CVE Vulnerability Catalog

A vulnerability in MySQL Server and MySQL Cluster (component: Server: Replication) allows a high privileged attacker with network access to cause a partial denial of service. Exploitation is difficult.

Vulnerability in Oracle Java SE (component: JavaFX) version 8u491. Difficult to exploit, requires user interaction and network access. Successful attack may lead to unauthorized read access to a subset of data.

Oracle Java SE version 8u491 has a vulnerability in the JavaFX component. This difficult-to-exploit flaw allows an unauthenticated attacker with network access to perform unauthorized read access to a subset of data, requiring user interaction.

Vulnerability in Oracle VM VirtualBox 7.2.12 allows a high-privileged attacker with local access to read a subset of data. The attack also impacts additional products.

In Oracle Workflow (part of Oracle E-Business Suite) versions 12.2.3-12.2.15, a vulnerability in the Workflow Notification Mailer component. Difficult to exploit, allows a low-privileged attacker with local access to unauthorized update/insert/delete and partial denial of service. CVSS 3.6.

Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition (component: 2D) in multiple versions have a difficult-to-exploit vulnerability that allows an unauthenticated attacker with network access to cause a partial denial of service (partial DOS). This vulnerability primarily affects clients running Java Web Start applets.

A vulnerability in Oracle VM VirtualBox version 7.2.12. Easily exploitable by an attacker with high privileges and local access. May lead to unauthorized data modification in VirtualBox, and attacks may impact additional products (scope change).

Vulnerability in Oracle VM VirtualBox 7.2.12 allows a high-privileged attacker to read a subset of accessible data. The attack requires local access but may affect other products.

Vulnerability in RDBMS component of Oracle Database Server versions 19.3-19.31, 21.3-21.22, and 23.4.0-23.26.2. Easily exploitable by high-privileged attacker with network access via Oracle Net. Successful attack may lead to unauthorized data modification.

A vulnerability in Oracle Java SE 8u491, component JavaFX, allows an unauthenticated attacker with network access to compromise data integrity via unauthorized update, insert, or delete access. The attack requires user interaction and is difficult to exploit. It applies to sandboxed Java deployments like applets or Web Start.

Vulnerability in Oracle Java SE in the JavaFX component. Version 8u491 is affected. The attack is difficult to exploit, requires user interaction and network access. It may lead to unauthorized data modification.

Vulnerability in Siebel CRM End User (component: Redwood UI) versions 24.4-26.3. Difficult to exploit, requires high privileges, user interaction, and network access via HTTP. Successful attack may cause partial denial of service and impact other products.

Vulnerability in Oracle Java SE in the JavaFX component. Version 8u491 is affected. The attack is difficult to exploit, requires user interaction and network access. It may lead to unauthorized data modification.

A vulnerability in GoldenGate Stream Analytics (component: Security) version 26.1.0.0.0. A low privileged attacker with local access can cause a partial denial of service (partial DOS). CVSS 3.1 Base Score 3.3 (Availability).

Vulnerability in Siebel CRM Integration (versions 17.0-26.4) requires physical access and is difficult to exploit. It allows unauthorized read access to a subset of data, also impacting other products.

Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface). Supported versions that are affected are 17.0-26.4. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Deployment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel CRM Deployment accessible data. CVSS 3.1 Base Score 2.6 (Confidentiality impacts).

A vulnerability in the ImageIO component of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition allows an unauthenticated attacker with network access to compromise data integrity, resulting in unauthorized update, insert, or delete access.

Vulnerability in Oracle Enterprise Manager Base Platform 24.1 allows a low-privileged attacker with network access via HTTPS to modify data, requiring user interaction.

Vulnerability in Oracle Retail Xstore Point of Service, component Xstore Mobile, version 21.0.3. A low-privileged attacker with local access can gain unauthorized read access to a subset of data.

In the DesignWare SPI driver (drivers/spi/spi_dw.c) in Zephyr up to v4.4.0, lack of validation of config->frequency allows an unprivileged thread with access to the SPI device to trigger an unsigned integer divide-by-zero. This causes a CPU exception and local denial of service. Requires CONFIG_USERSPACE=y and granted permissions.