23602 matches found
CVE-2025-50096
Removed by vendor...
CVE-2025-50093
CVE-2025-50093 is referenced in connected documents as a MySQL Server vulnerability (DDL component) affecting 8.0.0–8.0.42, 8.4.0–8.4.5 and 9.0.0–9.3.0 with high-privilege network access that can cause a hang or crash (DoS). The connected IBM/MiracleLinux Rocky/ Rocky-Linux advisories confirm its...
CVE-2025-50094
Removed by vendor...
CVE-2025-50090
...
CVE-2025-50088
...
CVE-2025-50084
...
CVE-2025-50078
...
CVE-2025-50076
...
CVE-2025-50072
...
CVE-2025-50069
...
CVE-2025-50064
...
CVE-2025-50061
CVE-2025-50061 affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access component). Affected versions are 20.12.0–20.12.21, 21.12.0–21.12.21, 22.12.0–22.12.19, 23.12.0–23.12.13, and 24.12.0–24.12.4. An attacker with network access via HTTP and with low privileges can exploi...
CVE-2025-30745
...
CVE-2025-30747
CVE-2025-30747 affects Oracle PeopleSoft PeopleTools (PIA Core Technology). The vulnerability exists in PeopleSoft Enterprise PeopleTools components and impacts versions 8.60, 8.61, and 8.62. An unauthenticated attacker who can reach the service over HTTP can exploit this issue to access data rea...
CVE-2025-41236
creationtimestamp| type| source ---|---|--- 2025-07-15 18:53:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858762801914674 2025-07-16 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1592 2025-07-16 12:20:29+00:00| seen|...
CVE-2025-7657
Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2025-53895 ZITADEL has broken authN and authZ in session API and resulting session tokens
ZITADEL is an open source identity management system. Starting in version 2.53.0 and prior to versions 4.0.0-rc.2, 3.3.2, 2.71.13, and 2.70.14, vulnerability in ZITADEL's session management API allows any authenticated user to update a session if they know its ID, due to a missing permission chec...
CVE-2025-6972
Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file...
CVE-2025-34109
PSEvents.exe in multiple Panda Security products runs hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validation. An attacker with low-privileged access who can write DLL files to the monitored directory can achieve arbitrary code execution with...
CVE-2025-34109 Panda Security PSEvents.exe Insecure DLL Loading Privilege Escalation
PSEvents.exe in multiple Panda Security products runs hourly with SYSTEM privileges and loads DLL files from a user-writable directory without proper validation. An attacker with low-privileged access who can write DLL files to the monitored directory can achieve arbitrary code execution with...