Yu Wang

The issue is related to errors in handling input data in the Core component of the Oracle WebLogic Server. It allows an unauthenticated attacker with network access via T3 to compromise the server. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data on the Oracle WebLogic Server.

The issue is related to insufficient input validation in the Core component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via T3, IIOP to compromise the server. Successful attacks can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. It is estimated that millions of servers worldwide are affected, with 166,000 in Brazil alone.

A logic issue was addressed with improved validation. A malicious application may be able to disclose kernel memory.

A race condition issue was addressed with improved locking, which could allow a remote attacker to cause unexpected application termination or heap corruption.

A race condition was addressed with improved state handling, which may allow a malicious application to execute arbitrary code with kernel privileges. The issue is related to a Bluetooth component vulnerability in the macOS operating system, caused by concurrent execution using a shared resource with incorrect synchronization.

A logic issue was addressed with improved state management, which may allow a remote attacker to cause unexpected application termination or arbitrary code execution.

The issue is related to insufficient access control in the Core Components of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via IIOP, T3 protocols to compromise the server. Successful attacks can result in the takeover of Oracle WebLogic Server.

An out-of-bounds read issue existed, leading to the disclosure of kernel memory. This issue was addressed with improved input validation. A local user may be able to cause unexpected system termination or read kernel memory.

A logic issue was addressed with improved state management, allowing an application to potentially execute arbitrary code with kernel privileges.

A memory corruption issue was addressed with improved input validation. A malicious application may be able to execute arbitrary code with system privileges.

A memory corruption issue was addressed with improved input validation. A malicious application may be able to execute arbitrary code with system privileges.

The issue is related to a vulnerability in the Oracle WebLogic Server product, specifically in the Console component. This vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle WebLogic Server, potentially resulting in a takeover. The vulnerability is easily exploitable and can impact the confidentiality, integrity, and availability of the server. It is associated with errors in code generation management and can be exploited using HTTP requests.

A memory corruption issue was addressed with improved input validation, allowing an application to potentially execute arbitrary code with kernel privileges.

An out-of-bounds read issue was addressed with improved input validation. A local user may be able to cause unexpected system termination or read kernel memory.

A memory corruption issue was addressed with improved validation. A malicious application may be able to determine kernel memory layout.

A memory corruption issue was addressed with improved memory handling, which could allow a local user to cause unexpected system termination or read kernel memory.

The issue involves multiple memory corruption problems that have been resolved through enhanced memory handling. An application could potentially execute arbitrary code with kernel privileges.

The issue is related to insufficient input validation in the Oracle WebLogic Server, allowing a remote attacker to execute arbitrary code via the IIOP protocol. This can result in the takeover of the Oracle WebLogic Server. The vulnerability can be easily exploited by an unauthenticated attacker with network access.

The issue is related to insufficient input validation in the MySQL Server product, specifically in the Server: DML component. This allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server. Successful attacks can result in the takeover of the MySQL Server or cause a hang or frequently repeatable crash (complete DOS) of the server.

An out-of-bounds read issue was addressed with improved bounds checking. A malicious application may be able to determine kernel memory layout.