1631 matches found
openjdk: Improve HTTP client header handling (Oracle CPU 2025-07)
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1...
PT-2025-29773 · Digisol · Digisol Dg-Gr6821Ac Router
Name of the Vulnerable Software and Affected Versions: Digisol DG-GR6821AC Router affected versions not specified Description: The Digisol DG-GR6821AC Router stores credentials and PINS without encryption in the device firmware. An attacker with physical access could extract the firmware and...
CVE-2025-50073
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Web Container. Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...
CVE-2025-48802
Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network...
CVE-2025-49669
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-49673
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-49739
Improper link resolution before file access 'link following' in Visual Studio allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-49668
Heap-based buffer overflow in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...
CVE-2025-49666
Heap-based buffer overflow in Windows Kernel allows an authorized attacker to execute code over a network...
CVE-2025-49740
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network...
CVE-2025-49716
Uncontrolled resource consumption in Windows Netlogon allows an unauthorized attacker to deny service over a network...
CVE-2025-47981
Heap-based buffer overflow in Windows SPNEGO Extended Negotiation allows an unauthorized attacker to execute code over a network...
CVE-2025-49739
CVE-2025-49739: Visual Studio elevation of privilege due to improper link resolution before file access ("link following"). The issue could allow a network-access attacker to elevate privileges on a affected machine. Connected sources indicate this CVE has public exploits (per Kaspersky entry in ...
CVE-2025-49666
CVE-2025-49666 is a Windows Kernel flaw described as a heap-based buffer overflow that enables remote code execution by an authorized attacker over a network. Public data lists attack vector as Network with high impact to confidentiality, integrity, and availability, and requires HIGH privileges ...
CVE-2025-48821
Technical details about CVE-2025-48821 are not provided in the supplied documents. No specific affected products, exploit information, or mitigation are described here; monitor for official updates and published fixes.
CVE-2025-49674
Technical details about CVE-2025-49674 (affected components, root cause, impact or fixes) are not provided in the connected documents. No public exploitation details are included here. Monitor for official updates from Microsoft/NVD for confirmed remediation.
CVE-2025-47984
Technical details about CVE-2025-47984 (affected components, exploitability, root cause, and fix) are not provided in the connected documents. Monitor for updates from MSRC/NVD for concrete context and remediation.
CVE-2025-47972
CVE-2025-47972 affects the Microsoft Input Method Editor (IME) in Windows. Connected records reflect a high-severity, privilege-escalation risk with CVSS v3.1 base score 8.0 (attack vector: network; impact: confidentiality, integrity, and availability high; privileges required: low; user interact...
