2025

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are

Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "scenes").

An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while addin

An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username.

A maliciously crafted DWG file, when parsed through Autodesk Revit, can cause a Stack-Based Buffer Overflow vulnerabilit

An attacker can change registered email addresses of other users and take over arbitrary accounts.

Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").

An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response

An unauthenticated attacker can infer the existence of usernames in the system by querying an API.

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte

Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are aff

Vulnerability in Oracle Secure Backup (component: General). Supported versions that are affected are 12.1.0.1, 12.1.0.2

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Personalization Server). Su

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affe

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Appli

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vuln

A maliciously crafted PDF file, when parsed through Autodesk applications, can force a Memory Corruption vulnerability.

A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vuln

A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overf

A maliciously crafted RCS file, when parsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability. A ma

A maliciously crafted PDF file, when linked or imported into Autodesk applications, can force a Heap-Based Overflow vuln

An issue in the web socket handshake process of SteVe v3.7.1 allows attackers to bypass authentication and execute arbit

Argo Events is an event-driven workflow automation framework for Kubernetes. A user with permission to create/modify Eve

pleezer is a headless Deezer Connect player. Hook scripts in pleezer can be triggered by various events like track chang

make-initrd-ng is a tool for copying binaries and their dependencies. Local privilege escalation affecting all NixOS use

Jellyfin is an open source self hosted media server. In versions 10.9.0 to before 10.10.7, the /System/Restart endpoint

TEIGarage is a webservice and RESTful service to transform, convert and validate various formats, focussing on the TEI f

Dpanel is a Docker visualization panel system which provides complete Docker management functions. The Dpanel service co

An attacker could modify or disable settings, disrupt fuel monitoring and supply chain operations, leading to disabling

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacke

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker wi

A zip slip vulnerability in the component \service\migrate\MigrateForm.java of JEEWMS v3.7 allows attackers to execute a

An issue in Erick xmall v.1.1 and before allows a remote attacker to escalate privileges via the updateAddress method of

Collabora Online is a collaborative online office suite based on LibreOffice technology. In versions prior to 24.04.12.4

Tenda AC10 V4.0si_V16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via mac2.

gorilla/csrf provides Cross Site Request Forgery (CSRF) prevention middleware for Go web applications & services. Prior

TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the pin parameter in the function

Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the s

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate valid