CVE-2025-53031

...

CVE-2025-53029

...

CVE-2025-53027

CVE-2025-53027 affects Oracle VM VirtualBox 7.1.10 (Core). Local attacker with logon can compromise Oracle VM VirtualBox; high impact to confidentiality, integrity and availability (CVSS v3.1 base 8.2). Root cause described as an issue in VirtualBox Core; exploitation details are not provided in ...

CVE-2025-50081

CVE-2025-50081 affects Oracle MySQL Client: mysqldump. Affected versions include 8.0.0–8.0.42, 8.4.0–8.4.5 and 9.0.0–9.3.0. The vulnerability is exploitable by a high-privilege attacker with network access via multiple protocols; exploitation requires user interaction. Impact is limited to confid...

CVE-2025-50077

...

CVE-2025-50065

CVE-2025-50065 affects Oracle GraalVM for JDK (component: Native Image) with affected version 24.0.1. The vulnerability is exploitable over a network via HTTP by an unauthenticated attacker, potentially enabling partial denial of service against Oracle GraalVM for JDK. The CVSS 3.1 base score is ...

CVE-2025-50067

...

CVE-2025-50063

CVE-2025-50063 (Oracle Java SE Install component) is documented to affect Oracle Java SE 8u451. The vulnerability can be exploited by a low-privileged user with logon access to the infrastructure where Java SE runs, and successful exploitation requires user interaction. It can lead to takeover of...

CVE-2025-50064

...

CVE-2025-50061

...

CVE-2025-30749

...

CVE-2025-30743

CVE-2025-30743 affects Oracle E-Business Suite Oracle Lease and Finance Management, component Internal Operations , with affected version 12.2.13 . The vulnerability allows a low-privileged attacker with network access via HTTP to compromise the system, potentially enabling unauthorized creation,...

CVE-2025-48795

A log processing flaw was found in Apache CXF. Large stream-based messages are stored as temporary files on the local file system, read into memory, and then logged. This flaw allows an attacker to cause a denial of service attack by triggering an out-of-memory exception. Additionally, it is...

CVE-2025-6965

A memory corruption flaw was found in SQLite. Under specific conditions a query can be generated where the number of aggregate terms could exceed the number of columns available. This issue could lead to memory corruption and subsequent unintended behavior. Mitigation Mitigation for this issue is...

Security Bulletin: NVIDIA DOCA-Host and Mellanox OFED - July 2025

NVIDIA has released a software update for NVIDIA® DOCA Host and Mellanox OFED. To protect your system, download and install the latest update from the DOCA Framework page. For earlier evaluation versions, contact your account manager to get access through NVOnline. Go to NVIDIA Product Security...

Security Debt in Practice: Nuanced Insights from Practitioners

With the increasing reliance on software and automation nowadays, tight deadlines, limited resources, and prioritization of functionality over security can lead to insecure coding practices. When not handled properly, these constraints cause unaddressed security vulnerabilities to accumulate over...

CVE-2025-53643

A request smuggling flaw was found in the aiohttp python library. If a pure Python version of aiohttp is installed, without the usual C extensions, for example, or if AIOHTTPNOEXTENSIONS is enabled, an attacker can execute a request smuggling attack to bypass certain firewalls or proxy protection...

CVE-2025-53019

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's magick stream command, specifying multiple consecutive %d format specifiers in a filename template causes a memory leak. Versions 7.1.2-0 and...

CVE-2025-53014

ImageMagick is free and open-source software used for editing and manipulating digital images. Versions prior to 7.1.2-0 and 6.9.13-26 have a heap buffer overflow in the InterpretImageFilename function. The issue stems from an off-by-one error that causes out-of-bounds memory access when processi...

CVE-2025-53101

ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's magick mogrify command, specifying multiple consecutive %d format specifiers in a filename template causes internal pointer arithmetic to...