Fedora: Security Advisory (FEDORA-2025-daf52aa6ad)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-93d7b9a5d5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-62778 Frappe Learning allowed students to access the Quiz Form via direct URL

Frappe Learning is a learning management system. A security issue was identified in Frappe Learning 2.39.1 and earlier, where students were able to access the Quiz Form if they had the URL...

CVE-2025-62931

CVE-2025-62931 refers to a Missing Authorization vulnerability in the WordPress plugin “MSN Partner Hub” (MSN Partner Hub) for WordPress, with versions up to and including 2.9 affected. The underlying issue is broken access control that could allow an attacker to exploit insufficient authorizatio...

UBUNTU-CVE-2025-12200

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent...

Malicious code in dhemrdhs84006 (npm)

The package dhemrdhs84006 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in starlight-for-rabbitmq-docs (npm)

The package starlight-for-rabbitmq-docs was found to contain malicious code...

Malicious code in de-sxm-reactlib (npm)

The package de-sxm-reactlib was found to contain malicious code...

Malicious code in dhpgemrdhs84006 (npm)

The package dhpgemrdhs84006 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in dhpgemrdhs51214 (npm)

The package dhpgemrdhs51214 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

CVE-2025-40022

In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix incorrect boolean values in afalgctx Commit 1b34cbbf4f01 "crypto: afalg - Disallow concurrent writes in afalgsendmsg" changed some fields from bool to 1-bit bitfields of type u32. However, some assignments to...

SUSE CVE-2025-62813

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Malicious code in uui-nextjs-template (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ketcher-react-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ads-dsp-lite-components (npm)

--- -= Per source details. Do not edit below this line.=-...

UBUNTU-CVE-2025-62401

An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...

CVE-2025-52735 WordPress NextMove Lite plugin <= 2.24.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n/a through = 2.24.0...

CVE-2023-53725

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/cadence-ttc: Fix memory leak in ttctimerprobe Smatch reports: drivers/clocksource/timer-cadence-ttc.c:529 ttctimerprobe warn: 'timerbaseaddr' from ofiomap not released on lines: 498,508,516. timerbaseaddr may...

PT-2025-43263

Name of the Vulnerable Software and Affected Versions WooCommerce Orders & Customers Exporter versions through 5.4 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for exploitation of the access control...

CVE-2025-53053

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...