CVE-2025-30693

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

Mitsubishi Electric Europe B.V. smartRTU

RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to disclose, tamper with, destroy or delete information in the product, or cause a denial-of service condition on the product. 2. RECOMMENDED PRACTICES CISA recommends users take...

The vulnerability of the function cm3_helper_translate_curve_toHW_format() in the AMD Display driver’s kernel module /drivers/gpu/drm/amd/display/dc/dcn30/dcn30_cm_common.c, which can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the cm3helpertranslatecurvetohwformat function in the AMD Display driver’s kernel module /drivers/gpu/drm/amd/display/dc/dcn30/dcn30cmcommon.c in the Linux kernel is related to the copying of buffers without checking their size a classic buffer overflow attack. Exploiting thi...

The vulnerability in the `net/ipv4/inet_connection_sock.c` module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the pci_slot_release() function in the drivers/pci/slot.c module of the Linux kernel allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the pcislotrelease function in the drivers/pci/slot.c module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2025-16447 · Oracle · Peoplesoft Enterprise Hcm Talent Acquisition Manager

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other...

The vulnerability of the cifs_strndup_from_utf16() function in the /fs/smb/client/reparse.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cifsstrndupfromutf16 function in the /fs/smb/client/reparse.c module of the Linux kernel involves copying buffers without checking their size—a classic buffer overflow attack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

The vulnerability of the Ruby interpreter’s Rack module interface allows attackers to influence the integrity of the protected information.

The vulnerability of the Ruby interpreter’s Rack module interface is related to improper processing of output data for registration logs. Exploiting this vulnerability allows an attacker to influence the integrity of the protected information...

The vulnerability of the OCI Container Runtime (crun) environment, related to incorrect pathname restrictions for restricted access directories, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the OCI Container Runtime crun environment is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability can allow an attacker to influence the confidentiality and integrity of the protected information...

The vulnerability of the find_css_set() function in the kernel/cgroup/cgroup.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the findcssset function in the kernel/cgroup/cgroup.c module of the Linux operating system is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Vulnerability of the pps_gpio_probe() function in the drivers/pps/clients/pps-gpio.c module – This driver for Linux kernel’s PPS client support allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the pps gpioprobe function in the drivers/pps/clients/pps-gpio.c module – The Linux kernel’s PPS client driver has a vulnerability related to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

Vulnerability of the lpfc_initial_flogi() function in the drivers/scsi/lpfc/lpfc_els.c module – The SCSI device support driver for the Linux operating system, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the lpfcinitialflogi function in the drivers/scsi/lpfc/lpfcels.c module – The Linux SCSI device driver relies on the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

Vulnerability of the tcmu_try_get_block_page() function in the drivers/target/target_core_user.c module – The TCM driver for the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the tcmutrygetblockpage function in the drivers/target/targetcoreuser.c module – The TCM driver for the Linux operating system is vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality...

The vulnerability of the arp_xmit_finish() function in the net/ipv4/arp.c module of the Linux operating system’s kernel for implementing the IPv4 protocol allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the arpxmitfinish function in the net/ipv4/arp.c module of the Linux operating system’s IPv4 protocol implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

The vulnerability of the SAP NetWeaver software integration platform, related to the lack of authentication, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SAP NetWeaver software integration platform is related to the lack of authentication. Exploiting this vulnerability allows a malicious actor to remotely compromise the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the nft_unregister_flowtable_type() function in the include/net/netfilter/nf_tables.h module of the Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nftunregisterflowtabletype function in the include/net/netfilter/nftables.h module of the Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Vulnerability of the fsl_mc_bus_remove() function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in the Linux operating system’s kernel allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the fslmcbusremove function in the drivers/bus/fsl-mc/fsl-mc-bus.c module – The fsl-mc bus driver in Linux kernel is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...

Vulnerability of the rtw89_ops CancelHWScan() function in the drivers/net/wireless/realtek/rtw89/mac80211.c module – This driver supports Realtek wireless adapter devices in Linux operating systems. It can be exploited by attackers to compromise the confidentiality, integrity, and accessibility of protected information.

Vulnerability of the rtw89ops CancelHWScan function in the drivers/net/wireless/realtek/rtw89/mac80211.c file – The drivers for Realtek wireless adapter support in Linux operating systems are vulnerable due to the repeated use of previously freed memory. Exploiting this vulnerability could allow ...

The vulnerability of the `ovs_vport_cmd_fill_info()` function in the `net/openvswitch/datapath.c` module, which is part of the Open vSwitch router support in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the ovsvportcmdfillinfo function in the net/openvswitch/datapath.c module, which is part of the Open vSwitch router support in the Linux operating system, relates to the reutilization of previously released memory. Exploiting this vulnerability could allow an attacker to...