Oracle Linux 10 : kernel (ELSA-2025-13598)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-13598 advisory. - wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds - CVE-2025-38159 - Revert 'smb: client: fix TCP timers deadlock after rmmod'...

Malicious code in com.microsoft.mixedreality.powerthermalnotification (npm)

The package com.microsoft.mixedreality.powerthermalnotification was found to contain malicious code...

Malicious code in notification-queuer (npm)

The package notification-queuer was found to contain malicious code...

Malicious code in nadia-kripik33-sukiwir (npm)

The package nadia-kripik33-sukiwir was found to contain malicious code...

MAL-2025-27736 Malicious code in notification-queuer (npm)

The package notification-queuer was found to contain malicious code...

Malicious code in @notification-center/notification-center (npm)

The package @notification-center/notification-center was found to contain malicious code...

MAL-2025-37946 Malicious code in url-bar-notification-button (npm)

The package url-bar-notification-button was found to contain malicious code...

MAL-2025-17331 Malicious code in com.microsoft.mixedreality.powerthermalnotification (npm)

The package com.microsoft.mixedreality.powerthermalnotification was found to contain malicious code...

MAL-2025-9118 Malicious code in @notification-center/notification-center (npm)

The package @notification-center/notification-center was found to contain malicious code...

CVE-2025-7971

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-29 2025-08-14 15:16:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115027775869988670...

CVE-2024-46676

creationtimestamp| type| source ---|---|--- 2025-08-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07...

CGA-HCW3-7WCR-7VC7

Bulletin has no description...

PT-2025-51729

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s io uring/zctx functionality related to chained notification contexts. The issue involves incorrectly handling notification completion, potentially...

Linux Distros Unpatched Vulnerability : CVE-2025-38350

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/sched: Always pass notifications when child class becomes empty Certain classful qdiscs...

Linux Distros Unpatched Vulnerability : CVE-2025-21955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: prevent connection release during oplock break notification ksmbdwork could be freed when after connection release. Increment rcount of ksmbdconn to...

CGA-CR79-88RR-5M2R

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2025-23133

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: update channel list in reg notifier instead reg worker Currently when ath11k gets a new channel list, it will be processed according to the...

Linux Distros Unpatched Vulnerability : CVE-2021-47371

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix memory leaks in nexthop notification chain listeners syzkaller discovered memor...

Linux Distros Unpatched Vulnerability : CVE-2025-21986

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: switchdev: Convert blocking notification chain to a raw one A blocking notification chain uses a read-write semaphore to protect the integrity of the chai...

The vulnerability of the Advanced Notification Service (ANS) management service in the HarmonyOS operating system allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Advanced Notification Service ANS management service in the HarmonyOS operating system is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...