CVE Vulnerability Catalog

Use of uninitialized resource in GPU in Google Chrome prior to 151.0.7922.169 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Vulnerability in Oracle Fusion Middleware's Helidon product (component: Imperative Web Server) in versions 1.0.0-1.4.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon, resulting in unauthorized update, insert or delete access to some of Helidon accessible data. CVSS 3.1 Base Score 3.7 (Integrity impacts).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure to compromise Oracle Hyperion Financial Management. Successful attacks can result in unauthorized ability to cause a partial denial of service (partial DOS). CVSS 3.1 Base Score 1.9 (Availability impacts).

Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The supported version that is affected is 11.2.25.0.000. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure to compromise Oracle Hyperion Financial Management. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.0 (Confidentiality and Integrity impacts).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized update, insert or delete access to some data as well as unauthorized read access to a subset of data. CVSS 3.1 Base Score 3.4 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with logon access can gain unauthorized read access to a subset of data. Requires user interaction.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A high-privileged attacker with logon access can gain unauthorized read access to a subset of data. Requires user interaction and is difficult to exploit.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A low-privileged attacker with logon access can gain unauthorized read access to a subset of data. Difficult to exploit.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A high-privileged attacker with logon access can gain unauthorized update, insert, or delete access to some data. Difficult to exploit.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. An unauthenticated attacker with access to the physical communication segment can gain unauthorized update, insert, delete, and read access to some data. Requires user interaction and is difficult to exploit.

Vulnerability in Oracle Agile PLM MCAD Connector (CAX Client component) version 3.6. A low-privileged attacker with logon access can cause a partial denial of service. Easily exploitable.

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Installation and Configuration) version 11.2.25.0.000. A low-privileged attacker with local access can exploit this to gain unauthorized read access to a subset of data. CVSS 3.1: 3.3 (Confidentiality impact).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with local access can exploit this (requires user interaction) to perform unauthorized update, insert, or delete of data. CVSS 3.1: 2.5 (Integrity impact).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with network access via HTTP can exploit this to gain unauthorized read access and cause partial denial of service. CVSS 3.1: 3.3 (Confidentiality and Availability impact).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can exploit this to cause partial denial of service. CVSS 3.1: 3.1 (Availability impact).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. A high-privileged attacker with local access can exploit this to perform unauthorized update, insert, or delete of data and cause partial denial of service. CVSS 3.1: 3.0 (Integrity and Availability impact).

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can exploit this to gain unauthorized read access to a subset of data. CVSS 3.1: 3.7 (Confidentiality impact).

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. An unauthenticated attacker with network access via HTTP can exploit this to gain unauthorized read access to a subset of data. CVSS 3.1: 3.7 (Confidentiality impact).

Vulnerability in Oracle Hyperion Financial Reporting (component: Server) version 11.2.25.0.000. A low-privileged attacker with network access via HTTP can exploit this (requires user interaction) to perform unauthorized update, insert, or delete of data. CVSS 3.1: 2.6 (Integrity impact).

Vulnerability in Oracle Hyperion Calculation Manager (component: Security) version 11.2.25.0.000. Difficult to exploit, requires logon to infrastructure and user interaction. Allows unauthenticated attacker to unauthorized update, insert, delete and read access to some data.