430 matches found
CVE-2022-36034
nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of and with many repetitions of |. This issue has been patched in all versions above 0.2.5. There are currently no known workarounds...
CVE-2022-36973
This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ProfileDaoImp...
CVE-2025-21566
...
CVE-2025-21557
...
CVE-2025-21543
...
CVE-2025-21530
...
CVE-2025-21523
...
CVE-2025-21522
CVE-2025-21522 affects Oracle MySQL Server (component: Server: Parser). Affected versions are MySQL 8.0.40 and earlier, 8.4.3 and earlier, and 9.1.0 and earlier. The vulnerability can be exploited remotely by a low-privilege attacker with network access via multiple protocols, leading to an unaut...
CVE-2025-21518
...
CVE-2025-21512
CVE-2025-21512 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC). Vulnerable in JD Edwards EnterpriseOne Tools prior to 9.2.9.0. An unauthenticated attacker with network access via HTTP can exploit a flaw in the Web Runtime SEC component to read and modify data, with potential impac...
CVE-2025-21507
...
CVE-2025-21503
...
CVE-2025-21499
CVE-2025-21499 affects Oracle MySQL Server (component: Server: DDL). Affected versions: 8.4.3 and earlier; 9.1.0 and earlier. An attacker with network access via multiple protocols and high privileges can cause the server to hang or crash (complete DOS). Multiple advisories reference this CVE, in...
CVE-2025-21494
CVE-2025-21494 refers to a local, high-privilege vulnerability in Oracle MySQL Server (Server: Security: Privileges). Affected versions are 8.0.39 and earlier, 8.4.2 and earlier, and 9.0.1 and earlier. Under the described conditions, a highly-privileged attacker with logon to the host where MySQL...
BELL-CVE-2024-57889
Bulletin has no description...
CVE-2024-55577
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user...
BELL-CVE-2024-50349
Bulletin has no description...
CVE-2024-20148
In wlan STA FW, there is a possible out of bounds write due to improper input validation. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389045 / ALPS09136494; Issue ID:...