6722 matches found
CVE-2025-21577
CVE-2025-21577 affects Oracle MySQL Server (InnoDB) with vulnerable versions 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. The vulnerability allows a low-privilege, network-exposed attacker to cause a hang or crash (DoS) in MySQL Server via the InnoDB component. Reported CVSS 3.1 Base Score 6.5 (Av...
CVE-2025-21576
CVE-2025-21576 affects Oracle Commerce Platform (Dynamo Personalization Server) for Oracle Commerce versions 11.3.0–11.3.2. The vulnerability enables a low-privileged, network-accessible attacker (via HTTP) to compromise the platform, with user interaction required, potentially leading to unautho...
CVE-2025-21575
...
CVE-2025-21574
...
CVE-2025-2567 Lantronix Xport Missing Authentication for Critical Function
An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling of ATG monitoring. This would result in potential safety hazards in fuel storage and transportation...
CVE-2025-28100
creationtimestamp| type| source ---|---|--- 2025-04-15 17:55:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11871 2025-04-15 18:44:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmuqal4bdg2q 2025-04-15 21:37:49+00:00| seen|...
CVE-2024-36842
An issue in Oncord+ Android Infotainment Systems OS Android 12, Model Hardware TS17,Hardware part Number F57LV3.220220301, and Build Number PlatformVER:K24-2023/05/09-v0.01 allows a remote attacker to execute arbitrary code via the ADB port component...
CVE-2025-32949
This vulnerability allows any authenticated user to cause the server to consume very large amounts of disk space when extracting a Zip Bomb. If user import is enabled which is the default setting, any registered user can upload an archive for importing. The code uses the yauzl library for reading...
CVE-2025-32948 PeerTube ActivityPub Playlist Creation Blind SSRF and DoS
The vulnerability allows any attacker to cause the PeerTube server to stop functioning, or in special cases send requests to arbitrary URLs Blind SSRF. Attackers can send ActivityPub activities to PeerTube's "inbox" endpoint. By abusing the "Create Activity" functionality, it is possible to creat...
CVE-2025-32947 PeerTube ActivityPub Crawl Infinite Loop DoS
This vulnerability allows any attacker to cause the PeerTube server to stop responding to requests due to an infinite loop in the "inbox" endpoint when receiving crafted ActivityPub activities...
CVE-2025-3608
A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading to an exploitable condition. This vulnerability was fixed in Firefox 137.0.2...
CVE-2025-32946
PeerTube Arbitrary Playlist Creation via ActivityPub (CVE-2025-32946) allows one user to add playlists to another user’s channel due to a missing permission check when handling ActivityPub requests. The vulnerability is triggered when the code assigns the playlist owner to the requester while ass...
CVE-2025-3576
creationtimestamp| type| source ---|---|--- 2025-04-15 06:54:49+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11774 2025-04-15 08:38:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtofsrfxt2h 2025-04-15 09:04:44+00:00| seen| https://t.me/cvedetector/22921 2025-09-05...
CVE-2025-3622
creationtimestamp| type| source ---|---|--- 2025-04-15 05:54:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11768 2025-04-15 08:38:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtofsntx62v 2025-04-15 09:04:43+00:00| seen|...
CVE-2025-32996
creationtimestamp| type| source ---|---|--- 2025-04-15 02:55:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11739 2025-04-15 04:38:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmtayd6spt2b 2025-04-15 07:24:08+00:00| seen|...
CVE-2025-32997
In http-proxy-middleware before 2.0.9 and 3.x before 3.0.5, fixRequestBody proceeds even if bodyParser has failed...
CVE-2025-22900
Totolink N600R v4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig function...
CVE-2025-28399
An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of the Address Controller class...