15717 matches found
CVE-2025-21564
...
CVE-2025-21558
...
CVE-2025-21549
...
CVE-2025-21549
CVE-2025-21549 relates to Oracle WebLogic Server (Fusion Middleware) core in version 14.1.1.0.0. The vulnerability permits an unauthenticated attacker with network access over HTTP/2 to cause the WebLogic Server to hang or crash (complete DOS). This aligns with the CVSS v3.1 base score of 7.5 (Av...
CVE-2025-21543
CVE-2025-21543 affects Oracle MySQL Server (component: Server: Packaging). Affects MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. An attacker with high privileges who can reach the server over the network via multiple protocols can cause the server to hang or crash (complete ...
CVE-2025-21542
CVE-2025-21542 affects Oracle Communications Order and Service Management (OC OSM) in versions 7.4.0, 7.4.1 and 7.5.0. The issue is described as an access control weakness in the Security component that, with network access over HTTP and using low privileges, allows unauthorized update/insert/del...
CVE-2025-21533
CVE-2025-21533 is a local vulnerability in Oracle VM VirtualBox Core affecting older 7.0.x and 7.1.x releases (prior to 7.0.24 and prior to 7.1.6). A low-privilege user with logon can compromise VirtualBox, potentially giving unauthorized access to data. CVSS v3.1 base score 5.5 (C:H, I:N, A:N). ...
CVE-2025-21523
...
CVE-2025-21516
...
CVE-2025-21517
...
CVE-2025-21511
The CVE-2025-21511 entry concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected versions are prior to 9.2.9.0. An unauthenticated, network-accessible attacker can compromise EnterpriseOne Tools via HTTP, potentially leading to unauthorized access to c...
CVE-2025-21495
...
Oracle Health Sciences Applications 安全漏洞
Oracle Health Sciences Applications is a suite of clinical development solutions for the healthcare industry from Oracle Corporation. A security vulnerability exists in Oracle Life Sciences Argus Safety version 8.2.3 for Oracle Health Sciences Applications. An attacker could exploit the...
PT-2025-4239
Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1 Oracle GraalVM for JDK versions 17.0.13, 21.0.5, 23.0.1 Oracle GraalVM Enterprise Edition versions 20.3.16, 21.3.12 Description A difficult to exploit vulnerability allows...
The vulnerability of the Next.js software platform for creating web applications, related to unlimited resource distribution, allows attackers to trigger service failures.
The vulnerability of the Next.js software platform for creating web applications is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...
RHEL 8 / 9 : Red Hat JBoss Web Server 6.0.5 (RHSA-2025:0342)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:0342 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache...
CVE-2025-0590
Improper permission settings for mobile applications com.transsion.carlcare may lead to information leakage risk...
CVE-2025-0590
CVE-2025-0590 affects the TECNO/Transsion Carlcare mobile app. The root cause is improper permission settings that may cause information leakage (CVE-2025-0590; CVSS 3.1: 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). Exploitation details are not provided in the documents; remediation/fixes are ...