Search: 16.5-2

CVE-2026-101618 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate risks associated with this vulnerability.

CVE-2026-101617 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. The vulnerability is part of a large set of security issues addressed in Oracle's October 2026 Critical Patch Update. Oracle strongly recommends applying the provided patches promptly to mitigate this and other vulnerabilities.

CVE-2026-101616 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically related to the JSON server component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu 14.04-specific MySQL 5.5 builds. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many products.

CVE-2026-101615 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released in Oracle's October 2026 Critical Patch Update. No specific technical details or exploitation methods are provided. Oracle strongly recommends applying available patches promptly to mitigate this and other vulnerabilities.

CVE-2026-101614 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. Oracle strongly recommends applying the available patches promptly to mitigate this and other vulnerabilities.

CVE-2026-101613 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically related to Data Definition Language (DDL) operations. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as specific Ubuntu 5.5 builds. Oracle has released a Critical Patch Update in October 2026 that addresses this and many other vulnerabilities. Users are strongly advised to apply the available patches promptly to mitigate the risk.

CVE-2026-101612 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) across multiple versions including MySQL 8.0, 8.4, and 9.7. The vulnerability is recognized and addressed in Oracle's October 2026 Critical Patch Update, which includes numerous security patches for Oracle products. The advisory emphasizes the importance of applying these patches promptly to mitigate exploitation risks. There is no public exploit code or confirmed exploitation in the wild reported for this vulnerability.

CVE-2026-101611 is a security vulnerability affecting MySQL Server and MySQL Cluster (InnoDB) products, including versions 8.0, 8.4, and 9.7. The vulnerability is publicly known and has been addressed by Oracle in their October 2026 Critical Patch Update, which includes numerous security patches across multiple Oracle products. There is no public exploit code or reports of exploitation in the wild for this vulnerability. Oracle strongly recommends applying the available patches promptly to mitigate the risk.

CVE-2026-101610 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as certain Ubuntu 14.04-specific MySQL 5.5 builds. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which provides security patches for affected products.

CVE-2026-101609 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster (InnoDB), including versions 8.0, 8.4, and 9.7. It is part of a large set of security patches released by Oracle in their October 2026 Critical Patch Update. The advisory emphasizes the importance of applying available patches promptly to mitigate exploitation risks.

CVE-2026-101608 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across Oracle products. Customers are strongly advised to apply the available patches promptly to mitigate the risk.

CVE-2026-101607 is a medium severity vulnerability affecting MySQL Server and MySQL Cluster, specifically the Server Optimizer component. It impacts multiple MySQL versions including 8.0, 8.4, and 9.7, as well as various Ubuntu-packaged versions of MySQL 5.5. Oracle has included this vulnerability in its October 2026 Critical Patch Update, which contains numerous security patches across many Oracle products. No public exploit or active exploitation has been reported. Oracle strongly recommends applying the available patches promptly to mitigate the risk.

CVE-2026-101599 is a high severity vulnerability affecting specific versions of Oracle VM VirtualBox. It has a CVSS 3.1 score of 7.5, indicating a significant risk. The vulnerability requires local attack vector with high attack complexity, low privileges, and user interaction, but can impact confidentiality, integrity, and availability with a scope change. Multiple versions of VirtualBox 5.0.x are affected. No public exploits or patches are currently documented in the provided data.

CVE-2026-101598 is a high-severity vulnerability affecting specific versions of Oracle VM VirtualBox. It has a CVSS 3.1 base score of 7.8, indicating significant impact on confidentiality, integrity, and availability. The vulnerability requires local access with low complexity and no user interaction. It affects multiple specific versions of VirtualBox, primarily in the 5.0.x series. There is no information about public exploits or vendor patches in the provided data.

CVE-2026-101516 is a medium severity vulnerability affecting specific builds of OpenJDK 8, including versions distributed in various Ubuntu releases. The vulnerability impacts Oracle Java SE, Oracle GraalVM for JDK, and related Oracle products. It has a CVSS 3.1 base score of 6.5, indicating a network exploitable flaw with low complexity and no required privileges or user interaction, leading to limited confidentiality and integrity impacts without affecting availability.

A segmentation violation vulnerability exists in the gf_props_equal_internal function of the gpac software. This flaw can cause a crash or denial of service when the function is triggered. The vulnerability has a medium severity rating with a CVSS score of 5.5 and requires local access with user interaction to exploit.

A buffer overflow vulnerability exists in the gf_ac4_parser_bs function of the gpac media processing tool. This flaw can cause a denial of service by crashing the application. The vulnerability affects multiple specific versions of gpac. The CVSS score is 5.5, indicating medium severity with local attack vector and no confidentiality or integrity impact.

A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

IBM QRadar SIEM 7.6.0.0 through 7.6.0.4, and 7.5.0 through 7.5.0 Update Package 16 Interim Fix 001 could allow a remote attacker to cause a denial of service or obtain sensitive information due to an out-of-bounds read.

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16 and 25.12.0-25.12.8. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N).