Lucene search
+L

15807 matches found

The Hacker News
The Hacker News
added 2025/01/24 11:00 a.m.13 views

2025 State of SaaS Backup and Recovery Report

The modern workplace has undergone a seismic transformation over recent years, with hybrid work becoming the norm and businesses rapidly adopting cloud-based Software-as-a-Service SaaS applications to facilitate it. SaaS applications like Microsoft 365 and Google Workspace have now become the...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2025/01/23 2:56 p.m.30 views

New Research: The State of Web Exposure 2025

Are your websites leaking sensitive data? New research reveals that 45% of third-party apps access user info without proper authorization, and 53% of risk exposures in Retail are due to the excessive use of tracking tools. Learn how to uncover and mitigate these hidden threats and risks—download...

6.8AI score
SaveExploits0
Qualys Blog
Qualys Blog
added 2025/01/23 5:17 a.m.70 views

Oracle Critical Patch Update, January 2025 Security Update Review

Oracle released its first quarterly edition of this year’s Critical Patch Update, which received patches for 318 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, includin...

9.5CVSS9.4AI score0.99957EPSS
SaveExploits71
Circl
Circl
added 2025/01/23 1:15 a.m.9 views

CVE-2024-42182

creationtimestamp| type| source ---|---|--- 2025-01-23 01:15:53+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgepgyidzm27 2025-01-23 01:50:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lgerej64hs2w 2025-01-23 03:16:15+00:00| seen|...

2.5CVSS5.8AI score0.00118EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:00 a.m.11 views

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, allows a hacker to trigger a service failure.

The vulnerability of the modular application server of IBM WebSphere Liberty Profile, a software for managing transaction applications of the IBM TXSeries for Multiplatforms, is related to unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause...

7.8CVSS5.4AI score0.00628EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:00 a.m.15 views

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deserialization mechanism flaws, which allows attackers to circumvent existing security restrictions.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

7.8CVSS7.8AI score0.01596EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/01/23 12:00 a.m.16 views

The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps relates to the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS8.3AI score0.01108EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/22 12:00 a.m.10 views

The vulnerability of the SAP GUI graphical user interface for Java allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the SAP GUI graphical user interface for Java relates to the disclosure of system data by unauthorized parties in the controlled area. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

6CVSS5.8AI score0.00199EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/21 9:15 p.m.13 views

UBUNTU-CVE-2025-21502

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13, 21.0.5, 23.0.1; Orac...

4.8CVSS6.7AI score0.01007EPSS
SaveExploits0References9
Vulnrichment
Vulnrichment
added 2025/01/21 8:53 p.m.9 views

CVE-2025-21568

...

4.5CVSS4.8AI score0.00439EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 8:53 p.m.7 views

CVE-2025-21564

...

8.1CVSS7AI score0.00499EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 8:53 p.m.9 views

CVE-2025-21558

...

5.4CVSS5.8AI score0.00263EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/21 8:53 p.m.4 views

CVE-2025-21549

...

7.5CVSS7.6AI score0.00547EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/21 8:53 p.m.78 views

CVE-2025-21549

CVE-2025-21549 relates to Oracle WebLogic Server (Fusion Middleware) core in version 14.1.1.0.0. The vulnerability permits an unauthenticated attacker with network access over HTTP/2 to cause the WebLogic Server to hang or crash (complete DOS). This aligns with the CVSS v3.1 base score of 7.5 (Av...

7.5CVSS6.9AI score0.00547EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/01/21 8:53 p.m.310 views

CVE-2025-21543

CVE-2025-21543 affects Oracle MySQL Server (component: Server: Packaging). Affects MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. An attacker with high privileges who can reach the server over the network via multiple protocols can cause the server to hang or crash (complete ...

4.9CVSS4.4AI score0.00871EPSS
SaveExploits0References2Affected Software2
CVE
CVE
added 2025/01/21 8:53 p.m.60 views

CVE-2025-21542

CVE-2025-21542 affects Oracle Communications Order and Service Management (OC OSM) in versions 7.4.0, 7.4.1 and 7.5.0. The issue is described as an access control weakness in the Security component that, with network access over HTTP and using low privileges, allows unauthorized update/insert/del...

6.3CVSS5.6AI score0.00192EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2025/01/21 8:53 p.m.94 views

CVE-2025-21533

CVE-2025-21533 is a local vulnerability in Oracle VM VirtualBox Core affecting older 7.0.x and 7.1.x releases (prior to 7.0.24 and prior to 7.1.6). A low-privilege user with logon can compromise VirtualBox, potentially giving unauthorized access to data. CVSS v3.1 base score 5.5 (C:H, I:N, A:N). ...

5.5CVSS4.9AI score0.00301EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/21 8:53 p.m.12 views

CVE-2025-21523

...

4.9CVSS5.1AI score0.00953EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/21 8:53 p.m.32 views

CVE-2025-21517

...

4.3CVSS0.00405EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/21 8:53 p.m.25 views

CVE-2025-21516

...

8.1CVSS0.00559EPSS
SaveExploits0References1
Rows per page
Query Builder