MAL-2025-16137 Malicious code in bravo-uniform-lztc (npm)

The package bravo-uniform-lztc was found to contain malicious code...

MAL-2025-20926 Malicious code in framework-adonis-pyxis-neptune (npm)

The package framework-adonis-pyxis-neptune was found to contain malicious code...

MAL-2025-12554 Malicious code in @zalastax/nolb-ngx-z (npm)

The package @zalastax/nolb-ngx-z was found to contain malicious code...

MAL-2025-10040 Malicious code in @zalastax/nolb-_go7 (npm)

The package @zalastax/nolb-go7 was found to contain malicious code...

MAL-2025-22073 Malicious code in gymarb (npm)

The package gymarb was found to contain malicious code...

MAL-2025-12857 Malicious code in @zalastax/nolb-osp (npm)

The package @zalastax/nolb-osp was found to contain malicious code...

MAL-2025-14546 Malicious code in ankerias (npm)

The package ankerias was found to contain malicious code...

MAL-2025-14864 Malicious code in array-wind-user-data-rain (npm)

The package array-wind-user-data-rain was found to contain malicious code...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager

Summary IBM Db2 is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

BELL-CVE-2025-53859

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2021-29972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediat...

CVE-2025-43186

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6, macOS Ventura 13.7.7. Parsing a file may lead to an unexpected app termination...

BELL-CVE-2025-38413

Bulletin has no description...

BELL-CVE-2025-38423

Bulletin has no description...

BELL-CVE-2025-38402

Bulletin has no description...

BELL-CVE-2025-38374

Bulletin has no description...

BELL-CVE-2025-38355

Bulletin has no description...

UBUNTU-CVE-2025-48965

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtlsasn1storenameddata can trigger conflicting data with val.p of NULL but val.len greater than zero...

BELL-CVE-2025-38317

Bulletin has no description...

ALPINE-CVE-2025-49600

In MbedTLS 3.3.0 before 3.6.4, mbedtlslmsverify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS Leighton-Micali Signature forgery in a fault scenario. Specifically, unchecked return values in mbedtlslmsverify allow an attacker who can induce ...