CVE-2025-61763

Summary (mode C): CVE-2025-61763 affects Oracle Essbase (Essbase Web Platform) with v21.7.3.0.0. The vulnerability allows an unauthenticated, network-accessing attacker over HTTP to cause unauthorized creation/deletion/modification of data or complete data access, with CVSS v3.1 score 8.1 (High) ...

CVE-2025-61754

The CVE-2025-61754 entry affects Oracle BI Publisher (Web Service API) within Oracle Analytics. Affected versions are 7.6.0.0.0 and 8.2.0.0.0. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, potentially leading to unauthorized access to Oracle BI Publis...

CVE-2025-61749

...

CVE-2025-53069

CVE-2025-53069 affects Oracle MySQL Server (Server: Components Services) with affected versions 8.0.0–8.0.43, 8.4.0–8.4.6, and 9.0.0–9.4.0. The vulnerability allows a high-privileged, network-accessing attacker to cause a hang or repeatable crashes (DoS); root cause described as Allocation of Res...

CVE-2025-53067

...

CVE-2025-53051

CVE-2025-53051 affects Oracle Database Server’s RDBMS Functional Index component, with affected versions 23.4–23.9. The vulnerability enables a high-privilege SYSDBA attacker, with network access via Oracle Net, to read a subset of RDBMS Functional Index data. The CVSS base score is 2.7 (LOW) wit...

CVE-2025-11979

An authorized user may crash the MongoDB server by causing buffer over-read. This can be done by issuing a DDL operation while queries are being issued, under some conditions. This issue affects MongoDB Server v7.0 versions prior to 7.0.25, MongoDB Server v8.0 versions prior to 8.0.15, and MongoD...

CVE-2025-62250

creationtimestamp| type| source ---|---|--- 2025-10-21 17:42:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3puwkcjtj2m...

CVE-2025-22166

CVE-2025-22166 is a Denial of Service vulnerability affecting Atlassian Confluence Data Center. Introduced in Confluence Data Center 2.0, it enables an unauthenticated remote attacker to render the host unavailable by disrupting services, with high impact on availability. The advisory recommends ...

CVE-2025-9339

SIMPLE.ERP CVE-2025-9339 is a SQL injection in the Warehouse Document Filter form fields, affecting versions before [email protected]. The vulnerability allows a logged-in user to inject queries with up to 20 characters; a confirmed use case could delete tables whose names are at most 6 characters long....

EUVD-2025-35127

Not used...

CVE-2025-9133

A missing authorization vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16 through V5.40 could...

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987516)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987516 advisory. In the Linux kernel, the following vulnerability has been resolved: tpm: use trygetops in tpm-space.c As part of the series conversion to remove nested TPM operation...

SUSE SLES15: pam / pam-32bit / pam-devel / pam-devel-32bit / pam-doc / pam-extra / etc (SUSE-SU-2025:02970-2)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02970-2 advisory. - Improve previous CVE-2024-10041 fix which led to CPU performance issues bsc1232234 Tenable has extracted the preceding description block...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987693)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987693 advisory. In the Linux kernel, the following vulnerability has been resolved: ice: Do not use WQMEMRECLAIM flag for workqueue When both ice and the irdma driver are loaded, a...

CVE-2025-62695

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation Mediawiki - WikiLambda Extension allows Stored XSS.This issue affects Mediawiki - WikiLambda Extension: master...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987672)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987672 advisory. In the Linux kernel, the following vulnerability has been resolved: fbdev: smscufx: fix error handling code in ufxusbprobe The current error handling code in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-987716)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987716 advisory. In the Linux kernel, the following vulnerability has been resolved: Revert wifi: mac80211: fix memory leak in ieee80211ifadd This reverts commit...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987629)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987629 advisory. In the Linux kernel, the following vulnerability has been resolved: ata: pataocteoncf: Fix refcount leak in octeoncfprobe offinddevicebynode takes reference, we shou...