Malicious code in ads-dsp-lite-components (npm)

--- -= Per source details. Do not edit below this line.=-...

UBUNTU-CVE-2025-62401

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...

CVE-2025-52735 WordPress NextMove Lite plugin <= 2.24.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n/a through = 2.24.0...

CVE-2023-53725

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/cadence-ttc: Fix memory leak in ttctimerprobe Smatch reports: drivers/clocksource/timer-cadence-ttc.c:529 ttctimerprobe warn: 'timerbaseaddr' from ofiomap not released on lines: 498,508,516. timerbaseaddr may...

PT-2025-43263

Name of the Vulnerable Software and Affected Versions WooCommerce Orders & Customers Exporter versions through 5.4 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for exploitation of the access control...

CVE-2025-53053

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2025-62592

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...

CVE-2025-62479

...

CVE-2025-62480

CVE-2025-62480 affects Oracle ZFS Storage Appliance Kit (Oracle Systems), specifically the Naming Subsystem, with impact on version 8.8. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the appliance, potentially causing partial denial of service (part...

CVE-2025-62290

...

CVE-2025-62288

...

CVE-2025-61885

...

CVE-2025-61762

The CVE-2025-61762 entry concerns Oracle PeopleSoft Payables (component: Payables) in PeopleSoft Enterprise FIN Payables, affected in version 9.2. The connected sources confirm an HTTP-based, network-accessible vulnerability that low-privilege attackers can exploit to perform unauthorized updates...

CVE-2025-61754

The CVE-2025-61754 entry affects Oracle BI Publisher (Web Service API) within Oracle Analytics. Affected versions are 7.6.0.0.0 and 8.2.0.0.0. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, potentially leading to unauthorized access to Oracle BI Publis...

CVE-2025-61748

...

CVE-2025-53069

...

CVE-2025-53064

...

CVE-2025-53062

...

CVE-2025-53044

...

Ubuntu: Security Advisory (USN-7822-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...