BELL-CVE-2024-57946

Bulletin has no description...

Search Injection

Mongoose is vulnerable to Search Injection. The vulnerability is due to improper handling of a nested $where filter with a populate match, allows the improper handling of a nested $where filter with a populate match, which can be exploited for search injection attacks...

CVE-2025-23083 vulnerabilities

Vulnerabilities for packages: nodejs...

CVE-2024-24430

A reachable assertion in the mmeuefindbyimsi function of Open5GS = 2.6.4 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2025-21502 vulnerabilities

Vulnerabilities for packages: openjdk-21-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-bcfips, openjdk-crac, openjdk-8-openj9, openjdk, openjdk-17-openj9, openjdk-26-openj9, corretto...

GHSA-FQMF-W4XH-33RH vulnerabilities

Vulnerabilities for packages: cargo-audit...

CVE-2025-21566

...

CVE-2025-21557

...

CVE-2025-21549

...

CVE-2025-21545

...

CVE-2025-21543

...

CVE-2025-21538

CVE-2025-21538 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) prior to 9.2.9.2. Affected component is JD Edwards EnterpriseOne Tools; vulnerability allows unauthenticated network access via HTTP, with user interaction required, to potentially update/insert/delete and read data in...

CVE-2025-21535

...

CVE-2025-21530

...

CVE-2025-21528

CVE-2025-21528 affects Oracle Primavera P6 Enterprise Project Portfolio Management Web Access. A vulnerability allows an unauthenticated attacker with network access via HTTP to compromise P6 EPPM, with successful attacks requiring human interaction. Potential impact includes unauthorized update,...

CVE-2025-21527

...

CVE-2025-21522

CVE-2025-21522 affects Oracle MySQL Server (component: Server: Parser). Affected versions are MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability can be exploited remotely by a low-privilege attacker with network access via multiple protocols, leading to an unaut...

CVE-2025-21523

...

CVE-2025-21518

...

CVE-2025-21512

CVE-2025-21512 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC). Vulnerable in JD Edwards EnterpriseOne Tools prior to 9.2.9.0. An unauthenticated attacker with network access via HTTP can exploit a flaw in the Web Runtime SEC component to read and modify data, with potential impac...