Exploit for Cross-Site Request Forgery (CSRF) in Codeastro Internet_Banking_System

CVE-2024-56924 Vulnerability Description A Cross-Site Reque...

DEBIAN-CVE-2024-11218

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

CVE-2024-11218

CVE-2024-11218 affects podman build and buildah, enabling container breakout via a race condition when building a malicious Containerfile using --jobs=2. The vulnerability can allow enumeration of host files/directories even with SELinux enabled. Based on connected MARINER entries, patched versio...

CVE-2024-11218 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

CVE-2024-11218 Podman: buildah: container breakout by using --jobs=2 and a race condition when building a malicious containerfile

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

CVE-2024-11218

A vulnerability was found in podman build and buildah. This issue occurs in a container breakout by using --jobs=2 and a race condition when building a malicious Containerfile. SELinux might mitigate it, but even with SELinux on, it still allows the enumeration of files and directories on the hos...

Oracle VirtualBox Security Update (Jan 2025) - Linux

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2025-21570

...

CVE-2025-21565

...

CVE-2025-21567

CVE-2025-21567 affects Oracle MySQL Server (Server: Security: Privileges) with versions 9.1.0 and earlier. The issue is a network-accessible vulnerability that requires low privileges to exploit and can lead to unauthorized read access of a subset of MySQL Server data. The description and related...

CVE-2025-21562

CVE-2025-21562 concerns Oracle PeopleSoft PeopleSoft Enterprise CC Common Application Objects (Run Control Management) version 9.2. The vulnerability allows a low-privileged attacker with network access over HTTP to read a subset of data from the affected object, with CVSS 3.1 base score 4.3 (Con...

CVE-2025-21550

CVE-2025-21550 affects Oracle Financial Services Behavior Detection Platform (Web UI) within Oracle Financial Services Applications. The vulnerable software versions are 8.0.8.1, 8.1.2.7, and 8.1.2.8. The issue allows an unauthenticated attacker with network access via HTTP to compromise the plat...

CVE-2025-21540

...

CVE-2025-21536

...

CVE-2025-21518

CVE-2025-21518 affects Oracle MySQL Server, specifically the Server: Optimizer component (also listed with related Oracle MySQL Server entries). Affected versions are 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. The vulnerability is exploitable by a low-privilege, network-accessing att...

CVE-2025-21508

...

CVE-2025-21499

...

CVE-2025-21497

The CVE-2025-21497 affects Oracle MySQL Server (InnoDB). Affected: 8.0.40 and prior, 8.4.3 and prior, 9.1.0 and prior. An attacker with network access and high privileges can cause a hang or crash (DoS) and may perform unauthorized updates/inserts/deletes on MySQL data. CVSS v3.1 base score 5.5 (...

CVE-2025-21494

...

CVE-2025-21489

CVE-2025-21489 affects Oracle E-Business Suite Advanced Outbound Telephony (Region Mapping) with affected 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker who can reach Oracle Advanced Outbound Telephony over HTTP to compromise data after user interaction, potentially leading ...