Vulnerability index

Browse CVEs

5,953 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Improper Access ControlCWE-284 × clear
A3700r Firmware MEDIUM 5.3
CVE-2025-3666

A vulnerability was found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this issue is the function setDdnsCfg of t…

No fix yet
Fix from $1,600 2025-04-16
A3700r Firmware MEDIUM 5.3
CVE-2025-3665

A vulnerability has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513 and classified as critical. Affected by this vulnerability is the function se…

No fix yet
Fix from $1,600 2025-04-16
A3700r Firmware HIGH 8.2
CVE-2025-3663EPSS 10%

A vulnerability, which was classified as critical, has been found in TOTOLINK A3700R 9.1.2u.5822_B20200513. This issue affects the function setWiFiEa…

No fix yet
Fix from $1,950 2025-04-16
A3700r Firmware MEDIUM 5.3
CVE-2025-3664

A vulnerability, which was classified as critical, was found in TOTOLINK A3700R 9.1.2u.5822_B20200513. Affected is the function setWiFiEasyGuestCfg o…

No fix yet
Fix from $1,600 2025-04-16
Alienware Command Center HIGH 7.8
CVE-2025-30100

Dell Alienware Command Center 6.x, versions prior to 6.7.37.0 contain an Improper Access Control Vulnerability. A low privileged attacker with local …

Fix: 6.7.37.0+
Fix from $1,950 2025-04-16
Application Object Library MEDIUM 6.1
CVE-2025-30732

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected ar…

Fix: after 12.2.14
Fix from $1,600 2025-04-15
Peoplesoft Enterprise Cc Common Application Objects HIGH 8.1
CVE-2025-30735

Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Page and Field Configuration). Th…

Patch available
Fix from $1,950 2025-04-15
Java Virtual Machine HIGH 7.4
CVE-2025-30736

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.7. Di…

Fix: after 23.7
Fix from $1,950 2025-04-15
Jd Edwards Enterpriseone Tools MEDIUM 6.5
CVE-2025-30740

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected …

Fix: after 9.2.9.2
Fix from $1,600 2025-04-15
Application Object Library MEDIUM 5.3
CVE-2025-30726

Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are affected ar…

Fix: after 12.2.14
Fix from $1,600 2025-04-15
Configurator HIGH 7.5
CVE-2025-30728

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Core). Supported versions that are affected are 12.2.3-12.2.…

Fix: after 12.2.14
Fix from $1,950 2025-04-15
Communications Order And Service Management MEDIUM 5.5
CVE-2025-30729

Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security). Support…

Mitigation only
Fix from $1,600 2025-04-15
Istore HIGH 7.5
CVE-2025-30707

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions that are affected are 12.2.3-…

Fix: after 12.2.14
Fix from $1,950 2025-04-15
Jd Edwards Enterpriseone Tools MEDIUM 6.1
CVE-2025-30709

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected …

Fix: after 9.2.9.2
Fix from $1,600 2025-04-15
Applications Framework MEDIUM 5.4
CVE-2025-30711

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments, File Upload). Supported versions that…

Fix: after 12.2.14
Fix from $1,600 2025-04-15
Peoplesoft Enterprise Hcm Talent Acquisition Manager MEDIUM 5.4
CVE-2025-30713

Vulnerability in the PeopleSoft Enterprise HCM Talent Acquisition Manager product of Oracle PeopleSoft (component: Job Opening). The supported vers…

Patch available
Fix from $1,600 2025-04-15
Peoplesoft Enterprise Peopletools MEDIUM 5.4
CVE-2025-30697

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). Supported versions that are affect…

Patch available
Fix from $1,600 2025-04-15
Jre MEDIUM 5.6
CVE-2025-30698

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported …

Mitigation only
Fix from $1,600 2025-04-15
Solaris HIGH 7.2
CVE-2025-30690

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Difficult to e…

Patch available
Fix from $1,950 2025-04-15
Isupplier Portal MEDIUM 6.5
CVE-2025-30692

Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 1…

Fix: after 12.2.14
Fix from $1,600 2025-04-15
Mysql Cluster MEDIUM 5.5
CVE-2025-30693

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 an…

Fix: after 9.2.0
Fix from $1,600 2025-04-15
Xml Database MEDIUM 5.4
CVE-2025-30694

Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 19.3-19.26, 21.3-21.17 and 23.4-23.…

Fix: after 23.7
Fix from $1,600 2025-04-15
Mysql Server MEDIUM 5.5
CVE-2025-30695

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 an…

Fix: after 9.2.0
Fix from $1,600 2025-04-15
Jd Edwards Enterpriseone Tools MEDIUM 5.4
CVE-2025-21586

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected …

Fix: after 9.2.9.2
Fix from $1,600 2025-04-15
Jre HIGH 7.4
CVE-2025-21587

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supporte…

Mitigation only
Fix from $1,950 2025-04-15
Financial Services Revenue Management And Billing MEDIUM 6.0
CVE-2025-21573

Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Chatbot).…

Patch available
Fix from $1,600 2025-04-15
Trusted Device Agent HIGH 7.3
CVE-2025-29984

Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access …

Fix: 7.0.3.0+
Fix from $1,950 2025-04-15
My Blog Layui CRITICAL 9.8
CVE-2025-3593

A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Up…

No fix yet
Fix from $2,300 2025-04-14
Cicadascms HIGH 8.8
CVE-2025-3585

A vulnerability classified as critical has been found in westboy CicadasCMS 1.0. This affects an unknown part of the file /upload/ of the component J…

No fix yet
Fix from $1,950 2025-04-14
Unclassified HIGH 7.3
CVE-2025-3566

A vulnerability, which was classified as critical, has been found in veal98 小牛肉 Echo 开源社区系统 4.2. This issue affects the function uploadMdPic…

Mitigation only
Fix from $1,950 2025-04-14