CVE Vulnerability Catalog

Data Sharing Framework (DSF) prior to 2.1.0 has an inverted time comparison in the OIDC JWKS and Metadata Document caches, causing the cache to never return cached values and every request to trigger a fresh HTTP fetch. Additionally, the OIDC token cache for FHIR client connections uses an inverted time comparison, so it never invalidates and returns the same token even if expired.

In the Data Sharing Framework (DSF), OIDC-authenticated sessions had no configured maximum inactivity timeout. Sessions persisted indefinitely after login, even after the OIDC access token expired.

Zero Motorcycles firmware versions 44 and prior allow an attacker to forcibly pair a device with the motorcycle via Bluetooth. Once paired, an attacker can use the over-the-air firmware update functionality to potentially upload malicious firmware. The motorcycle must be in Bluetooth pairing mode, and the attacker must be in proximity and understand the pairing process throughout the update.

In PublicCMS up to 6.202506.d, the ZipSecureFile.setMinflateRatio function in DocToHtmlUtils.java allows resource consumption. The attack can be launched remotely, and the vendor did not respond to the disclosure.

A vulnerability was found in PublicCMS up to 6.202506.d in the log_login function of LoginAdminController.java (Failed Login Handler component). Manipulation of the errorPassword argument causes cleartext storage in a file or on disk.

In the Tekton Pipelines project, the HTTP resolver's FetchHttpResource function calls io.ReadAll(resp.Body) with no response body size limit. Any tenant with permission to create TaskRuns or PipelineRuns referencing the HTTP resolver can point it at an attacker-controlled HTTP server returning a very large response body within the 1-minute timeout, causing the tekton-pipelines-resolvers pod to be OOM-killed by Kubernetes. Because all resolver types run in the same pod, crashing it denies resolution service to the entire cluster, and repeated exploitation causes a sustained crash loop.

Tekton Pipelines starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 contains a validation bypass in the VolumeMount path restriction. Using .. path traversal components, volumes can be mounted under restricted /tekton/ internal paths. The restriction check uses strings.HasPrefix without filepath.Clean, so a path like /tekton/home/../results passes validation but resolves to /tekton/results at runtime. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue.

From 0.43.0 to 0.68.0, frp contains an authentication bypass in the HTTP vhost routing path when routeByHTTPUser is used as part of access control. In proxy-style requests, routing uses the username from Proxy-Authorization to select the routeByHTTPUser backend, while the access control check uses credentials from the regular Authorization header, allowing an attacker to access a backend protected by httpUser/httpPassword even with an incorrect Proxy-Authorization password. This is fixed in 0.68.1.

A vulnerability in the Oracle Security Service product of Oracle Fusion Middleware (component: C Oracle SSL API) affects versions 12.2.1.4.0 and 12.1.3.0.0. It allows a low-privileged attacker with network access via HTTPS to compromise the service, requiring human interaction, and can result in unauthorized creation, deletion, or modification of critical data as well as unauthorized access to it.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L).

Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.6. An easily exploitable flaw allows a high-privileged attacker with logon to the infrastructure to compromise VirtualBox, potentially leading to unauthorized access to critical data.

Vulnerability in Oracle Hyperion Infrastructure Technology (component: Lifecycle Management) version 11.2.24.0.000. A high-privileged attacker with network access via HTTP, requiring user interaction, can cause unauthorized creation, deletion, or modification of critical data and unauthorized read of a subset. CVSS 5.2.

Vulnerability in Oracle PeopleSoft Enterprise CS Student Records (component: Research Tracking) version 9.2. Easily exploitable by a low-privileged attacker with network access via HTTP, requiring human interaction, it can result in unauthorized access to critical data or complete access to all accessible data.

A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable vulnerability allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.

A vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. An easily exploitable vulnerability allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.

A vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8, and 9.0.0-9.6.0. An easily exploitable vulnerability allows a high-privileged attacker with network access to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.

Vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. A high-privileged attacker with network access can easily exploit it to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.

Vulnerability in Oracle MySQL Server (InnoDB component) affects versions 8.0.0-8.0.45, 8.4.0-8.4.8 and 9.0.0-9.6.0. A high-privileged attacker with network access can easily exploit it to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server.

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS) affecting versions 9.0.0-9.6.0. An easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition) affecting versions 9.0.0-9.6.0. An easily exploitable vulnerability allows a high privileged attacker with network access via multiple protocols to cause a hang or frequently repeatable crash (complete DoS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts).