23602 matches found
CVE-2025-30718
Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments, File Upload. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...
CVE-2025-31357
An unauthenticated attacker can obtain a user's plant list by knowing the username...
CVE-2025-30708
Vulnerability in the Oracle User Management product of Oracle E-Business Suite component: Search and Register Users. Supported versions that are affected are 12.2.4-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle User...
CVE-2025-2567
An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring. This would result in potential safety hazards in fuel storage and transportation...
CVE-2025-3765
creationtimestamp| type| source ---|---|--- 2025-04-17 19:58:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12332 2025-04-17 22:53:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274ocr5f2y 2025-04-18 00:41:46+00:00| seen|...
CVE-2025-3762
A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component MPUT Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the...
CVE-2025-29180
creationtimestamp| type| source ---|---|--- 2025-04-17 18:54:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzrqy5trg2v 2025-04-17 20:30:21+00:00| seen| https://t.me/cvedetector/23250...
CVE-2021-47671
The CVE-2021-47671 issue affects the Linux kernel can: etas_es58x driver. In es58x_rx_err_msg(), when can->do_set_mode() fails, the code previously returned and did not free the skb allocated by alloc_can_err_skb(), causing a memory leak. A patch was applied to remove the return in the error p...
CVE-2021-47670
CVE-2021-47670 (can: peak_usb) is a use-after-free in the Linux kernel can subsystem. After peak_usb_netif_rx_ni(skb) is called, the skb may be dereferenced, and the can_frame cf that aliases skb memory can access memory that has been freed. The issue is resolved by reordering code lines to preve...
CVE-2021-47670
In the Linux kernel, the following vulnerability has been resolved: can: peakusb: fix use after free bugs After calling peakusbnetifrxniskb, dereferencing skb is unsafe. Especially, the canframe cf which aliases skb memory is accessed after the peakusbnetifrxni. Reordering the lines solves the...
CVE-2021-47668
CVE-2021-47668 is a Linux kernel use-after-free vulnerability in the CAN restart path. The issue occurs when, after calling netif_rx_ni(skb), the code dereferences the same skb memory (specifically cf->len from the can_frame cf aliasing skb), which is unsafe and can lead to memory corruption. ...
CVE-2021-47669 can: vxcan: vxcan_xmit: fix use after free bug
In the Linux kernel, the following vulnerability has been resolved: can: vxcan: vxcanxmit: fix use after free bug After calling netifrxniskb, dereferencing skb is unsafe. Especially, the canfdframe cfd which aliases skb memory is accessed after the netifrxni...
WordPress Fluent Forms plugin <= 6.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Asaf Mozes in WordPress Plugin FluentForm versions = 6.0.2...
CVE-2025-29662
A RCE vulnerability in the core application in LandChat 3.25.12.18 allows an unauthenticated attacker to execute system code via remote network access...
CVE-2025-22114
In the Linux kernel, the following vulnerability has been resolved: btrfs: don't clobber ret in btrfsvalidatesuper Commit 2a9bb78cfd36 "btrfs: validate system chunk array at btrfsvalidatesuper" introduces a call to validatesyschunkarray in btrfsvalidatesuper, which clobbers the value of ret set...
CVE-2025-32779
E.D.D.I Enhanced Dialog Driven Interface is a middleware to connect and manage LLM API bots. In versions before 5.5.0, an attacker with access to the /backup/import API endpoint can write arbitrary files to locations outside the intended extraction directory due to a Zip Slip vulnerability...
CVE-2025-32665
creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325153799279 2025-04-17 18:24:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3dnfgi2h...
CVE-2025-32636
creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354324910862733...
CVE-2024-58094
In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before truncation in jfstruncatenolock Added a check for "read-only" mode in the jfstruncatenolock function to avoid errors related to writing to a read-only filesystem. Call stack: blockwritebegin...