CVE-2025-48538

In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitatio...

Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.

...

CLSA-2025-1756961235 nss: Fix of CVE-2023-5388

CVE-2023-5388: fix timing attack against RSA decryption in TLS r=jschanck...

An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.

...

CVE-2023-21476

Out-of-bounds Write vulnerability in libaudiosaplussec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code...

CLSA-2025-1756760036 gnutls: Fix of CVE-2025-32988

CVE-2025-32988: fix double-free vulnerability when exporting othernames in SAN...

thunderbird security update

128.14.0-3.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.14.0 - Add OpenELA debranding 128.14.0-3 - Update to 128.14.0 build2 128.14.0-2 - Add missing translations 128.14.0-1 - Update to 128.14.0 build1...

Oracle Linux 9 : thunderbird (ELSA-2025-14640)

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-14640 advisory. 128.14.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.14.0 - Add OpenELA debranding 128.14.0-3 - Update to 128.14.0 build2...

Linux Distros Unpatched Vulnerability : CVE-2024-45159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables optional authentication of the client, if the client-provided...

MAL-2025-22320 Malicious code in hearforme (npm)

The package hearforme was found to contain malicious code...

MAL-2025-24754 Malicious code in konflikto (npm)

The package konflikto was found to contain malicious code...

MAL-2025-22943 Malicious code in iconuk (npm)

The package iconuk was found to contain malicious code...

MAL-2025-17842 Malicious code in customersupportserv-paypal (npm)

The package customersupportserv-paypal was found to contain malicious code...

MAL-2025-17258 Malicious code in codeval (npm)

The package codeval was found to contain malicious code...

MAL-2025-15229 Malicious code in aws-secure-zipper (npm)

The package aws-secure-zipper was found to contain malicious code...

MAL-2025-26123 Malicious code in mean_setup (npm)

The package meansetup was found to contain malicious code...

MAL-2025-15202 Malicious code in avior-antares-update-bunyan (npm)

The package avior-antares-update-bunyan was found to contain malicious code...

MAL-2025-26835 Malicious code in ms-validationservice (npm)

The package ms-validationservice was found to contain malicious code...

MAL-2025-16887 Malicious code in checksum-validator (npm)

The package checksum-validator was found to contain malicious code...

MAL-2025-18149 Malicious code in decentage-ico-contracts (npm)

The package decentage-ico-contracts was found to contain malicious code...