BIT-MYSQL-CLIENT-2025-30693

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

The vulnerability of the gf-media-import function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gf-media-import function in the MP4Box utility of the GPAC multimedia platform is related to a buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the gf_filter_pid_inst_swap_delete_task function in the MP4Box multimedia platform GPAC allows a intruder to cause a service failure.

The vulnerability of the gffilterpidinstswapdeletetask function in the MP4Box multimedia platform GPAC utility is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to cause a service failure...

AZL-65489 CVE-2025-50100 affecting package mysql for versions less than 8.0.43-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Thread Pooling. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2025-30752

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE component: Compiler. The supported version that is affected is Oracle Java SE: 24.0.1; Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

CVE-2025-53891

The CVE-2025-53891 entry affects the TIME LINE website (repository: timelineofficial/Time-Line-) where uploaded files (instruction/media) are not strictly validated for type/size. The root cause is insufficient validation, allowing renamed or oversized files that can cause malicious file uploads,...

The vulnerability of the formSetMacFilterCfg() function (/goform/setMacFilterCfg) in the Tenda AC1206 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formSetMacFilterCfg function /goform/setMacFilterCfg of the Tenda AC1206 router’s microprogramming software is related to the issue where the operation’s output escapes the buffer and enters memory when processing the deviceList parameter. Exploiting this vulnerability...

The vulnerability of the COMP_DUMMY() function in the sound module/soc/mediatek/mt8195/mt8195-mt6359.c kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the COMPDUMMY function in the sound/soc/mediatek/mt8195/mt8195-mt6359.c file of the Linux operating system’s kernel is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fromPptpUserSetting() function (/goform/PPTPUserSetting) in the Tenda FH1202 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the fromPptpUserSetting function /goform/PPTPUserSetting in the Tenda FH1202 router microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the delno parameter. Exploiting this vulnerability allows a malicious actor t...

The vulnerability of the fromRouteStatic() function (/goform/fromRouteStatic) in the Tenda FH1201 router software allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the fromRouteStatic function /goform/fromRouteStatic in the Tenda FH1201 router software lies in the fact that the operation escapes the buffer boundaries and is stored in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause servic...

The vulnerability of the frmL7ProtForm()/goform/L7Prot function in the microprogramming software for Tenda FH1201 allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the frmL7ProtForm/goform/L7Prot function in the Tenda FH1201 router’s microprogramming software is related to the execution of operations outside the buffer in memory when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitra...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

The vulnerability of the `addImage` method in the library for creating PDF files (jsPDF) allows a hacker to induce a service failure.

The vulnerability of the addImage method in the library used for creating PDF files by jsPDF is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by uploading a payload to the server...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

CVE-2023-38036

CVE-2023-38036 affects Ivanti Avalanche Manager prior to version 6.4.1. The vulnerability is described as an unauthenticated buffer overflow that can lead to service disruption or arbitrary code execution. The PT-2023-26259 entry explicitly notes affected software as Ivanti Avalanche Manager vers...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

CVE-2023-38036

A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to create a buffer overflow that could result in service disruption or arbitrary code execution...

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.51.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...

CVE-2025-3933

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically within the DonutProcessor class's token2json method. This vulnerability affects versions 4.50.3 and earlier, and is fixed in version 4.52.1. The issue arises from the...