CVE-2025-22030

In the Linux kernel, the following vulnerability has been resolved: mm: zswap: fix cryptofreeacomp deadlock in zswapcpucompdead Currently, zswapcpucompdead calls cryptofreeacomp while holding the per-CPU acompctx mutex. cryptofreeacomp then holds scomplock through cryptoexitscompopsasync. On the...

CVE-2025-22049

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Increase ARCHDMAMINALIGN up to 16 ARCHDMAMINALIGN is 1 by default, but some LoongArch-specific devices such as APBDMA require 16 bytes alignment. When the data buffer length is too small, the hardware may make an error...

CVE-2025-30737

...

CVE-2025-30740

...

CVE-2025-30735

CVE-2025-30735 affects Oracle PeopleSoft Enterprise CC Common Application Objects, component: Page and Field Configuration, version 9.2. The vulnerability exists when exposed over HTTP via a network, allowing a low-privileged attacker to perform unauthorized create, delete, or modify actions on c...

CVE-2025-30720

...

CVE-2025-30719

CVE-2025-30719 affects Oracle VM VirtualBox Core in VirtualBox 7.1.6. A local, low-privilege attacker can log on and cause a hang or crash (DoS) and may read a subset of data. CVSS 3.1 base score 6.1 (C:L, I:N, A:H). No remediation details are provided in the connected documents; monitor for upda...

CVE-2025-30708

...

CVE-2025-30709

...

CVE-2025-30706

...

CVE-2025-30705

The CVE is for Oracle MySQL Server (Server: PS) affecting MySQL Server versions 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or complete denial of service in MySQL Server. The provided connected d...

CVE-2025-30701

...

CVE-2025-30699

CVE-2025-30699 affects Oracle MySQL Server, component: Server: Stored Procedure. Affected versions: 8.0.0–8.0.41, 8.4.0–8.4.4, 9.0.0–9.2.0. An attacker with high privileges and network access via multiple protocols can exploit this to cause a hang or a complete denial of service on MySQL Server. ...

CVE-2025-30696

CVE-2025-30696 affects Oracle MySQL Server (component: Server: PS). Affected versions are 8.0.0–8.0.41, 8.4.0–8.4.4 and 9.0.0–9.2.0. The vulnerability can be exploited remotely over multiple protocols by a high-privilege attacker to cause a hang or a frequently repeatable crash (Denial of Service...

CVE-2025-30694

CVE-2025-30694 affects Oracle Database Server’s XML Database component. Affected versions are 19.3–19.26, 21.3–21.17, and 23.4–23.7. The vulnerability is exploitable by a low-privilege user with User Account privilege who has network access via HTTP, with exploitation requiring user interaction. ...

CVE-2025-21584

...

CVE-2025-21581

...

CVE-2025-21577

...

CVE-2025-21575

...

CVE-2025-32945 PeerTube Arbitrary Playlist Creation via REST API

The vulnerability allows an existing user to add playlists to a different user’s channel using the PeerTube REST API. The vulnerable code sets the owner of the new playlist to be the user who performed the request, and then sets the associated channel to the channel ID supplied by the request,...