CVE-2026-105079

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows Stored XSS.This issue affects MasterStudy LMS: from n/a through 3.7.52...

EUVD-2026-94952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in StylemixThemes MasterStudy LMS masterstudy-lms-learning-management-system allows Stored XSS.This issue affects MasterStudy LMS: from n/a through 3.7.52...

USN-8905-1 linux-gcp-6.8, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8905-1: Linux kernel (GCP) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8904-1 linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8904-1: Linux kernel (Azure) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8903-1 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips, linux-realtime, linux-realtime-6.8 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8903-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

CVE-2026-92555

Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26.02.25 before 26.02.26...

WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Arbitrary Wallet Balance Theft vulnerability

Subscriber+ Arbitrary Wallet Balance Theft vulnerability discovered by Stefan Spasic in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...

WordPress Wallet System for WooCommerce plugin < 2.8.0 - Subscriber+ Forged Wallet Withdrawal Request vulnerability

Subscriber+ Forged Wallet Withdrawal Request vulnerability discovered by Mytears in WordPress Plugin Wallet System for WooCommerce versions 2.8.0...

CVE-2026-98176

A flaw was found in the Linux kernel's AMD GPU driver amdkfd. An integer underflow vulnerability during the calculation of the End of Pipe EOP ring buffer size can lead to improper hardware queue configuration. A local user could potentially exploit this issue to cause system instability, resulti...

EUVD-2026-94868

Insertion of sensitive information into sent data vulnerability in AKIN Software Computer Import-Export Industry and Trade Co. Ltd. AKINSOFT WOLVOX Control Panel allows Pull Data from System Resources. This issue affects AKINSOFT WOLVOX Control Panel: from 26.02.25 before 26.02.26...

CVE-2026-92555

The AKINSOFT WOLVOX Control Panel by AKIN Software Computer Import-Export Industry and Trade Co. Ltd. is vulnerable to an insertion of sensitive information into sent data (CWE-201). This flaw allows an attacker to pull data from system resources , potentially including database credentials . The...

CVE-2026-93509

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

CVE-2026-93509

The Wallet System for WooCommerce WordPress plugin (versions 2.0.0 - 2.7.10 ) is vulnerable to a wallet balance manipulation flaw. The root cause is a failure to validate that transfer amounts are positive, combined with the system computing the sender's new balance from a stale snapshot taken be...

EUVD-2026-94830

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

CVE-2026-93509 Wallet System for WooCommerce 2.0.0 - 2.7.10 - Subscriber+ Wallet Balance Manipulation via Negative Transfer Amount

The Wallet System for WooCommerce WordPress plugin before 2.8.0 does not validate that a wallet transfer amount is positive, and computes the sender's new balance from a stale snapshot taken before crediting the recipient, allowing an authenticated attacker with Subscriber-level access to mint...

Security update 5.2.1 for Multi-Linux Manager Client Tools

This update fixes the following issues: spacecmd was updated to version 5.2.10: Version 5.2.10: Pre-filter errata in systemapplyerrata to avoid using API calls for all existing errata bsc1267261 Version 5.2.9: Updated translation strings uyuni-tools was updated to version 5.2.17: Security issues...

CVE-2026-85423

A vulnerability has been identified in the data collection service of Brocade ASCG versions before 3.5.0. An API endpoint within the data collector service fails to perform authentication or authorization checks on incoming requests. An attacker with network access to the service can instruct the...