CVE-2025-1656

CVE-2025-1656 describes a Heap-Based Overflow in PDF parsing when linked or imported into Autodesk applications, leading to crash, data leakage, or arbitrary code execution in the current process. Multiple connected sources (NVD, Red Hat, CVE list, and Nessus plugin) consistently reference a PDF-...

CVE-2025-1656 PDF File Parsing Heap-based Overflow Vulnerability

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-1273 PDF File Parsing Heap-Based Overflow Vulnerability

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-1273

The CVE-2025-1273 issue affects Autodesk applications (notably when handling PDFs) due to a heap-based overflow in the PDF parsing path. A maliciously crafted PDF that is linked or imported can trigger a heap overflow, enabling a crash, potential data leakage, or arbitrary code execution within t...

CVE-2025-1273 PDF File Parsing Heap-Based Overflow Vulnerability

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-1276 DWG File Parsing Out-of-Bounds Write Vulnerability

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-1276

CVE-2025-1276 : A maliciously crafted DWG file, when parsed by Autodesk applications, can trigger an Out-of-Bounds Write vulnerability. Impacted behavior includes a crash, data corruption, or arbitrary code execution in the context of the affected process. The root cause is an out-of-bounds write...

CVE-2025-1276 DWG File Parsing Out-of-Bounds Write Vulnerability

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability. A malicious actor may leverage this vulnerability to cause a crash, cause data corruption, or execute arbitrary code in the context of the current process...

CVE-2025-1275 JPG File Parsing Heap-Based Overflow Vulnerability

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-1275

The CVE-2025-1275 entry concerns a heap-based overflow in JPG parsing when linked or imported into Autodesk applications. The vulnerability affects Autodesk products using JPG handling in affected workflows (e.g., AutoCAD/Revit-related components) and can allow a malicious actor to crash the appl...

CVE-2025-1275 JPG File Parsing Heap-Based Overflow Vulnerability

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-30728

...

CVE-2025-30725

...

CVE-2025-30715

Public technical details about CVE-2025-30715 are not provided in the supplied documents. Monitor for updates from Oracle and vendors for affected versions, impact, and fixes.

CVE-2025-30708

Oracle E-Business Suite vulnerability CVE-2025-30708 affects Oracle User Management (component: Search and Register Users) in 12.2.4–12.2.14. Multiple sources in connected documents confirm an unauthenticated, network-accessible exposure via HTTP that can lead to unauthorized access to sensitive ...

CVE-2025-30707

...

CVE-2025-30699

CVE-2025-30699 affects Oracle MySQL Server, component: Server: Stored Procedure. Affected versions: 8.0.0–8.0.41, 8.4.0–8.4.4, 9.0.0–9.2.0. An attacker with high privileges and network access via multiple protocols can exploit this to cause a hang or a complete denial of service on MySQL Server. ...

CVE-2025-30687

CVE-2025-30687 affects Oracle MySQL Server (Server: Optimizer). Affected are MySQL versions 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. The issue allows a network-accessing, low-privilege attacker to cause a hang or frequent crashes (DoS). No exploitation status or in-wild details are provided in...

CVE-2025-21583

Oracle MySQL Server vulnerability CVE-2025-21583 affects the Server: DDL component in MySQL. Affected versions are 8.4.0 and 9.0.0. The issue can be triggered by a high-privileged attacker with network access via multiple protocols, leading to a hang or a frequently repeatable crash (complete DoS...

CVE-2025-31933

CVE-2025-31933 affects Growatt Cloud Applications. An unauthenticated attacker can enumerate usernames by querying an API; CNNVD cites affected versions 3.6.0 and earlier. The issue originates from unauthenticated access to a username list via the API. Red Hat and NVD entries corroborate the basi...