10236 matches found
RHEL 8 : thunderbird (RHSA-2025:15438)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:15438 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Denial-of-service due to out-of-memory...
Malicious code in pp-com-components (npm)
The package pp-com-components was found to contain malicious code...
MAL-2025-45581 Malicious code in pp-com-components (npm)
The package pp-com-components was found to contain malicious code...
Vulnerabilities fixed in Google Android and Samsung Mobile
Google has fixed vulnerabilities in Android. Samsung has fixed vulnerabilities relevant to Samsung Mobile in Samsung Mobile. The vulnerabilities in the Android kernel include a race condition between functions that manage CPU timers, which can lead to system instability. In addition,...
Linux Distros Unpatched Vulnerability : CVE-2010-4209
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Flash component infrastructure in YUI 2.8.0 through 2.8.1, as used in Bugzilla 3.7.1 through 3.7.3 and 4.1, allows...
Malicious code in @mic-security/complex-components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d2237dd61915a4281b59de24281192c1f794aaccc022ab9ba73c37eb193f09 Any computer that has this package installed or running should be considered...
MAL-2025-42693 Malicious code in @mic-security/complex-components (npm)
The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27d2237dd61915a4281b59de24281192c1f794aaccc022ab9ba73c37eb193f09 Any computer that has this package installed or running should be considered...
CVE-2025-9676
A vulnerability was identified in NCSOFT Universe App up to 1.3.0. Impacted is an unknown function of the file AndroidManifest.xml of the component com.ncsoft.universeapp. The manipulation leads to improper export of android application components. Local access is required to approach this attack...
CVE-2025-31972
HCL BigFix SM is affected by a Sensitive Information Exposure vulnerability where internal connections do not use TLS encryption which could allow an attacker unauthorized access to sensitive data transmitted between internal components...
CVE-2025-9695
CVE-2025-9695 affects GalleryVault Gallery Vault App for Android up to version 4.5.2. The issue arises from an improperly exported AndroidManifest.xml in the component com.thinkyeah.galleryvault, enabling a local-execution path. The vulnerability could lead to exposure of confidential data on the...
CVE-2025-9695 GalleryVault Gallery Vault App com.thinkyeah.galleryvault AndroidManifest.xml improper export of android application components
A vulnerability was identified in GalleryVault Gallery Vault App up to 4.5.2 on Android. Affected by this issue is some unknown functionality of the file AndroidManifest.xml of the component com.thinkyeah.galleryvault. The manipulation leads to improper export of android application components. T...
CVE-2025-9677
A security flaw has been discovered in Modo Legend of the Phoenix up to 1.0.5. The affected element is an unknown function of the file AndroidManifest.xml of the component com.duige.hzw.multilingual. The manipulation results in improper export of android application components. The attack needs t...
CVE-2025-9675
A vulnerability was determined in Voice Changer App up to 1.1.0. This issue affects some unknown processing of the file AndroidManifest.xml of the component com.tuyangkeji.changevoice. Executing manipulation can lead to improper export of android application components. It is possible to launch t...
CVE-2025-9676
CVE-2025-9676 affects NCSOFT Universe App (versions up to 1.3.0) due to improper export of AndroidManifest.xml in the com.ncsoft.universeapp component. Root cause: exported Android components not restricted, enabling local attack. Exploit is publicly available; no remote vector. A fix is availabl...
CVE-2025-9675
The CVE-2025-9675 entry affects the Voice Changer App up to version 1.1.0 and specifically the AndroidManifest.xml handling in the component com.tuyangkeji.changevoice. The underlying issue is improper export of Android application components due to some unknown processing of that manifest file, ...
CVE-2025-9672
The CVE-2025-9672 entry affects Rejseplanen App (package de.hafas.android.rejseplanen) up to version 8.2.2. The vulnerability arises from an improper export of AndroidManifest.xml components in the app, enabling a local attack. Public exploit details exist, and there was no response from the vend...
Malicious code in blocks-web-components (npm)
The package blocks-web-components was found to contain malicious code...
Malicious code in jito-components (npm)
The package jito-components was found to contain malicious code...