Unity Linux 20.1060a / 20.1070a Security Update: tomcat (UTSA-2025-986129)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986129 advisory. Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons...

EUVD-2023-41136

Malicious code in bioql PyPI...

EUVD-2022-48316

Malicious code in bioql PyPI...

EUVD-2023-12374

Malicious code in bioql PyPI...

EUVD-2022-48315

Malicious code in bioql PyPI...

EUVD-2025-22724

Malicious code in bioql PyPI...

EUVD-2023-33764

Malicious code in bioql PyPI...

EUVD-2023-44791

Malicious code in bioql PyPI...

Malicious code in @zalastax/nolb-_m4 (npm)

The package @zalastax/nolb-m4 was found to contain malicious code...

MAL-2025-43029 Malicious code in @zalastax/nolb-_m4 (npm)

The package @zalastax/nolb-m4 was found to contain malicious code...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2025-48976)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Industry Solutions including Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities, Maximo Adapter for Primavera,...

ROOT-OS-DEBIAN-12-CVE-2008-1687 CVE-2008-1687 in rootio-m4 - Patched by Root

Root has patched CVE-2008-1687 in the rootio-m4 package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2008-1688 CVE-2008-1688 in rootio-m4 - Patched by Root

Root has patched CVE-2008-1688 in the rootio-m4 package for Root:Debian:12. Multiple fixed versions available...

Malicious code in @zalastax/nolb-m4 (npm)

The package @zalastax/nolb-m4 was found to contain malicious code...

MAL-2025-12286 Malicious code in @zalastax/nolb-m4 (npm)

The package @zalastax/nolb-m4 was found to contain malicious code...

IBM WebSphere Application Server 8.5.x < 8.5.5.29 / 9.x < 9.0.5.26 / Liberty 17.0.0.3 < 25.0.0.9 DoS (7242088)

The version of IBM WebSphere Application Server running on the remote host is affected by a DoS vulnerability as referenced in the 7242088 advisory. - Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affect...

CVE-2025-3873

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...

CVE-2025-3873 Buffer overflow in Si91x crypto APIs

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...

CVE-2025-3873

CVE-2025-3873 affects Silicon Labs SiWx91x prior to 3.4.0. The API modules sl_si91x_aes, sl_si91x_gcm, sl_si91x_ccm, and sl_si91x_sha fail to validate the caller’s output buffer size, which could cause data corruption in the host (Cortex-M4) application. Root cause: missing input validation in bu...

CVE-2025-3873 Buffer overflow in Si91x crypto APIs

The following APIs for the Silcon Labs SiWx91x prior to vesion 3.4.0 failed to check the size of the output buffer of the caller which could lead to data corruption on the host Cortex-M4 application. slsi91xaes slsi91xgcm slsi91xccm slsi91xsha...