CVE-2025-54369

Node-SAML vulnerable in versions 5.0.1 and earlier because it loads the assertion from the unsigned original response document, which differs from the parts verified during signature validation. This allows an attacker to modify authentication details within a valid SAML assertion (e.g., removing...

CVE-2025-50095

CVE-2025-50095 affects Oracle MySQL Server (Server: Optimizer) with affected 9.0.0–9.3.0. The vulnerability enables a high-privileged attacker with network access via multiple protocols to cause a hang or complete denial of service of MySQL Server. The NVD entry lists CVSS v3.1 base score 4.9 (Av...

CVE-2025-50063

...

CVE-2025-50060

...

CVE-2025-30730

...

CVE-2025-30724

CVE-2025-30724 is a confirmed vulnerability affecting Oracle BI Publisher (Oracle Analytics, XML Services). Affected versions are 7.6.0.0.0 and 12.2.1.4.0. The issue allows an unauthenticated attacker, over HTTP, to compromise Oracle BI Publisher and potentially obtain unauthorized access to crit...

CVE-2025-21583

Oracle MySQL Server vulnerability CVE-2025-21583 affects the Server: DDL component in MySQL. Affected versions are 8.4.0 and 9.0.0. The issue can be triggered by a high-privileged attacker with network access via multiple protocols, leading to a hang or a frequently repeatable crash (complete DoS...

CVE-2025-32930

This CVE entry is rejected/not used per initial description.

CVE-2024-0739

A vulnerability, which was classified as critical, was found in Hecheng Leadshop up to 1.4.20. Affected is an unknown function of the file /web/leadshop.php. The manipulation of the argument install leads to deserialization. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-21566

...

CVE-2025-21546

...

CVE-2025-21544

...

CVE-2025-21539

...

CVE-2025-21538

...

CVE-2025-21534

CVE-2025-21534 is a vulnerability in the MySQL Server product (component: Server: Performance Schema). Affected versions are 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior. The description states the vulnerability is easily exploitable by a high-privilege attacker with network access via ...

CVE-2025-21517

...

CVE-2025-21511

The CVE-2025-21511 entry concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected versions are prior to 9.2.9.0. An unauthenticated, network-accessible attacker can compromise EnterpriseOne Tools via HTTP, potentially leading to unauthorized access to c...

CVE-2025-21510

...

CVE-2025-21494

...

CVE-2025-21491

CVE-2025-21491 describes a vulnerability in Oracle MySQL Server (InnoDB) affecting 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. An attacker with network access and high privileges can exploit this to cause a hang or a frequent crash (complete DOS) of MySQL Server. The provided do...