515 matches found
EUVD-2021-2752
Malicious code in bioql PyPI...
GSS-NTLMSSP Plugin DoS
The vulnerability of the GSS-NTLMSSP plugin of the GSSAPI library is related to the lack of memory release after the effective lifespan. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
GSS-NTLMSSP Plugin DoS
The vulnerability of the GSS-NTLMSSP plugin of the GSSAPI library is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures...
CVE-2025-9231
The OpenSSL cryptographic library contains a timing side-channel vulnerability in its SM2 algorithm implementation on 64-bit ARM platforms . This flaw could potentially allow an attacker to perform remote recovery of the private key by measuring timing signals during signature computations. While...
CVE-2025-48538
In setApplicationHiddenSettingAsUser of PackageManagerService.java, there is a possible way to hide a system critical package due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitatio...
Mbed TLS before 2.28.10 and 3.x before 3.6.3, on the client side, accepts servers that have trusted certificates for arbitrary hostnames unless the TLS client application calls mbedtls_ssl_set_hostname.
...
CLSA-2025-1756961235 nss: Fix of CVE-2023-5388
CVE-2023-5388: fix timing attack against RSA decryption in TLS r=jschanck...
An issue was discovered in Arm Mbed TLS before 2.24.0. It incorrectly uses a revocationDate check when deciding whether to honor certificate revocation via a CRL. In some situations, an attacker can exploit this by changing the local clock.
...
CVE-2023-21476
Out-of-bounds Write vulnerability in libaudiosaplussec.so library prior to SMR Apr-2023 Release 1 allows local attacker to execute arbitrary code...
CLSA-2025-1756760036 gnutls: Fix of CVE-2025-32988
CVE-2025-32988: fix double-free vulnerability when exporting othernames in SAN...
Oracle Linux 9 : thunderbird (ELSA-2025-14640)
The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-14640 advisory. 128.14.0-3.0.1 - Fix prefs for new nss Orabug: 37079813 - Add Oracle prefs 128.14.0 - Add OpenELA debranding 128.14.0-3 - Update to 128.14.0 build2...
thunderbird security update
128.14.0-3.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file 128.14.0 - Add OpenELA debranding 128.14.0-3 - Update to 128.14.0 build2 128.14.0-2 - Add missing translations 128.14.0-1 - Update to 128.14.0 build1...
Linux Distros Unpatched Vulnerability : CVE-2024-45159
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Mbed TLS 3.x before 3.6.1. With TLS 1.3, when a server enables optional authentication of the client, if the client-provided...
MAL-2025-22320 Malicious code in hearforme (npm)
The package hearforme was found to contain malicious code...
MAL-2025-16887 Malicious code in checksum-validator (npm)
The package checksum-validator was found to contain malicious code...
MAL-2025-27014 Malicious code in mytelnet (npm)
The package mytelnet was found to contain malicious code...
MAL-2025-17258 Malicious code in codeval (npm)
The package codeval was found to contain malicious code...
MAL-2025-17842 Malicious code in customersupportserv-paypal (npm)
The package customersupportserv-paypal was found to contain malicious code...