MAL-2025-25644 Malicious code in lucid-xe98q-a6ugy-pebble-project (npm)

The package lucid-xe98q-a6ugy-pebble-project was found to contain malicious code...

MAL-2025-28689 Malicious code in paltran (npm)

The package paltran was found to contain malicious code...

MAL-2025-26521 Malicious code in mkdita (npm)

The package mkdita was found to contain malicious code...

MAL-2025-20847 Malicious code in foxtrot-0kn-project (npm)

The package foxtrot-0kn-project was found to contain malicious code...

MAL-2025-13284 Malicious code in @zalastax/nolb-pret- (npm)

The package @zalastax/nolb-pret- was found to contain malicious code...

MAL-2025-18718 Malicious code in down-load-now-9a82i-vc3fui (npm)

The package down-load-now-9a82i-vc3fui was found to contain malicious code...

MAL-2025-11093 Malicious code in @zalastax/nolb-datew (npm)

The package @zalastax/nolb-datew was found to contain malicious code...

MAL-2025-19805 Malicious code in erwin-kue45-breki (npm)

The package erwin-kue45-breki was found to contain malicious code...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM Db2 shipped with IBM Security Guardium Key Lifecycle Manager

Summary IBM Db2 is shipped as a component of IBM Security Key Lifecycle Manager SKLM/GKLM. Information about multiple security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...

BELL-CVE-2025-53859

Bulletin has no description...

Linux Distros Unpatched Vulnerability : CVE-2021-29972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free vulnerability was found via testing, and traced to an out-of-date Cairo library. Updating the library resolved the issue, and may have remediat...

CVE-2025-43186

The issue was addressed with improved memory handling. This issue is fixed in watchOS 11.6, iOS 18.6 and iPadOS 18.6, tvOS 18.6, macOS Sequoia 15.6, macOS Sonoma 14.7.7, visionOS 2.6, macOS Ventura 13.7.7. Parsing a file may lead to an unexpected app termination...

BELL-CVE-2025-38413

Bulletin has no description...

BELL-CVE-2025-38423

Bulletin has no description...

BELL-CVE-2025-38402

Bulletin has no description...

BELL-CVE-2025-38374

Bulletin has no description...

BELL-CVE-2025-38355

Bulletin has no description...

UBUNTU-CVE-2025-48965

Mbed TLS before 3.6.4 has a NULL pointer dereference because mbedtlsasn1storenameddata can trigger conflicting data with val.p of NULL but val.len greater than zero...

BELL-CVE-2025-38317

Bulletin has no description...

ALPINE-CVE-2025-49600

In MbedTLS 3.3.0 before 3.6.4, mbedtlslmsverify may accept invalid signatures if hash computation fails and internal errors go unchecked, enabling LMS Leighton-Micali Signature forgery in a fault scenario. Specifically, unchecked return values in mbedtlslmsverify allow an attacker who can induce ...