CVE-2025-50091

CVE-2025-50091 : In Oracle MySQL, vulnerability in the MySQL Server Server: Optimizer affects versions 8.0.0–8.0.42, 8.4.0–8.4.5 and 9.0.0–9.3.0. It is described as easily exploitable with network access via multiple protocols, potentially causing a hang or crash (DOS) of MySQL Server. The CVSS b...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via the Components Services process. An attacker can cause the server to hang or crash repeatedly by sending specially crafted requests over the network while authenticated with high privileges. Details Denial of...

CVE-2025-50073

...

CVE-2025-50076

...

CVE-2025-50060

...

CVE-2025-30762

...

CVE-2025-30754

...

CVE-2025-30751

CVE-2025-30751 affects Oracle Database Server (Oracle Database component). Affected supported versions are 19.27 and 23.4–23.8. The flaw enables a low-privileged attacker who has Create Session and Create Procedure privileges with network access via Oracle Net to compromise the database, potentia...

Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities

Summary Security vulnerabilities have been addressed in IBM Cognos Analytics 11.2.3. These vulnerabilities have also been previously addressed in IBM Cognos Analytics 11.1.7 FP5 where applicable. Multiple Cross-Site Request Forgery vulnerabilities have been addressed CVE-2020-4301, CVE-2021-20468...

Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM QRadar SIEM has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-49395 DESCRIPTION: In the Linux kernel, the following vulnerability has...

Malicious code in @ivy-shared-components/iconslibrary (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=-...

Malicious code in okta-ui-private-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cde1163c4cd1320ef67a954307e5ac2fdf19ea7925c9b0cd032910b171e6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in okta-ui-private-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-5945 Malicious code in okta-ui-private-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9cde1163c4cd1320ef67a954307e5ac2fdf19ea7925c9b0cd032910b171e6e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Oracle MySQL 安全漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server that originates from improper access control of the Components Services component and can be exploited by an attacker to cause a denial of service...

CVE-2025-50086: Incorrect Authorization

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Components Services. Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

org.apache.jackrabbit:jackrabbit-jca (>=2.23.0-beta, <=2.23.1-beta), org.apache.jackrabbit:jackrabbit-standalone-components (>=2.23.0-beta, <=2.23.1-beta) +2 more potentially affected by CVE-2025-53689 via org.apache.jackrabbit:jackrabbit-core (>=2.23.0-beta, <=2.23.1-beta)

org.apache.jackrabbit:jackrabbit-core MAVEN version =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.0-beta, =2.23.1-beta Source cves: CVE-2025-53689 Source advisory: OSV:GHSA-44C3-38H8-9FH9...

DSIC Cross-browser Components for Official Document Creation 安全漏洞

DSIC Cross-browser Components for Official Document Creation is a browser plug-in from Dewei DSIC Corporation of Taiwan, China. A security vulnerability exists in DSIC Cross-browser Components for Official Document Creation that originates from remote code execution and could lead to the download...

CVE-2025-38298 EDAC/skx_common: Fix general protection fault

In the Linux kernel, the following vulnerability has been resolved: EDAC/skxcommon: Fix general protection fault After loading i10nmedac which automatically loads skxedaccommon, if unload only i10nmedac, then reload it and perform error injection testing, a general protection fault may occur: mce...

Malware in k6-studio-ui-components

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...