CVE-2025-22128

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Clear affinity hint before calling ath12kpcifreeirq in error path If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...

Vulnerabilities fixed in Oracle PeopleSoft

Oracle has fixed vulnerabilities in Oracle PeopleSoft's Enterprise PeopleTools versions 8.60, 8.61 and 8.62, Talent Acquisition Manager version 9.2 and Enterprise CC Common Application Objects version 9.2. The vulnerabilities in Oracle PeopleSoft's Enterprise PeopleTools, Talent Acquisition Manag...

Following the News: MITRE’s Common Vulnerabilities and Exposures (CVE) Funding

The current situation On April 16, CISA extended funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures CVE program. This was in response to a letter sent by MITRE on April 15 to CVE board members warning of a potential issue with MITRE's support for the CVE...

CVE-2025-39563

Cross-Site Request Forgery CSRF vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Payments for WooCommerce: from n/a through = 3.3.0...

kernel: asix: fix uninit-value in asix_mdio_read()

In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asixmdioread asixreadcmd may read less than sizeofsmsr bytes and in this case smsr will be uninitialized. Fail log: BUG: KMSAN: uninit-value in asixcheckhostenable drivers/net/usb/asixcommon.c:82 inline...

CVE-2025-30735

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft component: Page and Field Configuration. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2025-30716

Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite component: CRM User Management Framework. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

User Impersonation

Overview Jellyfin.Common is an a Free Software Media System that puts you in control of managing and streaming your media. Affected versions of this package are vulnerable to User Impersonation in the AddJellyfinApi function, due to the improper validation of IP addresses at the /System/Restart...

CVE-2025-30740

CVE-2025-30740 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) for JD Edwards EnterpriseOne Tools versions 9.2.0.0–9.2.9.2. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise the Tools and potentially access unauthorized data. CVSS v3.1 b...

CVE-2025-30692

CVE-2025-30692 corresponds to a vulnerability in Oracle E-Business Suite's iSupplier Portal (Attachments component) affecting 12.2.7–12.2.14. Public sources describe an easily exploitable issue where a low-privileged attacker with network access via HTTP can compromise the iSupplier Portal and po...

CVE-2025-30686

...

CVE-2025-21580

CVE-2025-21580 affects Oracle MySQL Server, component Server: DML. Affected versions include 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. An attacker with network access via multiple protocols and high privileges can cause a hang or a frequently repeatable crash (complete DoS) of MySQL Server. The...

CVE-2025-21575

CVE-2025-21575 concerns Oracle MySQL Server (Parser component). Affected: MySQL 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. The vulnerability is exploitable over the network by a low-privilege attacker via multiple protocols and can cause the MySQL Server to hang or crash (denial of service). No ...

CVE-2025-21573

...

CVE-2025-21573

Oracle Financial Services Revenue Management and Billing (Chatbot component) is affected in versions 5.1.0.0.0, 6.1.0.0.0, and 7.0.0.0.0. The issue is a network-accessible vulnerability in the Chatbot that requires user interaction and could lead to unauthorized data creation/modification, or par...

Oracle PeopleSoft 安全漏洞

Oracle PeopleSoft is a suite of enterprise human capital management solutions from Oracle Corporation USA. The product provides human capital management, financial management, vendor relationship management, and other functions. A security vulnerability exists in Oracle PeopleSoft's PeopleSoft...

OESA-2025-1401 ghostscript security update

Ghostscript is an interpreter for PostScript™ and Portable Document Format PDF files. Ghostscript consists of a PostScript interpreter layer, and a graphics library. Security Fixes: An issue was discovered in Artifex Ghostscript before 10.05.0. The DOCXWRITE TXTWRITE device has a text buffer...

CVE-2025-29824

Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

CVE-2025-29985

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...