CVE-2025-53023

CVE-2025-53023 is a MySQL Server vulnerability in the replication component. Affected are MySQL 8.0.0–8.0.42. The issue allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequent crash (DOS) of MySQL Server. The CVSS v3.1 base score is 4.9 (Availabi...

Directus' exact version number is exposed by the OpenAPI Spec

Summary The exact Directus version number is incorrectly being used as OpenAPI Spec version this means that it is being exposed by the /server/specs/oas endpoint without authentication. Impact With the exact version information a malicious attacker can look for known vulnerabilities in Directus...

Autodesk Revit RFA File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk Revit. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RFA...

CVE-2025-49677

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2025-42965

SAP CMC Promotion Management allows an authenticated attacker to enumerate internal network systems by submitting crafted requests during job source configuration. By analysing response times for various IP addresses and ports, the attacker can infer valid network endpoints. Successful exploitati...

CVE-2025-53184

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability...

CVE-2025-53174

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

CVE-2025-53182

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability...

CVE-2025-53171

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

PT-2025-28709 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit the issue, as...

CVE-2025-48501

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running...

CVE-2025-53180

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability...

CVE-2025-53172

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

CVE-2025-53176

Stack overflow risk when vector images are parsed during file preview Impact: Successful exploitation of this vulnerability may affect the file preview function...

CVE-2025-53185

CVE-2025-53185 describes a virtual address reuse issue in the memory management module that can be exploited by non-privileged users to access released memory, potentially affecting service integrity. Multiple sources (NVD, Red Hat, CNVD/CNNVD) associate Huawei HarmonyOS/EMUI with this vulnerabil...

CVE-2025-53183

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability...

CVE-2025-53182

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability...

CVE-2025-53182

CVE-2025-53182 concerns Huawei HarmonyOS (versions 5.0.1 and 5.1.0) with a null pointer dereference in the PDF Preview module. Affected component: PDF Preview in HarmonyOS; root cause: null pointer dereference as described by CNVD/CNNVD entries. Impact stated across sources: exploitation may affe...

CVE-2025-53181

CVE-2025-53181 is a null pointer dereference in Huawei HarmonyOS's PDF Preview module affecting HarmonyOS versions 5.0.1 and 5.1.0. Root cause: null pointer dereference in the PDF Preview module. Impact: can affect function stability; exploitation status not detailed in the provided documents. Pu...

CVE-2025-53180

Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability...