CVE-2025-53030

CVE-2025-53030 affects Oracle VM VirtualBox (component: Core) with 7.1.10, per multiple sources. The description states an attacker with logon to the infrastructure where VirtualBox runs can achieve high privileges and potentially compromise Oracle VM VirtualBox, with possible broader impact on r...

CVE-2025-50094

...

CVE-2025-50084

...

CVE-2025-50061

CVE-2025-50061 affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access component). Affected versions are 20.12.0–20.12.21, 21.12.0–21.12.21, 22.12.0–22.12.19, 23.12.0–23.12.13, and 24.12.0–24.12.4. An attacker with network access via HTTP and with low privileges can exploi...

CVE-2025-30760

...

CVE-2025-30752

...

CVE-2025-30747

CVE-2025-30747 affects Oracle PeopleSoft PeopleTools (PIA Core Technology). The vulnerability exists in PeopleSoft Enterprise PeopleTools components and impacts versions 8.60, 8.61, and 8.62. An unauthenticated attacker who can reach the service over HTTP can exploit this issue to access data rea...

CVE-2025-30747

...

CVE-2025-30739

...

BELL-CVE-2025-38009

Bulletin has no description...

BELL-CVE-2023-53093

Bulletin has no description...

CVE-2025-30737

...

CVE-2025-30709

CVE-2025-30709 affects Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected are versions 9.2.0.0–9.2.9.2 . The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools, with successful attacks...

CVE-2025-30689

...

CVE-2025-30686

Affected product: Oracle Hospitality Simphony (part of Oracle Food and Beverage Applications) with EMC component. Vulnerable versions: 19.1–19.7. Root cause: flaw in EMC within Simphony that enables a low-privilege, network-access user (HTTP) to access or alter data and cause partial DOS. Impact:...

CVE-2025-21551

CVE-2025-21551 is a vulnerability in Oracle Solaris 11 affecting the File system component. It enables a locally authenticated, high-privilege attacker to compromise Solaris, potentially leading to unauthorized data creation/deletion/modification and a complete denial of service (hangs/crashes). ...

CVE-2025-21513

The CVE-2025-21513 issue affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) prior to 9.2.9.0. An unauthenticated attacker with network access via HTTP can compromise JD Edwards EnterpriseOne Tools, requiring user interaction for exploitation. Impacts include unauthorized update/inser...

CVE-2025-21505

...

CVE-2025-21500

...

BELL-CVE-2024-46816

Bulletin has no description...