CVE-2025-21543

CVE-2025-21543 affects Oracle MySQL Server (component: Server: Packaging). Affects MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. An attacker with high privileges who can reach the server over the network via multiple protocols can cause the server to hang or crash (complete ...

CVE-2025-21533

CVE-2025-21533 is a local vulnerability in Oracle VM VirtualBox Core affecting older 7.0.x and 7.1.x releases (prior to 7.0.24 and prior to 7.1.6). A low-privilege user with logon can compromise VirtualBox, potentially giving unauthorized access to data. CVSS v3.1 base score 5.5 (C:H, I:N, A:N). ...

CVE-2025-21523

...

CVE-2025-21516

...

CVE-2025-21517

...

CVE-2025-21511

The CVE-2025-21511 entry concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected versions are prior to 9.2.9.0. An unauthenticated, network-accessible attacker can compromise EnterpriseOne Tools via HTTP, potentially leading to unauthorized access to c...

CVE-2025-21495

...

PT-2025-4239

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1 Oracle GraalVM for JDK versions 17.0.13, 21.0.5, 23.0.1 Oracle GraalVM Enterprise Edition versions 20.3.16, 21.3.12 Description A difficult to exploit vulnerability allows...

Oracle Health Sciences Applications 安全漏洞

Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in Oracle Life Sciences Argus Safety version 8.2.3 for Oracle Health Sciences Applications. An attacker could exploit the...

RHEL 8 / 9 : Red Hat JBoss Web Server 6.0.5 (RHSA-2025:0342)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0342 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache...

Next.js DoS

The vulnerability of the Next.js software platform for creating web applications is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2025-0590

Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...

CVE-2025-0590

The mobile application com.transsion.carlcare by Transsion (TECNO) is affected by CVE-2025-0590 due to improper permission settings . Specifically, version 6.2.8.1 is identified as vulnerable, where incorrect privilege assignments can result in information disclosure or leakage risk. While the vu...

CVE-2025-0590

Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...

CVE-2025-0590

Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...

CVE-2024-54681

CVE-2024-54681 affects Ossur Mobile Logic Application. Connected sources confirm the root cause is the presence of multiple bash files in the application’s private directory, which an attacker with full access on the mobile platform can use to compromise translations. Public mentions (e.g., Red H...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

Details have emerged about a now-patched security vulnerability that could allow a bypass of the Secure Boot mechanism in Unified Extensible Firmware Interface UEFI systems. The vulnerability, assigned the CVE identifier CVE-2024-7344 CVSS score: 6.7, resides in a UEFI application signed by...

BIT-PYTHON-MIN-2020-15523

In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4, and 3.9 through 3.9.0 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading after...

IBM Concert Input Validation Error Vulnerability (CNVD-2025-02547)

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. An input validation error vulnerability exists in IBM Concert versions 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3, which stems from incorrect log...