RHSA-2026:1229 Red Hat Security Advisory: gnupg2 security update

Bulletin has no description...

thunderbird security update

140.7.0-1.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 140.7.0 - Add OpenELA debranding 140.7.0-1 - Update to 140.7.0 ESR...

Malicious code in ofjaaah-security-lib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 94bfbd5c89af01468786a4ff45da3126dbd49e28e4a250d0d124fc65b1f0c508 The package ofjaaah-security-lib was found to contain malicious code. Source: ghsa-malware...

CVE-2025-67077

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action...

CVE-2021-0134

Improper input validation in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...

CVE-2021-0131

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2021-0133

Key exchange without entity authentication in the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access...

DEBIAN-CVE-2025-68347

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...

RHSA-2025:23852 Red Hat Security Advisory: keylime security update

Bulletin has no description...

MAL-2025-192860 Malicious code in security-testing-research99 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 27dd5ce37aabbab8cb14a3f44bb2d702062de69035cdc6dd9c15be236b11fd0a The package security-testing-research99 was found to contain malicious code...

CVE-2021-47730

Selea Targa IP OCR-ANPR Camera contains a cross-site request forgery vulnerability that allows attackers to create administrative users without authentication. Attackers can craft a malicious web page that submits a form to add a new admin user with full system privileges when a logged-in user...

CGA-J785-GC4J-H29V

Bulletin has no description...

MINI-Q43G-GQ7W-M294

Bulletin has no description...

CVE-2025-58475

Improper input validation in libsec-ril.so prior to SMR Dec-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...

CVE-2025-58475

The CVE-2025-58475 entry concerns improper input validation in libsec-ril.so prior to Samsung SMR Dec-2025 Release 1, which allows a local privileged attacker to write out-of-bounds memory. Affected component: libsec-ril.so (pre-December 2025 patch level). Root cause: input validation flaw leadin...

MINI-G88W-HJ6R-4WPX

Bulletin has no description...

CVE-2025-58316

DoS vulnerability in the video-related system service module. Impact: Successful exploitation of this vulnerability may affect availability...

ECHO-FE41-738D-E691

Bulletin has no description...

JLSEC-2025-213 An issue was discovered in Mbed TLS before 2.25.0 (and before 2.16.9 LTS and before 2.7.18 LTS)

An issue was discovered in Mbed TLS before 2.25.0 and before 2.16.9 LTS and before 2.7.18 LTS. A NULL algorithm parameters entry looks identical to an array of REAL size zero and thus the certificate is considered valid. However, if the parameters do not match in any way, then the certificate...

JLSEC-2025-200 Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information (an RSA private key) by...

Arm Mbed TLS before 2.16.5 allows attackers to obtain sensitive information an RSA private key by measuring cache usage during an import...