerability classified as critical has been found in ZhiCms up to 4.0. This affects an unknown part of the file app/plug/controller/giftcontroller.php. The manipulation of the argument mylike leads to deserialization. It is possible to initiate the attack remotely. The exploit has been disclosed...
AFFECTED_PRODUCTS: Zhicms Zhicms
> CVE-2024-0601 [MEDIUM 6.3]
[PUBLISHED: 2024-01-16] [EPSS 0.48%]
A vulnerability was found in ZhongFuCheng3y Austin 1.0. It has been rated as critical. Affected by this issue is the function getRemoteUrl2File of the file src\main\java\com\java3y\austin\support\utils\AustinFileUtils.java of the component Email Message Template Handler. The manipulation leads to se...
AFFECTED_PRODUCTS: Zhongfucheng3Y Austin
> CVE-2024-0519 [HIGH 8.8]
[PUBLISHED: 2024-01-16] [âš  CISA_KEV] [EPSS 3.80%]
Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
AFFECTED_PRODUCTS: Google Chrome, Fedoraproject Fedora, Fedoraproject Fedora ... (+1)
> CVE-2024-0518 [HIGH 8.8]
[PUBLISHED: 2024-01-16] [EPSS 0.94%]
Type confusion in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
AFFECTED_PRODUCTS: Google Chrome, Fedoraproject Fedora, Fedoraproject Fedora
> CVE-2024-0517 [HIGH 8.8]
[PUBLISHED: 2024-01-16] [âš¡ EPSS 21.7%]
Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
AFFECTED_PRODUCTS: Google Chrome, Fedoraproject Fedora, Fedoraproject Fedora
> CVE-2023-52068 [MEDIUM 6.1]
[PUBLISHED: 2024-01-16] [EPSS 0.31%]
kodbox v1.43 was discovered to contain a cross-site scripting (XSS) vulnerability via the operation and login logs.
AFFECTED_PRODUCTS: Kodcloud Kodbox
> CVE-2023-52042 [CRITICAL 9.8]
[PUBLISHED: 2024-01-16] [EPSS 0.95%]
An issue discovered in sub_4117F8 function in TOTOLINK X6000R V9.4.0cu.852_B20230719 allows attackers to run arbitrary commands via the 'lang' parameter.
AFFECTED_PRODUCTS: Totolink X6000r Firmware
> CVE-2023-39691 [CRITICAL 9.8]
[PUBLISHED: 2024-01-16] [EPSS 0.56%]
An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request.
AFFECTED_PRODUCTS: Kodcloud Kodbox
> CVE-2023-36236 [MEDIUM 4.8]
[PUBLISHED: 2024-01-16] [EPSS 0.61%]
Cross Site Scripting vulnerability in webkil Bagisto v.1.5.0 and before allows an attacker to execute arbitrary code via a crafted SVG file uplad.
AFFECTED_PRODUCTS: Webkul Bagisto