org.neo4j.app:neo4j-server (2.1.0-m02), org.neo4j.app:neo4j-server-advanced (2.1.0-m02) +4 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (2.1.0-m02)

org.neo4j:neo4j MAVEN version 2.1.0-m02 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.app:neo4j-server 2.1.0-m02 - org.neo4j.app:neo4j-server-advanced 2.1.0-m02 - org.neo4j.app:neo4j-server-enterprise...

com.smb-tec.neo4j:neo4j-community (2.1.0-m01), org.neo4j.app:neo4j-server (2.1.0-m01) +5 more potentially affected by CVE-2026-1337 via org.neo4j:neo4j (2.1.0-m01)

org.neo4j:neo4j MAVEN version 2.1.0-m01 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - com.smb-tec.neo4j:neo4j-community 2.1.0-m01 - org.neo4j.app:neo4j-server 2.1.0-m01 - org.neo4j.app:neo4j-server-advanced...

CVE-2026-1293: Improper Neutralization of Input During Web Page Generation

The Yoast SEO – Advanced SEO with real-time guidance and built-in AI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the yoast-schema block attribute in all versions up to, and including, 26.8 due to insufficient input sanitization and output escaping. This makes it...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the ghesdoproc function in the drivers/acpi/apei/ghes.c module of the ACPI driver an extended configuration and power management interface in the Linux kernel is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to...

Malicious code in chai-as-advanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0acc3e9150ffbd93c9187a1ce93c58d03d138fa530829012be29aefc6ba148db The package chai-as-advanced was found to contain malicious code. Source: ghsa-malware 83db7b7b5304fb643d201e46d499c0b6c8e87a25bc93609bb4c704cd9aa8b2...

MAL-2026-764 Malicious code in chai-as-advanced (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0acc3e9150ffbd93c9187a1ce93c58d03d138fa530829012be29aefc6ba148db The package chai-as-advanced was found to contain malicious code. Source: ghsa-malware 83db7b7b5304fb643d201e46d499c0b6c8e87a25bc93609bb4c704cd9aa8b2...

Malicious Package

Overview chai-as-advanced is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

WordPress Advanced WC Analytics plugin <= 3.19.0 - Settings Change vulnerability

Settings Change vulnerability discovered by Legion Hunter in WordPress Plugin Advanced WC Analytics versions = 3.19.0...

Linux IOMMU Heap Buffer Overflow DoS

The vulnerability of the amdiommureportpagefault function in the drivers/iommu/amd/iommu.c module of the Linux IOMMU driver is related to the swapping of pointers. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protecte...

F5 Networks BIG-IP : BIG-IP Advanced WAF and ASM vulnerability (K000158072)

The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3. It is, therefore, affected by a vulnerability as referenced in the K000158072 advisory. When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with condition...

CVE-2026-24992

Insertion of Sensitive Information Into Sent Data vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting webd-woocommerce-advanced-reporting-statistics allows Retrieve Embedded Sensitive Data.This issue affects Advanced WooCommerce Product Sales Reporting: from n/a through = 4.1....

CVE-2026-23089 ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix use-after-free in sndusbmixerfree When sndusbcreatemixer fails, sndusbmixerfree frees mixer-idelems but the controls already added to the card still reference the freed memory. Later when sndcardregister runs...

CVE-2026-23065

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fix memory leak in wbrfrecord The tmp buffer is allocated using kcalloc but is not freed if acpievaluatedsm fails. This causes a memory leak in the error path. Fix this by explicitly freeing the tmp buffer in th...

CVE-2026-22548 BIG-IP Advanced WAF and ASM vulnerability

When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

EUVD-2026-5490

When a BIG-IP Advanced WAF or ASM security policy is configured on a virtual server, undisclosed requests along with conditions beyond the attacker's control can cause the bd process to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

K000159076: Quarterly Security Notification (February 2026)

Security Advisory Description On February 4, 2026, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities and security exposures to help determine the impact to your F5 devices. You can find the details of each issue in the associate...

com.tinkerpop.blueprints:blueprints-neo4j-graph (2.3.0), org.neo4j.app:neo4j-server (1.9.m05) +6 more potentially affected by CVE-2026-1622 via org.neo4j:neo4j (1.9.m05)

org.neo4j:neo4j MAVEN version 1.9.m05 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - com.tinkerpop.blueprints:blueprints-neo4j-graph 2.3.0 - org.neo4j.app:neo4j-server 1.9.m05 - org.neo4j.app:neo4j-server-advance...

org.neo4j.app:neo4j-server (1.9.8), org.neo4j.app:neo4j-server-advanced (1.9.8) +4 more potentially affected by CVE-2026-1622 via org.neo4j:neo4j (1.9.8)

org.neo4j:neo4j MAVEN version 1.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.app:neo4j-server 1.9.8 - org.neo4j.app:neo4j-server-advanced 1.9.8 - org.neo4j.app:neo4j-server-enterprise 1.9.8 -...

org.neo4j.app:neo4j-server (1.9.9), org.neo4j.app:neo4j-server-advanced (1.9.9) +4 more potentially affected by CVE-2026-1622 via org.neo4j:neo4j (1.9.9)

org.neo4j:neo4j MAVEN version 1.9.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.app:neo4j-server 1.9.9 - org.neo4j.app:neo4j-server-advanced 1.9.9 - org.neo4j.app:neo4j-server-enterprise 1.9.9 -...

org.neo4j.app:neo4j-server (2.0.0-m01), org.neo4j.app:neo4j-server-advanced (2.0.0-m01) +3 more potentially affected by CVE-2026-1622 via org.neo4j:neo4j (2.0.0-m01)

org.neo4j:neo4j MAVEN version 2.0.0-m01 is affected by a known vulnerability. The following packages have a transitive dependency on org.neo4j:neo4j and may be impacted: - org.neo4j.app:neo4j-server 2.0.0-m01 - org.neo4j.app:neo4j-server-advanced 2.0.0-m01 - org.neo4j.app:neo4j-server-enterprise...