CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

CVE-2025-21549 relates to Oracle WebLogic Server (Fusion Middleware) core in version 14.1.1.0.0. The vulnerability permits an unauthenticated attacker with network access over HTTP/2 to cause the WebLogic Server to hang or crash (complete DOS). This aligns with the CVSS v3.1 base score of 7.5 (Av...

7.5CVSS6.9AI score0.00527EPSS

Exploits0References1Affected Software1

CVE•added 2025/01/21 8:53 p.m.•295 views

CVE-2025-21543

CVE-2025-21543 affects Oracle MySQL Server (component: Server: Packaging). Affects MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. An attacker with high privileges who can reach the server over the network via multiple protocols can cause the server to hang or crash (complete ...

4.9CVSS4.4AI score0.00833EPSS

Exploits0References2Affected Software2

CVE•added 2025/01/21 8:53 p.m.•52 views

CVE-2025-21542

CVE-2025-21542 affects Oracle Communications Order and Service Management (OC OSM) in versions 7.4.0, 7.4.1 and 7.5.0. The issue is described as an access control weakness in the Security component that, with network access over HTTP and using low privileges, allows unauthorized update/insert/del...

6.3CVSS5.6AI score0.00185EPSS

Exploits0References1Affected Software1

CVE•added 2025/01/21 8:53 p.m.•87 views

CVE-2025-21533

CVE-2025-21533 is a local vulnerability in Oracle VM VirtualBox Core affecting older 7.0.x and 7.1.x releases (prior to 7.0.24 and prior to 7.1.6). A low-privilege user with logon can compromise VirtualBox, potentially giving unauthorized access to data. CVSS v3.1 base score 5.5 (C:H, I:N, A:N). ...

5.5CVSS4.9AI score0.00292EPSS

Exploits0References1Affected Software1

Vulnrichment•added 2025/01/21 8:53 p.m.•11 views

CVE-2025-21523

...

4.9CVSS5.1AI score0.00911EPSS

Exploits0References1

Cvelist•added 2025/01/21 8:53 p.m.•19 views

CVE-2025-21516

...

8.1CVSS0.00539EPSS

Exploits0References1

CVE•added 2025/01/21 8:53 p.m.•57 views

CVE-2025-21511

The CVE-2025-21511 entry concerns Oracle JD Edwards EnterpriseOne Tools, specifically the Web Runtime SEC component. Affected versions are prior to 9.2.9.0. An unauthenticated, network-accessible attacker can compromise EnterpriseOne Tools via HTTP, potentially leading to unauthorized access to c...

7.5CVSS6.8AI score0.00305EPSS

Exploits0References1Affected Software1

Vulnrichment•added 2025/01/21 8:52 p.m.•5 views

CVE-2025-21495

...

4.4CVSS4.8AI score0.00519EPSS

Exploits0References1

CVE•added 2025/01/11 2:31 p.m.•56 views

CVE-2025-23127

CVE-2025-23127 entry is rejected/not used; it does not represent an active vulnerability entry.

7AI score

Exploits0