54130 matches found
UBUNTU-CVE-2025-12200
Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: Based on the analysis by MITRE and review of community feedback, the reported conditions represent...
Malicious code in dhemrdhs84006 (npm)
The package dhemrdhs84006 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in starlight-for-rabbitmq-docs (npm)
The package starlight-for-rabbitmq-docs was found to contain malicious code...
Malicious code in de-sxm-reactlib (npm)
The package de-sxm-reactlib was found to contain malicious code...
Malicious code in dhpgemrdhs84006 (npm)
The package dhpgemrdhs84006 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
Malicious code in dhpgemrdhs51214 (npm)
The package dhpgemrdhs51214 was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...
CVE-2025-40022
In the Linux kernel, the following vulnerability has been resolved: crypto: afalg - Fix incorrect boolean values in afalgctx Commit 1b34cbbf4f01 "crypto: afalg - Disallow concurrent writes in afalgsendmsg" changed some fields from bool to 1-bit bitfields of type u32. However, some assignments to...
SUSE CVE-2025-62813
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
Malicious code in uui-nextjs-template (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ketcher-react-app (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ads-dsp-lite-components (npm)
--- -= Per source details. Do not edit below this line.=-...
UBUNTU-CVE-2025-62401
An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment...
CVE-2025-52735 WordPress NextMove Lite plugin <= 2.24.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in XLPlugins NextMove Lite woo-thank-you-page-nextmove-lite allows Reflected XSS.This issue affects NextMove Lite: from n/a through = 2.24.0...
CVE-2023-53725
In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/cadence-ttc: Fix memory leak in ttctimerprobe Smatch reports: drivers/clocksource/timer-cadence-ttc.c:529 ttctimerprobe warn: 'timerbaseaddr' from ofiomap not released on lines: 498,508,516. timerbaseaddr may...
PT-2025-43263
Name of the Vulnerable Software and Affected Versions WooCommerce Orders & Customers Exporter versions through 5.4 Description The software contains a missing authorization issue due to incorrectly configured access control security levels. This allows for exploitation of the access control...
CVE-2025-53053
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
CVE-2025-62592
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are 7.1.12 and 7.2.2. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromis...
CVE-2025-62479
...
CVE-2025-62480
CVE-2025-62480 affects Oracle ZFS Storage Appliance Kit (Oracle Systems), specifically the Naming Subsystem, with impact on version 8.8. The vulnerability allows a high-privilege attacker with network access via HTTP to compromise the appliance, potentially causing partial denial of service (part...