CVE-2025-30688

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQ...

CVE-2025-30514 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

Unauthenticated attackers can obtain restricted information about a user's smart device collections i.e., "scenes"...

CVE-2025-27939 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

An attacker can change registered email addresses of other users and take over arbitrary accounts...

CVE-2025-30254 Growatt Cloud portal Authorization Bypass Through User-Controlled Key

An unauthenticated attacker can obtain a serial number of a smart meters using its owner's username...

CVE-2025-25456

creationtimestamp| type| source ---|---|--- 2025-04-15 20:55:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11905 2025-04-15 22:28:06+00:00| seen| https://t.me/cvedetector/23000 2025-04-15 22:48:39+00:00| seen|...

CVE-2025-30702

...

CVE-2025-30737

...

CVE-2025-30736

...

CVE-2025-30736

CVE-2025-30736 affects Oracle Database Server's Java VM component. Affected versions: 19.3–19.26, 21.3–21.17, and 23.4–23.7. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise the Java VM, potentially leading to unauthorized creation, del...

CVE-2025-30733

...

CVE-2025-30732

...

CVE-2025-30730

The CVE-2025-30730 entry concerns Oracle E-Business Suite’s Oracle Application Object Library (Core), affected in versions 12.2.5–12.2.14. The vulnerability enables an unauthenticated attacker with network access via HTTP to cause a hang or a frequently repeatable crash (complete DoS) of Oracle A...

CVE-2025-30731

...

CVE-2025-30727

...

CVE-2025-30723

...

CVE-2025-30722

...

CVE-2025-30722

Vulnerability in the MySQL Client product of Oracle MySQL component: Client: mysqldump. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2025-30722

The CVE-2025-30722 entry concerns Oracle MySQL’s MySQL Client (Client: mysqldump). Affected versions are 8.0.0–8.0.41, 8.4.0–8.4.4 and 9.0.0–9.2.0. The vulnerability is described as difficult to exploit but allows a low-privileged, network-accessing attacker to compromise MySQL Client, potentiall...

CVE-2025-30720

The CVE-2025-30720 vulnerability affects Oracle E-Business Suite Oracle Configurator (Orders component) in versions 12.2.3–12.2.14. It allows an unauthenticated attacker with network access via HTTP to compromise Configurator, with attacks requiring user interaction and potentially impacting othe...

CVE-2025-30718

CVE-2025-30718 affects Oracle E-Business Suite, Oracle Applications Framework, specifically the Attachments/File Upload component. Affected versions are 12.2.3–12.2.14. The issue allows a low-privileged, network-accessible attacker (HTTP) to read and modify Oracle Applications Framework data, pot...