Search: “Oracle Database”

44 stories

Help Net SecurityAug 15, 11:30 UTC · Aug 15, 2018Vulnerability in the wildCVE-2018-3110

Oracle warns of CVE-2018-3110 Critical flaw in Database product, patch it now

Security AffairsAug 13, 07:35 UTC · Aug 13, 2018Vulnerability CVE-2018-3110

Hackers are targeting recently patched WebLogic security vulnerability

Security AffairsMay 1, 17:26 UTC · May 1, 2020Vulnerability CVE-2020-2883 CVE-2019-2729

Oracle’s September patches put Fusion Middleware back in the hot seat

Oracle's September 2026 CPU ships 673 patches including six CVSS 10.0 flaws in Fusion Middleware and Hyperion, none exploited in the wild.

Oracle's September 2026 Critical Security Patch Update delivers 673 patches across 17 product families, led by E-Business Suite with 159 fixes and Fusion Middleware with 153. Six CVSS 10.0 vulnerabilities in Access Manager, Forms, Internet Directory, Platform Security for Java, WebLogic Server, and Hyperion are remotely exploitable without authentication, and Oracle reports none exploited in the wild. Now patching monthly, Oracle urged immediate deployment and warned that unsupported releases are not tested for these flaws.

CSO OnlineSep 16, 15:54 UTC · 8h agoVulnerability CVE-2026-71133 CVE-2026-83099 CVE-2026-83059+16 CVEs

Oracle CPU October 2018: 301 vulnerabilities patched

Help Net SecurityOct 17, 00:00 UTC · Oct 17, 2018Vulnerability CVE-2018-2913

Oracle July 2017 Critical Patch Update addresses record-breaking 308 issues

Security AffairsJul 19, 14:51 UTC · Jul 19, 2017Vulnerability CVE-2017-3632 CVE-2017-10137 CVE-2017-10244

Oracle issues an emergency patch for a bug in Oracle Identity Manager, apply it now!

Security AffairsNov 1, 10:07 UTC · Nov 1, 2017Vulnerability CVE-2017-10151

Oracle fixes Solaris 10 flaw targeted by leaked NSA exploit

Help Net SecurityMay 28, 10:21 UTC · May 28, 2020Vulnerability CVE-2017-3623 CVE-2017-3622 CVE-2017-5638

Oracle patch update for April 2017 also fixed Struts and Shadow Brokers exploits

Security AffairsApr 19, 19:38 UTC · Apr 19, 2017Vulnerability in the wild

⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More

The Hacker NewsJun 10, 04:47 UTC · Jun 10, 2026Vulnerability in the wildCVE-2025-53770 CVE-2025-53771 CVE-2025-49704+36 CVEs

ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

The Hacker NewsOct 2, 12:19 UTC · Oct 2, 2025Vulnerability CVE-2025-10184 CVE-2024-364011

Oracle issued an emergency security update to fix new E-Business Suite flaw CVE-2025

Security AffairsOct 14, 07:31 UTC · Oct 14, 2025Vulnerability CVE-2025-61884 CVE-2025-61882

Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products

The Hacker NewsJan 22, 13:39 UTC · Jan 22, 2025Vulnerability in the wildCVE-2025-21556 CVE-2024-21287 CVE-2025-21524+10 CVEs

Perl devs fix an important flaw in DBD—MySQL that affects encryption between client and server

Security AffairsJul 6, 13:25 UTC · Jul 6, 2017Vulnerability CVE-2017-10789 CVE-2015-3152

Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817)

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-46817

Easily exploitable RCE in Oracle WebLogic Server under attack (CVE-2020-14882)

Help Net SecurityNov 3, 08:52 UTC · Nov 3, 2020Vulnerability CVE-2020-14882 CVE-2020-14750

Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager

The Hacker NewsMar 21, 10:24 UTC · Mar 21, 2026Vulnerability in the wildCVE-2026-21992 CVE-2025-61757

CVE-2016-6662 - Researcher disclosed a critical MySQL Zero

Security AffairsSep 13, 04:03 UTC · Sep 13, 2016Vulnerability CVE-2016-6662 CVE-2016-6663

Another Oracle WebLogic Server RCE under active exploitation

Help Net SecurityJun 19, 00:00 UTC · Jun 19, 2019Vulnerability in the wildCVE-2019-2729 CVE-2019-2725

Another remotely exploitable Oracle EBS vulnerability requires your attention (CVE-2025-61884)

Help Net SecurityOct 16, 17:00 UTC · Oct 16, 2025Vulnerability in the wildCVE-2025-61884 CVE-2025-61882

Kaspersky Lab report: Evaluating the threat level of software vulnerabilities

Kaspersky SecurelistFeb 1, 14:30 UTC · Feb 1, 2013Vulnerability in the wild1

Red TIM Research (RTR) founds 2 bugs affecting F5 Traffix SDC

Security AffairsMay 12, 12:00 UTC · May 12, 2022Vulnerability CVE-2022-27880 CVE-2022-27662

Red TIM Research (RTR) discovers a bug on Ericsson Network Manager

Security AffairsMar 18, 14:39 UTC · Mar 18, 2022Vulnerability CVE-2021-28488

October 2017 Oracle Critical Patch Update addresses 252 Vulnerabilities

Security AffairsOct 19, 07:03 UTC · Oct 19, 2017Vulnerability CVE-2017-10366

ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More Stories

The Hacker NewsJan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401 CVE-2007-0671 CVE-2002-0367

September Patch Tuesday forecast: Evaluate third-party updates alongside Microsoft release

Help Net SecurityOct 5, 06:34 UTC · Oct 5, 2018Vulnerability in the wildCVE-2018-11776

May 2026 Patch Tuesday forecast: AI starts driving security industry changes

Help Net SecurityMay 12, 19:03 UTC · May 12, 2026Vulnerability CVE-2026-40372 CVE-2026-33825 CVE-2026-314311

China vs. U.S.: The Race in Vulnerability Reporting

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability CVE-2016-5195 CVE-2017-5638

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-48558

Microsoft vulnerabilities have grave implications for organizations of all sizes

Help Net SecurityDec 10, 00:00 UTC · Dec 10, 2021Vulnerability CVE-2021-26855 CVE-2021-27065 CVE-2021-31196+8 CVEs

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

The Hacker NewsJun 30, 11:18 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-485582

Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

The Hacker NewsJul 29, 03:44 UTC · Jul 29, 2024Vulnerability in the wildCVE-2024-4879 CVE-2024-5178 CVE-2024-5217

September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows

Microsoft's September 2026 Patch Tuesday ships 964 fixes including two exploited Windows zero-days (CVE-2026-85880, CVE-2026-81963) and a wormable DNS RCE.

Microsoft's September 2026 Patch Tuesday includes 964 Microsoft vulnerabilities requiring customer action, a record attributed to AI-assisted bug discovery, plus 174 third-party/open-source and 23 Chromium/Edge CVEs. Two zero-days are exploited in the wild: CVE-2026-85880, a Windows ALPC heap overflow enabling AppContainer sandbox escape and privilege escalation, and CVE-2026-81963, a Windows Update Stack escalation to SYSTEM. CVE-2026-69730, an unauthenticated Windows DNS RCE, is not yet exploited but Microsoft expects exploitation, and roughly 20 bugs could be wormable. Separately, SAP issued a critical CVSS 10.0 fix for the EPP component used in S/4HANA and NetWeaver.

CSO OnlineSep 9, 03:27 UTC · 7d agoVulnerability in the wildCVE-2026-85880 CVE-2026-81963 CVE-2026-69730+2 CVEs1