CVE-2019-2773

Vulnerability in the Oracle Payments component of Oracle E-Business Suite subcomponent: File Transmission. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2019-2665

Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite subcomponent: CRM User Management Framework. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker wi...

CVE-2019-18362

JetBrains MPS before 2019.2.2 exposed listening ports to the network...

CVE-2010-1756

The Settings application in Apple iOS before 4 on the iPhone and iPod touch does not properly report the wireless network that is in use, which might make it easier for remote attackers to trick users into communicating over an unintended network...

CVE-2025-3480

MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to exploit this...

openjdk: Better TLS connection support (Oracle CPU 2025-04)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle...

CVE-2025-29963

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network...

CVE-2025-29966

Heap-based buffer overflow in Windows Remote Desktop allows an unauthorized attacker to execute code over a network...

CVE-2025-29963

Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network...

CVE-2025-29842

Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-29840

Stack-based buffer overflow in Windows Media allows an unauthorized attacker to execute code over a network...

CVE-2025-29830

Use of uninitialized resource in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

CVE-2025-29826

Improper handling of insufficient permissions or privileges in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...

CVE-2025-29830

Technical details about CVE-2025-29830 are not provided in the connected documents. The available data only notes a RRAS information disclosure vulnerability. Monitor official sources for updates on affected products, root cause, and remediation.

CVE-2025-29967

Technical details about CVE-2025-29967 are not provided in the connected documents. Public details in the initial description exist, but no accompanying technical specifics (affected versions, root cause, exploit info, or remediation) are available here. Monitor for updates.

Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability

Uncontrolled resource consumption in Remote Desktop Gateway Service allows an unauthorized attacker to deny service over a network...

Windows Remote Access Connection Manager Information Disclosure Vulnerability

Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...

PT-2025-20971 · Microsoft · Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Certificate Services AD CS affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to deny service over a network. This can affect the system, leadin...

PT-2025-20944 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: The issue is related to the improper handling of insufficient permissions or privileges, allowing an authorized attacker to elevate privileges over a network. Recommendations: A...

PT-2025-20444 · H3C · H3C Gr-5400Ax

Name of the Vulnerable Software and Affected Versions: H3C GR-5400AX versions up to 100R008 Description: A critical issue has been found that affects the Edit List SSID function of the /goform/aspForm file. The manipulation of the param argument leads to a buffer overflow. This issue can be...