CVE-2025-53053

CVE-2025-53053 affects Oracle MySQL Server (Server: DML) and related 8.x/9.x branches. Affected versions include 8.0.0–8.0.43, 8.4.0–8.4.6, and 9.0.0–9.4.0. An attacker with high privileges and network access via multiple protocols can exploit this to cause a hang or a repeatable crash (DoS) and ...

CVE-2025-53054

CVE-2025-53054 affects Oracle MySQL Server (InnoDB). Affected versions include 8.0.0–8.0.43, 8.4.0–8.4.6, and 9.0.0–9.4.0. The vulnerability enables a high-privilege attacker with network access via multiple protocols to cause a hang or crash (DOS) and may allow unauthorized data updates/deletes ...

CVE-2025-53050

...

CVE-2025-53048

CVE-2025-53048 affects Oracle PeopleSoft PeopleTools Rich Text Editor in versions 8.60–8.62. The vulnerability arises from improper access control, allowing a network-accessible, low-privileged attacker (HTTP) with user interaction to compromise data, potentially enabling unauthorized update/inse...

CVE-2025-53045

...

CVE-2025-53046

CVE-2025-53046 affects Oracle ZFS Storage Appliance Kit (Analytics) for product line Oracle Systems, with vulnerable version 8.8. The root cause is an attackable condition that, when exposed to a network attacker with HTTP access, can lead to a hang or frequently repeatable crash (complete DOS) o...

CVE-2025-53045

CVE-2025-53045 is part of a cluster of Oracle MySQL (MySQL Server) vulnerabilities affecting InnoDB, Server: Optimizer, DML, and related components. Affected are MySQL versions 8.0.0–8.0.43, 8.4.0–8.4.6, and 9.0.0–9.4.0. The vulnerability can be exploited by a highly privileged attacker who has n...

CVE-2025-53043

...

CVE-2025-53040

CVE-2025-53040 is a vulnerability in Oracle MySQL’s Server: Optimizer. It affects MySQL Server components on versions 8.0.0–8.0.43, 8.4.0–8.4.6, and 9.0.0–9.4.0. The issue allows a high-privilege attacker with network access via multiple protocols to cause a hang or a frequently repeatable crash ...

CVE-2025-53037

...

CVE-2025-50075

...

CVE-2022-4981

creationtimestamp| type| source ---|---|--- 2025-10-21 17:32:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3puene7ar2c...

CVE-2025-61220

creationtimestamp| type| source ---|---|--- 2025-10-21 17:09:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3pt3da3dq2o...

CVE-2025-10916

creationtimestamp| type| source ---|---|--- 2025-10-21 08:49:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3ox6a55uu23 2025-10-22 07:21:45+00:00| seen| https://poliverso.org/objects/0477a01e-736b48f2-6409a361f7d72e52...

CVE-2025-47901

creationtimestamp| type| source ---|---|--- 2025-10-20 18:45:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nhz46u4n2m 2026-03-31 13:18:57+00:00| seen| Telegram/JITBwt8Dx-6YeOa4-kB3D3uVT5le84WfrafpIhKwvPhvSA...

CVE-2025-9574

creationtimestamp| type| source ---|---|--- 2025-10-20 18:00:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m3nfilqxhc2i 2025-10-21 08:05:10+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3m3ouociron2k 2025-10-23 10:00:00+00:00| seen|...

CVE-2025-40010

In the Linux kernel, the following vulnerability has been resolved: afs: Fix potential null pointer dereference in afsputserver afsputserver accessed server-debugid before the NULL check, which could lead to a null pointer dereference. Move the debugid assignment, ensuring we never dereference a...

CVE-2025-40005

In the Linux kernel, the following vulnerability has been resolved: spi: cadence-quadspi: Implement refcount to handle unbind during busy driver support indirect read and indirect write operation with assumption no force device removalunbind operation. However force device removalremoval is still...

CVE-2025-8884

creationtimestamp| type| source ---|---|--- 2025-10-20 15:33:19+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115407218187180091 2025-10-22 08:04:52+00:00| seen| https://infosec.exchange/users/BugBountyShorts/statuses/115416779408558815...

CVE-2025-11678

Stack-based Buffer Overflow in lwsadnsparselabel in warmcat libwebsockets allows, when the LWSWITHSYSASYNCDNS flag is enabled during compilation, to overflow the labelstack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer...