CVE-2025-62526

OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The...

CVE-2023-53712

In the Linux kernel, the following vulnerability has been resolved: ARM: 9317/1: kexec: Make smp stop calls asynchronous If a panic is triggered by a hrtimer interrupt all online cpus will be notified and set offline. But as highlighted by commit 19dbdcb8039c "smp: Warn on function calls from...

CVE-2025-40778

creationtimestamp| type| source ---|---|--- 2025-10-22 13:56:44+00:00| seen| https://seclists.org/oss-sec/2025/q4/68 2025-10-22 15:58:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418643498336537 2025-10-22 16:10:12+00:00| seen|...

CVE-2025-41110

creationtimestamp| type| source ---|---|--- 2025-10-22 10:50:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3rofezex62o 2025-10-22 16:10:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418687746464898...

CVE-2025-41109

creationtimestamp| type| source ---|---|--- 2025-10-22 09:45:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3rkr3i6ev23 2025-10-22 16:10:11+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115418687746464898...

CVE-2025-12033

creationtimestamp| type| source ---|---|--- 2025-10-22 07:43:31+00:00| seen| Telegram/ukV8RabafTGa2PME5ickPQ1ceLmQA3C2PIKtTctNgjPk...

CVE-2025-62611

creationtimestamp| type| source ---|---|--- 2025-10-22 01:03:56+00:00| published-proof-of-concept| https://github.com/aio-libs/aiomysql/security/advisories/GHSA-r397-ff8c-wv2g 2025-10-22 21:55:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3stjv4jga2o...

CVE-2025-61756

...

CVE-2025-61756

CVE-2025-61756 is a vulnerability in Oracle Financial Services Analytical Applications Infrastructure (part of Oracle Financial Services Applications), specifically in the System Configuration component. Affected versions are 8.0.7.9, 8.0.8.7 and 8.1.2.5. An unauthenticated attacker with network ...

CVE-2025-62477

creationtimestamp| type| source ---|---|--- 2025-10-21 21:30:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3qbomxazu2u...

CVE-2025-62589

...

CVE-2025-62587

Oracle VM VirtualBox (core) is affected by CVE-2025-62587 in versions 7.1.12 and 7.2.2. The vulnerability enables a high-privilege attacker with local logon to compromise Oracle VM VirtualBox, with potential impact extending to other products (scope change). CVSS 3.1 base score is 8.2, indicating...

CVE-2025-62479

...

CVE-2025-62475

...

CVE-2025-62289

CVE-2025-62289 concerns Oracle ZFS Storage Appliance Kit (Oracle Systems) with the Filesystems component. Affected version 8.8 is described as vulnerable to a network-accessible, HTTP-based attack by a high-privilege attacker that can cause a hang or repeated crashes (complete DOS). The CVSS 3.1 ...

CVE-2025-62287

CVE-2025-62287 affects Oracle Life Sciences InForm (Web Server) in Oracle Health Sciences Applications, affected version 7.0.1.0. The vulnerability allows unauthenticated network access via HTTP to compromise InForm, with attacks requiring user interaction from a non-attacker. Impact may include ...

CVE-2025-62288

CVE-2025-62288 affects Oracle Health Sciences Data Management Workbench (Logger component). Affected versions are 3.4.0.1.3 and 3.4.1.0.10. The vulnerability is exploitable by a high-privilege attacker over HTTP with network access, leading to unauthorized access to critical data or full access t...

CVE-2025-62287

...

CVE-2025-61759

...

CVE-2025-61758

CVE-2025-61758 affects Oracle PeopleSoft IT Asset Management (PeopleSoft Enterprise FIN IT Asset Management) version 9.2. The vulnerability allows a low-privileged attacker with network access over HTTP to access sensitive data, with confidentiality impact. Oracle and multiple advisories note fix...