CVE-2025-62479

...

CVE-2025-62480

CVE-2025-62480 affects Oracle ZFS Storage Appliance Kit (Oracle Systems), specifically the Naming Subsystem, with impact on version 8.8. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the appliance, potentially causing partial denial of service (part...

CVE-2025-62290

...

CVE-2025-62288

...

CVE-2025-61885

...

CVE-2025-61762

The CVE-2025-61762 entry concerns Oracle PeopleSoft Payables (component: Payables) in PeopleSoft Enterprise FIN Payables, affected in version 9.2. The connected sources confirm an HTTP-based, network-accessible vulnerability that low-privilege attackers can exploit to perform unauthorized updates...

CVE-2025-61754

The CVE-2025-61754 entry affects Oracle BI Publisher (Web Service API) within Oracle Analytics. Affected versions are 7.6.0.0.0 and 8.2.0.0.0. The vulnerability is exploitable over HTTP by a low-privilege attacker with network access, potentially leading to unauthorized access to Oracle BI Publis...

CVE-2025-61748

...

CVE-2025-53069

...

CVE-2025-53064

...

CVE-2025-53062

...

CVE-2025-53044

...

Ubuntu: Security Advisory (USN-7822-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in unclesky5910 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8a6db403a22b058f1960f850fb70b353baeee04b4fc240846549f33ef355ef31 Package imitates Roblox API wrapper, but the only action is getting the public IP, suggesting it's a security research or malicious attempt --- Category:...

EUVD-2025-34995

Malicious code in iwf-ant-design-draggable-modal npm...

JLSEC-2025-68 xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain...

xmlStringLenDecodeEntities in parser.c in libxml2 2.9.10 has an infinite loop in a certain end-of-file situation...

OESA-2025-2479 poppler security update

is a PDF rendering library. Security Fixes: Poppler 24.06.1 through 25.x before 25.04.0 allows stack consumption and a SIGSEGV via deeply nested structures within the metadata such as GTSPDFEVersion of a PDF document, e.g., a regular expression for a long pdfsubver string. This occurs in...

Malicious code in @gtpn/eslint-config-progressive (npm)

The package @gtpn/eslint-config-progressive was found to contain malicious code...

MAL-2025-48464 Malicious code in @custom-widget/sdk (npm)

The package @custom-widget/sdk was found to contain malicious code...

CVE-2025-7329

A Stored Cross-Site Scripting security issue exists in the affected product that could potentially allow a malicious user to view and modify sensitive data or make the webpage unavailable. The vulnerability stems from missing special character filtering and encoding. Successful exploitation...