CVE-2025-21548

The CVE-2025-21548 entry concerns Oracle MySQL Connectors (Connector/Python) with affected versions 9.1.0 and prior. The vulnerability enables a high-privileged attacker, with network access via multiple protocols, to compromise MySQL Connectors. Attacks require user interaction from someone othe...

CVE-2025-21537

...

CVE-2025-21532

CVE-2025-21532 : A vulnerability in Oracle Analytics Desktop (Install component) affects all supported versions before 8.1.0. An attacker with local logon and low privileges can compromise Oracle Analytics Desktop, potentially taking over the application. According to Oracle and PT Security advis...

CVE-2025-21528

...

CVE-2025-21521

...

CVE-2025-21520

...

CVE-2025-21507

CVE-2025-21507 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component, with affected versions prior to 9.2.9.0. The issue allows a low-privileged attacker who can reach the system over HTTP to compromise JD Edwards EnterpriseOne Tools; exploitation requires user...

CVE-2025-21501

...

CVE-2025-21492

...

CVE-2025-21489

...

Security Advisory 0110

Security Advisory 0110 . CSAF PDF Date: January 24, 2025 Revision | Date | Changes ---|---|--- 1.0 | January 21, 2025 | Initial release 1.1 | January 24, 2025 | Updated Affected Software Versions list The CVE-ID tracking this issue: CVE-2024-9135 CVSSv3.1 Base Score: 5.3...

Akamai Named a Major Player in IDC MarketScape: Worldwide Public Cloud IaaS 2025 Assessment

...

Fuji Electric Alpha5 SMART

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize network exposure for all control...

Ubuntu: Security Advisory (USN-7195-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CGA-X6RM-C53H-P7JW

Bulletin has no description...

CVE-2024-12085

A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data at a time...

CVE-2024-48890

creationtimestamp| type| source ---|---|--- 2025-01-14 14:17:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpgwyuidj2r 2025-01-14 15:39:39+00:00| seen| https://t.me/cvedetector/15255 2025-01-14 16:28:27+00:00| seen|...

Belledonne Communications Linphone-Desktop

RISK EVALUATION Successful exploitation of this vulnerability could could result in a remote attacker causing a denial-of-service condition on the affected devices. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability,...

Schneider Electric EcoStruxure Power Monitoring Expert (PME) (Update A)

RISK EVALUATION Successful exploitation of this vulnerability could cause a denial-of-service of the product when an unauthenticated user sends a crafted HTTPS packet to the webserver. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior...

Siemens Industrial Edge Management

SUMMARY Industrial Edge Management is affected by a reflected cross-site scripting XSS vulnerability that could allow an attacker to extract sensitive information by tricking users into accessing a malicious link. Siemens recommends countermeasures for products where fixes are not, or not yet...