CVE-2024-11218 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

CVE-2024-11218

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

Oracle VirtualBox Security Update (Jan 2025) - Linux

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2025-21570

...

CVE-2025-21565

...

CVE-2025-21567

CVE-2025-21567 affects Oracle MySQL Server (Server: Security: Privileges) with versions 9.1.0 and earlier. The issue is a network-accessible vulnerability that requires low privileges to exploit and can lead to unauthorized read access of a subset of MySQL Server data. The description and related...

CVE-2025-21562

CVE-2025-21562 concerns Oracle PeopleSoft PeopleSoft Enterprise CC Common Application Objects (Run Control Management) version 9.2. The vulnerability allows a low-privileged attacker with network access over HTTP to read a subset of data from the affected object, with CVSS 3.1 base score 4.3 (Con...

CVE-2025-21550

CVE-2025-21550 affects Oracle Financial Services Behavior Detection Platform (Web UI) within Oracle Financial Services Applications. The vulnerable software versions are 8.0.8.1, 8.1.2.7, and 8.1.2.8. The issue allows an unauthenticated attacker with network access via HTTP to compromise the plat...

CVE-2025-21540

...

CVE-2025-21536

...

CVE-2025-21518

CVE-2025-21518 affects Oracle MySQL Server, specifically the Server: Optimizer component (also listed with related Oracle MySQL Server entries). Affected versions are 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The vulnerability is exploitable by a low-privilege, network-accessing att...

CVE-2025-21508

...

CVE-2025-21499

...

CVE-2025-21497

The CVE-2025-21497 affects Oracle MySQL Server (InnoDB). Affected: 8.0.40 and prior, 8.4.3 and prior, 9.1.0 and prior. An attacker with network access and high privileges can cause a hang or crash (DoS) and may perform unauthorized updates/inserts/deletes on MySQL data. CVSS v3.1 base score 5.5 (...

CVE-2025-21494

...

CVE-2025-21489

CVE-2025-21489 affects Oracle E-Business Suite Advanced Outbound Telephony (Region Mapping) with affected 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker who can reach Oracle Advanced Outbound Telephony over HTTP to compromise data after user interaction, potentially leading ...

PT-2025-3073 · Spagobi · Spagobi

Name of the Vulnerable Software and Affected Versions: SpagoBI version 3.5.1 Description: The issue concerns multiple Stored Cross-Site Scripting XSS vulnerabilities found in the create/edit forms of the worksheet designer function. This allows for the potential execution of malicious scripts,...

Google Android 代码问题漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from insecure deserialization, which can be exploited by an attacker to bypass the parcel mismatch mitigation and elevate privileges...

PT-2025-4814 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: Node.js affected versions not specified Description: A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functions do not treat drive names as special ...

CVE-2025-23209

Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. This is an remote code execution RCE vulnerability that affects Craft 4 and 5 installs where your security key has already been compromised. Anyone running an unpatched version of Craft with a...