6716 matches found
CVE-2025-49838 GHSL-2025-050: GPT-SoVITS Deserialization of Untrusted Data vulnerability
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in vr.py AudioPreDeEcho. The modelchoose variable takes user input e.g. a path to a model and passes it to the uvr function. In uvr, a new instance o...
CVE-2025-49836 GHSL-2025-048: GPT-SoVITS Command Injection vulnerability
GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is a command injection vulnerability in webui.py changelabel function. pathlist takes user input, which is passed to the changelabel function, which concatenates the user input into a command...
CVE-2025-53026
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2025-53030
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
CVE-2025-49828
creationtimestamp| type| source ---|---|--- 2025-07-15 19:56:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114859009211207817 2025-07-16 20:32:46+00:00| seen| https://seclists.org/oss-sec/2025/q3/49 2025-07-18 17:07:26+00:00| seen|...
CVE-2025-53030
...
CVE-2025-53031
CVE-2025-53031 — mode: normal (detailed) Affected product: Oracle Financial Services Analytical Applications Infrastructure (in Oracle Financial Services Applications). Vulnerability details: An easily exploitable issue exists in the Platform component. An unauthenticated attacker with network ac...
CVE-2025-53031
...
CVE-2025-53029
CVE-2025-53029 affects Oracle VM VirtualBox (Core) on version 7.1.10. The vulnerability is described as a local, high-privilege attack that can result in unauthorized read access to a subset of VirtualBox data. Evidence from multiple feeds (NVD/Nessus/OpenVAS references) attributes a low CVSSv3.1...
CVE-2025-53029
...
CVE-2025-53026
...
CVE-2025-53025
...
CVE-2025-53025
...
CVE-2025-53023
CVE-2025-53023 is a MySQL Server vulnerability in the replication component. Affected are MySQL 8.0.0–8.0.42. The issue allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequent crash (DOS) of MySQL Server. The CVSS v3.1 base score is 4.9 (Availabi...
CVE-2025-50108
The CVE-2025-50108 entry concerns Oracle Hyperion Financial Reporting (Workspace component) with affected version 11.2.20.0.000. A vulnerability exists in the Workspace area that can be exploited by a low-privileged attacker over HTTP with network access; exploitation requires user interaction. S...
CVE-2025-50107
...
CVE-2025-53023
...
CVE-2025-50106
CVE-2025-50106 affects Oracle Java SE and Oracle GraalVM family (including JDK/Enterprise Edition) with affected component 2D (also appears under JSSE/Networking and Scripting in some advisories). Affected Oracle Java SE versions include 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; affect...
CVE-2025-50102
CVE-2025-50102 refers to a vulnerability in Oracle MySQL Server (Server: Optimizer). Affected versions are 8.0.0–8.0.42, 8.4.0–8.4.5, and 9.0.0–9.3.0. It can be exploited by a high-privilege attacker with network access via multiple protocols, leading to a hang or a frequent crash (complete DOS) ...