PT-2025-43000

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions 7.1.12 and 7.2.2 Description An easily exploitable issue exists in the Oracle VM VirtualBox Core component of Oracle Virtualization. A high-privileged attacker with access to the system where Oracle VM VirtualBox...

PT-2025-44680

Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description An issue exists within Chromium’s V8 component due to an inappropriate implementation. This could allow attackers to affect the system. Microsoft Edge, being Chromium-based, is also impacted...

EUVD-2022-1841

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-2748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 5.2.40, prior to...

CVE-2025-8964

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostelmanage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed ...

Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17171)

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server, which stems from a flaw in the DDL component that can be exploited by an attacker to cause a partial denial of service...

Oracle MySQL Server Resource Management Error Vulnerability (CNVD-2025-17107)

Oracle MySQL Server is a relational database from Oracle Corporation. A resource management error vulnerability exists in Oracle MySQL Server, which stems from a flaw in the replication component that can be exploited by an attacker to cause a denial of service...

Vulnerability of the Cluster component: The general system for managing MySQL Cluster databases, which allows attackers to gain full control over the application

Vulnerability of the Cluster component: General database management systems like MySQL Cluster are vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain full control over the application...

Oracle Virtualization 访问控制错误漏洞

Oracle Virtualization is a suite of virtualization solutions from Oracle Corporation USA. The product is used to unify the management of the entire hardware and software system from applications to disks, enabling virtualization from the desktop to the data center.VM VirtualBox is one of the...

CVE-2025-48941 MyBB may disclosure unviewable threads' titles in searches

MyBB is free and open source forum software. Prior to version 1.8.39, the search component does not validate permissions correctly, which allows attackers to determine the existence of hidden draft, unapproved, or soft-deleted threads containing specified text in the title. The visibility state...

Ubuntu 24.10 / 25.04 : CRaC JDK 21 vulnerabilities (USN-7531-1)

The remote Ubuntu 24.10 / 25.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7531-1 advisory. Alicja Kario discovered that the JSSE component of CRaC JDK 21 incorrectly handled RSA padding. An Attacker could possibly use this issue to obtain...

CVE-2023-20644

In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628603; Issue ID: ALPS07628603...

CVE-2021-34867

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.3-49160. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists withi...

CVE-2025-3931

Yggdrasil (the system daemon that uses a D-Bus message broker to route data to worker processes) has a local privilege escalation flaw (CVE‑2025‑3931) due to missing authentication/authorization when dispatching messages to workers. An attacker with local system access could leverage this unprote...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17377)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the replication component and can be exploited by an attacker to cause a complete denial of service...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2025-17367)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which originates from a flaw in the PS component and can be exploited by an attacker to cause a complete denial of service...

Oracle Secure Backup 安全漏洞

Oracle Secure Backup is a solution from Oracle Corporation USA that provides reliable data protection by backing up file systems to tape. A security vulnerability exists in Oracle Secure Backup that stems from mishandling of the General component, which could lead to a system takeover. The...

Google Android Code Execution Vulnerability (CNVD-2025-10930)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from a code execution vulnerability that is caused due to a flaw in a system component. An attacker can exploit the vulnerability to execute arbitrary code on the system...

The vulnerability of the Accounts component in operating systems such as MacOs, iOS, and iPadOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Accounts component in MacOS, iOS, and iPadOS is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the udf component in the Linux operating system’s kernel allows a hacker to gain elevated privileges within the system.

The vulnerability of the udf component in the Linux operating system’s kernel is related to the execution of operations beyond the boundaries of the memory buffer. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...