CVE-2025-21507

...

CVE-2025-21503

...

CVE-2025-21499

CVE-2025-21499 affects Oracle MySQL Server (component: Server: DDL). Affected versions: 8.4.3 and earlier; 9.1.0 and earlier. An attacker with network access via multiple protocols and high privileges can cause the server to hang or crash (complete DOS). Multiple advisories reference this CVE, in...

CVE-2025-21494

CVE-2025-21494 refers to a local, high-privilege vulnerability in Oracle MySQL Server (Server: Security: Privileges). Affected versions are 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. Under the described conditions, a highly-privileged attacker with logon to the host where MySQL...

CVE-2025-21490

...

GHSA-VG6X-RCGG-RJX6 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

MAL-2025-1983 Malicious code in mlc-llm-nightly-cu123 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 99d49619be0a9e2bcedb22bd4ea489b5cb31a56558e763a78fd09a6f948f2d9e Installing the package exfiltrates information about the host, including environmental variables. --- Category: MALICIOUS - The campaign has clearly malicious...

MAL-2025-609 Malicious code in csbchalk-next (npm)

This package exfiltrates API keys to an attacker-controlled server. It also has destructive functionality to delete development-related directories. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78554f43864fdbcb9a2eb97137b68f629a45a1ea6a1af377fd194376be14c911 Any...

MAL-2025-611 Malicious code in cschalk (npm)

This package exfiltrates API keys to an attacker-controlled server. It also has destructive functionality to delete development-related directories. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6bc84195226616b9037825439862309922afde77ccd32cc2c6158025030d27b2 Any...

RHBA-2025:0304 Red Hat Bug Fix Advisory: .NET 8.0 bug fix and enhancement update

Bulletin has no description...

Denial Of Service (DoS)

io.netty, netty-common is vulnerable to Denial Of Service DoS. The vulnerability is due to unsafe reading of environment files, where Netty attempts to load a non-existent file, allows an attacker can exploit this by creating a large file, causing the application to crash and resulting in a denia...

MAL-2025-303 Malicious code in sdk-coin-ada (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c39dc006518bfc9ed3a2846ae2e407993b19b826cb2c30c0a31bace1a1ee06f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-271 Malicious code in aem-spa-page-model-manager (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f616d81322d87ec1a782a237c4b35c53512cc3e470b9fddd65db49c0c14d1425 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

BELL-CVE-2025-21648

Bulletin has no description...

BELL-CVE-2025-21637

Bulletin has no description...

BELL-CVE-2024-57925

Bulletin has no description...

BELL-CVE-2024-57916

Bulletin has no description...

BELL-CVE-2024-57908

Bulletin has no description...

CVE-2024-24420

A reachable assertion in the decodelinkedtiie function of Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2025-24010

Vite is a frontend tooling framework for javascript. Vite allowed any websites to send any requests to the development server and read the response due to default CORS settings and lack of validation on the Origin header for WebSocket connections. This vulnerability is fixed in 6.0.9, 5.4.12, and...