MAL-2025-2829 Malicious code in @uniqa/user-preferences-ms-spec-api (npm)

--- -= Per source details. Do not edit below this line.=-...

BIT-DISCOURSE-2025-24972 Discourse may bypass user preference when adding users to chat groups

Discourse is an open-source discussion platform. Prior to versions 3.3.4 on the stable branch and 3.4.0.beta5 on the beta branch, in specific circumstances, users could be added to group direct messages despite disabling direct messaging in their preferences. Versions 3.3.4 and 3.4.0.beta5 contai...

CVE-2025-24972

Discourse is an open-source discussion platform. Prior to versions 3.3.4 on the stable branch and 3.4.0.beta5 on the beta branch, in specific circumstances, users could be added to group direct messages despite disabling direct messaging in their preferences. Versions 3.3.4 and 3.4.0.beta5 contai...

CVE-2025-24972 Discourse may bypass user preference when adding users to chat groups

Discourse is an open-source discussion platform. Prior to versions 3.3.4 on the stable branch and 3.4.0.beta5 on the beta branch, in specific circumstances, users could be added to group direct messages despite disabling direct messaging in their preferences. Versions 3.3.4 and 3.4.0.beta5 contai...

CVE-2025-24972

Discourse (open-source platform) has a vulnerability CVE-2025-24972 affecting group direct messages. In affected releases (before 3.3.4 on the stable branch and before 3.4.0.beta5 on the beta branch), a user could be added to a group DM even if direct messaging was disabled in their preferences. ...

CVE-2025-24972 Discourse may bypass user preference when adding users to chat groups

Discourse is an open-source discussion platform. Prior to versions 3.3.4 on the stable branch and 3.4.0.beta5 on the beta branch, in specific circumstances, users could be added to group direct messages despite disabling direct messaging in their preferences. Versions 3.3.4 and 3.4.0.beta5 contai...

PT-2025-12367

Name of the Vulnerable Software and Affected Versions Redlib versions prior to 0.36.0 Description A denial-of-service condition can be triggered by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restore preferences form, leading to excessive memory consumption a...

Oracle Linux 9 : thunderbird (ELSA-2025-2899)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-2899 advisory. 128.8.0-2.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.8.0 - Add OpenELA debranding 128.8.0-2 - Update to 128.8.0 build5 128.8.0...

thunderbird security update

128.8.0-2.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.8.0 - Add OpenELA debranding 128.8.0-2 - Update to 128.8.0 build5 128.8.0-1 - Update to 128.8.0 build1...

thunderbird security update

128.8.0-2.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.8.0 - Add OpenELA debranding 128.8.0-2 - Update to 128.8.0 build5 128.8.0-1 - Update to 128.8.0 build1...

Oracle Linux 8 : firefox (ELSA-2025-2452)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-2452 advisory. 128.8.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.8.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...

Oracle Linux 9 : firefox (ELSA-2025-2359)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-2359 advisory. 128.8.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red...

firefox security update

128.8.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.8.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.8.0-1 - Update to 128.8.0 build1...

Exploit for CVE-2025-25381

CVE-2025-25381: Plaintext Storage of Sensitive Information in...

firefox security update

128.8.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file 128.8.0 - Add debranding patches Mustafa Gezen - Add OpenELA default preferences Louis Abel 128.8.0-1 - Update to 128.8.0 build1...

Linux Distros Unpatched Vulnerability : CVE-2017-1000097

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not...

CVE-2025-27139 Combodo iTop vulnerable to stored self Cross-site Scripting in preferences

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cross-site scripting when the preferences page is opened. Versions 2.7.12, 3.1.2, and 3.2.0 fix the issue...

CVE-2025-27139 Combodo iTop vulnerable to stored self Cross-site Scripting in preferences

Combodo iTop is a web based IT service management tool. Versions prior to 2.7.12, 3.1.2, and 3.2.0 are vulnerable to cross-site scripting when the preferences page is opened. Versions 2.7.12, 3.1.2, and 3.2.0 fix the issue...

Oracle Linux 8 : firefox (ELSA-2025-1283)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-1283 advisory. 128.7.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079789 128.7.0 - Add debranding patches Mustafa Gezen - Add OpenELA default...

The vulnerability in the fs/afs/addr_prefs.c module of Linux operating systems allows a hacker to cause a service failure.

The vulnerability in the fs/afs/addrprefs.c module of Linux operating systems is related to incorrect resource locking. Exploiting this vulnerability can allow an attacker to cause a service failure...