CVE-2025-21502

CVE-2025-21502 affects Oracle Java SE and related GraalVM packages (Hotspot) across multiple supported versions (Java SE 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; GraalVM JDK 17.0.13/21.0.5/23.0.1; GraalVM EE 20.3.16/21.3.12). The described vulnerability allows an unauthenticated, network-acc...

CVE-2025-21503

...

CVE-2025-21500

...

CVE-2025-21498

...

CVE-2025-21497

...

CVE-2025-21495

...

CVE-2025-21497

...

CVE-2025-21494

...

CVE-2025-21493

...

CVE-2025-21494

CVE-2025-21494 refers to a local, high-privilege vulnerability in Oracle MySQL Server (Server: Security: Privileges). Affected versions are 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. Under the described conditions, a highly-privileged attacker with logon to the host where MySQL...

CVE-2025-21492

...

CVE-2025-21490

CVE-2025-21490 affects Oracle MySQL Server (InnoDB) with vulnerable versions including MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. Attacker with network access via multiple protocols and high privileges can cause a hang or complete DoS on MySQL Server. Connected advisories...

CVE-2025-21491

CVE-2025-21491 describes a vulnerability in Oracle MySQL Server (InnoDB) affecting 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. An attacker with network access and high privileges can exploit this to cause a hang or a frequent crash (complete DOS) of MySQL Server. The provided do...

CVE-2025-21489

CVE-2025-21489 affects Oracle E-Business Suite Advanced Outbound Telephony (Region Mapping) with affected 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker who can reach Oracle Advanced Outbound Telephony over HTTP to compromise data after user interaction, potentially leading ...

CVE-2025-21489

...

CVE-2024-21245

...

CVE-2025-23454

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in flashmaniac Nature FlipBook vertical-diamond-flipbook-flash allows Reflected XSS.This issue affects Nature FlipBook: from n/a through = 1.7...

CVE-2024-57930

In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...

CVE-2025-21656

creationtimestamp| type| source ---|---|--- 2025-01-21 12:58:16+00:00| seen| https://infosec.exchange/users/cve/statuses/113866460089615742 2025-01-21 13:16:02+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgawqv6i4f2b 2025-01-21 13:39:32+00:00| seen|...

CVE-2025-21662 net/mlx5: Fix variable not being completed when function returns

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix variable not being completed when function returns When cmdallocindex, fails cmdworkhandler needs to complete ent-slotted before returning early. Otherwise the task which issued the command may hang: mlx5core...