CVE-2025-61761

CVE-2025-61761 affects Oracle PeopleSoft, specifically the PeopleSoft Enterprise FIN Maintenance Management component (Work Order Management) in version 9.2. The vulnerability allows a low-privileged, unauthenticated attacker with network access over HTTP to cause unauthorized update/insert/delet...

CVE-2025-61757

...

CVE-2025-61758

CVE-2025-61758 affects Oracle PeopleSoft IT Asset Management (PeopleSoft Enterprise FIN IT Asset Management) version 9.2. The vulnerability allows a low-privileged attacker with network access over HTTP to access sensitive data, with confidentiality impact. Oracle and multiple advisories note fix...

CVE-2025-61754

...

CVE-2025-61754

The CVE-2025-61754 entry affects Oracle BI Publisher (Web Service API) within Oracle Analytics. Affected versions are 7.6.0.0.0 and 8.2.0.0.0. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, potentially leading to unauthorized access to Oracle BI Publis...

CVE-2025-61755

...

CVE-2025-61753

...

CVE-2025-53072

...

CVE-2025-53069

...

CVE-2025-53064

...

CVE-2025-53059

CVE-2025-53059 affects Oracle PeopleSoft: PeopleSoft Enterprise PeopleTools (OpenSearch Dashboards) with affected versions 8.60, 8.61, 8.62. The flaw enables a high-privileged attacker with network access via HTTP to compromise PeopleSoft PeopleTools and potentially obtain unauthorized access to ...

CVE-2025-53051

CVE-2025-53051 affects Oracle Database Server’s RDBMS Functional Index component, with affected versions 23.4–23.9. The vulnerability enables a high-privilege SYSDBA attacker, with network access via Oracle Net, to read a subset of RDBMS Functional Index data. The CVSS base score is 2.7 (LOW) wit...

CVE-2025-53049

The CVE-2025-53049 vulnerability affects Oracle Analytics OBIEE (Oracle Business Intelligence Enterprise Edition) with the Analytics Web Administration component. Affected versions are 7.6.0.0.0 and 8.2.0.0.0. The issue allows a high-privilege attacker, with network access via HTTP, to compromise...

CVE-2025-53049

...

CVE-2025-53044

...

CVE-2025-53045

...

CVE-2025-53045

CVE-2025-53045 is part of a cluster of Oracle MySQL (MySQL Server) vulnerabilities affecting InnoDB, Server: Optimizer, DML, and related components. Affected are MySQL versions 8.0.0–8.0.43, 8.4.0–8.4.6, and 9.0.0–9.4.0. The vulnerability can be exploited by a highly privileged attacker who has n...

CVE-2025-62518 astral-tokio-tar Vulnerable to PAX Header Desynchronization

astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives...

astral-tokio-tar Vulnerable to PAX Header Desynchronization

Summary Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives with PAX-extended headers containing size overrides, the parser...

GHSA-J5GW-2VRG-8FGX astral-tokio-tar Vulnerable to PAX Header Desynchronization

Summary Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar header handling. When processing archives with PAX-extended headers containing size overrides, the parser...