Moderate: kernel-rt security update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: RDMA/iwcm: Fix use-after-free of work objects after cmid destruction CVE-2025-38211 kernel: tipc: Fix use-after-free in...

WordPress plugin CM Map Locations 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2021-46966

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ACPI: custommethod: fix potential use-after-free issue In cmwrite, buf is always freed when...

Malicious code in cm-api (npm)

The package cm-api was found to contain malicious code...

Malicious code in cm-graphjs (npm)

The package cm-graphjs was found to contain malicious code...

MAL-2025-12655 Malicious code in @zalastax/nolb-node-red-cm (npm)

The package @zalastax/nolb-node-red-cm was found to contain malicious code...

MAL-2025-17211 Malicious code in cm-graphjs (npm)

The package cm-graphjs was found to contain malicious code...

MAL-2025-17209 Malicious code in cm-algorithmjs (npm)

The package cm-algorithmjs was found to contain malicious code...

MAL-2025-17210 Malicious code in cm-api (npm)

The package cm-api was found to contain malicious code...

MAL-2025-17212 Malicious code in cm-materialjs (npm)

The package cm-materialjs was found to contain malicious code...

Malicious code in cm-algorithmjs (npm)

The package cm-algorithmjs was found to contain malicious code...

MAL-2025-17213 Malicious code in cm-npm (npm)

The package cm-npm was found to contain malicious code...

Malicious code in cm-npm (npm)

The package cm-npm was found to contain malicious code...

Malicious code in @zalastax/nolb-node-red-cm (npm)

The package @zalastax/nolb-node-red-cm was found to contain malicious code...

Malicious code in cm-materialjs (npm)

The package cm-materialjs was found to contain malicious code...

MAL-2025-12610 Malicious code in @zalastax/nolb-node-cm (npm)

The package @zalastax/nolb-node-cm was found to contain malicious code...

CVE-2025-54727 WordPress CM On Demand Search And Replace Plugin <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CreativeMindsSolutions CM On Demand Search And Replace allows Stored XSS. This issue affects CM On Demand Search And Replace: from n/a through 1.5.2...

WordPress plugin CM On Demand Search And Replace 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

Security Bulletin: A vulnerability has been identified in IBM WebSphere Application Server used by IBM Rational ClearQuest (CVE-2025-36097)

Summary IBM WebSphere Application Server is used by the IBM Rational ClearQuest server. Information about security vulnerabilities affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...

Linux Distros Unpatched Vulnerability : CVE-2025-38211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/iwcm: Fix use-after-free of work objects after cmid destruction The commit 59c68ac31e15 iwcm: free cmid resources on the last deref simplified cmid resourc...