CVE-2025-21494

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure...

CVE-2025-21493

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.4.3 and prior and 9.1.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2025-21490

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise...

PT-2025-4246 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: A difficult to exploit issue allows a high privileged attacker with logon to the infrastructure where MySQL Server...

PT-2025-4288 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 9.1.0 and prior Description: The issue is related to the Server: Security: Privileges component of MySQL Server, which is associated with deficiencies in the authorization mechanism. This easily exploitable issue allows ...

PT-2025-4236

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description The issue allows a high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-46664

A relative path traversal in Fortinet FortiRecorder CWE-23 version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-40587

An improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability CWE-78 in Fortinet FortiVoice version 7.0.0 through 7.0.4 and before 6.4.9 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests...

CVE-2024-32115

CVE-2024-32115 is a path-traversal vulnerability in Fortinet FortiManager. The affected product is FortiManager versions 7.4.0–7.4.2 and versions before 7.2.5 . The underlying issue is a relative path traversal (CWE-23) that could allow a privileged attacker to delete files from the underlying fi...

CVE-2024-46664

A relative path traversal in Fortinet FortiRecorder CWE-23 version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or HTTPs requests...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

CVE-2024-47566

A improper limitation of a pathname to a restricted directory 'path traversal' CWE-23 in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete files from the underlying filesystem via crafted CLI requests...

Fortinet FortiRecorder 安全漏洞

Fortinet FortiRecorder is a Web-based network video recorder management system from Fortinet, Inc. A security vulnerability exists in Fortinet FortiRecorder that stems from incorrectly restricting pathnames to restricted directories, resulting in a path traversal vulnerability. A privileged...

CVE-2025-21111

Dell VxRail releases 8.0.000–8.0.311 are affected by a plaintext storage of a password vulnerability. A high-privilege attacker with local access could exposure confidential information. Impact: information exposure. A Dell security update (KB referenced) and upgrading to a version containing the...

CVE-2025-21102

Dell VxRail, versions 7.0.000 through 7.0.532, contains a Plaintext Storage of a Password vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

Updated virtualbox & kmod-virtualbox packages fix security vulnerabilities

Vulnerabilities were found in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are prior to 7.0.22 and prior to 7.1.2. A difficult to exploit vulnerability allows a high privileged attacker with logon to the infrastructure where Oracl...

PT-2026-7455

Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity...

CVE-2024-52534

Dell ECS, versions prior to ECS 3.8.1.3, contains an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft...