6716 matches found
CVE-2025-30753
...
CVE-2025-30752
...
CVE-2025-30751
CVE-2025-30751 affects Oracle Database Server (Oracle Database component). Affected supported versions are 19.27 and 23.4–23.8. The flaw enables a low-privileged attacker who has Create Session and Create Procedure privileges with network access via Oracle Net to compromise the database, potentia...
CVE-2025-30750
CVE-2025-30750 affects Oracle Database Server Unified Audit. Affected versions: 19.3–19.27, 21.3–21.18, 23.4–23.8. High-privileged attacker with Create User privilege and network access via Oracle Net can compromise Unified Audit; exploitation requires user interaction and may allow unauthorized ...
CVE-2025-30751
...
CVE-2025-30748
...
CVE-2025-30748
...
CVE-2025-30744
CVE-2025-30744 affects Oracle E-Business Suite (Oracle Mobile Field Service, component Multiplatform Sync Errors). Affected versions are 12.2.3–12.2.13. The vulnerability allows a low-privileged, network-accessible attacker (HTTP) to cause unauthorized creation, deletion, or modification of data,...
CVE-2025-30744
...
CVE-2025-30739
The CVE-2025-30739 entry concerns Oracle E-Business Suite, specifically the Oracle CRM Technical Foundation component (Preferences). Affected are CRM Technical Foundation versions 12.2.11–12.2.13. The issue enables a high-privilege attacker, with network access over HTTP, to compromise data in Or...
CVE-2025-53893 File Browser Vulnerable to Uncontrolled Memory Consumption Due to Oversized File Processing
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename, and edit files. In version 2.38.0, a Denial of Service DoS vulnerability exists in the file processing logic when reading a file on endpoint...
CVE-2025-6971
creationtimestamp| type| source ---|---|--- 2025-07-15 15:19:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857919005997369 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-616/...
CVE-2025-34104
An authenticated remote code execution vulnerability exists in Piwik now Matomo versions prior to 3.0.3 via the plugin upload mechanism. In vulnerable versions, an authenticated user with Superuser privileges can upload and activate a malicious plugin ZIP archive, leading to arbitrary PHP code...
CVE-2025-5040
creationtimestamp| type| source ---|---|--- 2025-07-15 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-596/...
CVE-2025-50819
CVE-2025-50819 affects beiyuouo arxiv-daily prior to 2025-05-06. The vulnerability is a directory traversal in the parsing of topic.yml in daily_arxiv.py (commit fad168770b0e68aef3e5acfa16bb2e7a7765d687). Impact is described as HIGH with local exploitation and high integrity/availability impact. ...
CVE-2025-53885 Directus doesn't redact sensitive user data when logging via event hooks
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template...
CVE-2025-7029
creationtimestamp| type| source ---|---|--- 2025-07-14 13:12:10+00:00| seen| https://bsky.app/profile/brianhaddock.bsky.social/post/3ltwho4bzyf2a 2025-07-14 13:45:03+00:00| seen| https://t.me/truesecator/7227 2025-07-15 14:29:23+00:00| seen| https://t.me/SEReborn/5756 2025-07-16 17:11:09+00:00|...
CVE-2025-7605 code-projects AVL Rooms profile.php sql injection
A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has been...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...