PT-2025-29624 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19.3 through 19.27 Oracle Database Server versions 21.3 through 21.18 Description: A vulnerability exists within the Java VM component of Oracle Database Server. A low-privileged attacker with Create Session an...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Mobile Field Service for Oracle...

PT-2025-29634

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description A difficult-to-exploit issue exists in the MySQL Client component mysqldump of Oracle MySQL. Successful...

Oracle E-Business Suite 跨站请求伪造漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle MES for Process Manufacturing f...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle Corporation USA. The product includes core banking, online banking, and estate management.Financial Services Analytical Applications Infrastructure is one of the financial services analytical applications...

Oracle REST Data Services 跨站请求伪造漏洞

Oracle REST Data Services is an Oracle middleware tool for exposing Oracle database functionality to applications via a RESTful API. A security vulnerability exists in Oracle REST Data Services version 24.2.0 that originates from an unauthenticated attacker who can attack via HTTP web access,...

PT-2025-29615

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u451-perf through 8u451-perf Oracle Java SE versions 11.0.27 Oracle Java SE versions 17.0.15 Oracle Java SE versions 21.0.7 Oracle Java SE versions 24.0.1 Oracle GraalVM for JDK versions 17.0.15 Oracle GraalVM for JDK...

PT-2025-29619 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 Oracle WebLogic Server versions 14.1.2.0.0 Description: A vulnerability exists within the Core component of Oracle WebLogic Server, potentially allowing a...

Oracle Database Server 访问控制错误漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. Oracle Database Server has a security vulnerability in Oracle Database Server JDBC that...

Oracle Fusion Middleware 访问控制错误漏洞

Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle. The platform provides middleware, software collection, etc. WebLogic Server is one of the application server components for cloud and traditional...

PT-2025-29611 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 Oracle WebLogic Server versions 14.1.2.0.0 Description: An easily exploitable issue exists in the Oracle WebLogic Server component Core. A remote,...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle CRM Technical Foundation for...

PT-2025-29595

Name of the Vulnerable Software and Affected Versions Oracle Lease and Finance Management version 12.2.13 Description An easily exploitable issue exists in the Oracle Lease and Finance Management product of Oracle E-Business Suite component: Internal Operations. A low-privileged attacker with...

PT-2025-29606

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u451 and 8u451-perf Oracle Java SE version 11.0.27 Oracle Java SE version 17.0.15 Oracle Java SE version 21.0.7 Oracle Java SE version 24.0.1 Oracle GraalVM for JDK versions 17.0.15, 21.0.7 and 24.0.1 Oracle GraalVM...

CVE-2025-7380 A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM

A stored Cross-Site Scripting XSS vulnerability exists in the Access Control of ADM, the issue allows an attacker to inject malicious scripts into the folder name field while creating a new shared folder. These scripts are not properly sanitized and will be executed when the folder name is...

Code-Projects Voting System 注入漏洞

Voting System is an election system. Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements for parameter ID in file /admin/votersedit.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

CVE-2025-2522

The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may...

CLSA-2025-1752246531 java-11-openjdk: Fix of 13 CVEs

Upgrade to openjdk-11.0.27+6. The following CVEs were fixed: - CVE-2025-30698: fix buffered image handling to avoid unauthorized access to accessible data - CVE-2025-30691: improve compiler transformations to avoid unauthorized access to accessible data - CVE-2024-21144: invalid header validation...

CVE-2025-53862

A flaw was found in Ansible. Three API endpoints are accessible and return verbose, unauthenticated responses. This flaw allows a malicious user to access data that may contain important information...

CVE-2025-53862

CVE-2025-53862 affects Red Hat Ansible. The vulnerability arises from three API endpoints that expose verbose, unauthenticated responses, enabling access to potentially sensitive information. Severity is low (CVSS 3.1: 3.5, ADJACENT access, low privileges, no user interaction). Public references ...