CVE-2026-22994

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpfprogtestrunxdp syzbot is reporting unregisternetdevice: waiting for sit0 to become free. Usage count = 2 problem. A debug printk patch found that a refcount is obtained at xdpconvertmdtobuff fr...

CVE-2026-22994 bpf: Fix reference count leak in bpf_prog_test_run_xdp()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix reference count leak in bpfprogtestrunxdp syzbot is reporting unregisternetdevice: waiting for sit0 to become free. Usage count = 2 problem. A debug printk patch found that a refcount is obtained at xdpconvertmdtobuff fr...

EUVD-2026-4532

Malicious code in @transaction-list/transaction-list-md npm...

MAL-2026-474 Malicious code in @transaction-list/transaction-list-md (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3b5e5850b5f3f231ca816e6f9c5ae2f7dac1b33092f12407be92abe5f1e26d4a The package @transaction-list/transaction-list-md was found to contain malicious code...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004832)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004832 advisory. In the Linux kernel, the following vulnerability has been resolved: drivers/md/md-bitmap: check the return value of mdbitmapgetcounter Check the return value of...

OSV-2026-109 UNKNOWN WRITE in SHA224Result

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476170131 Crash type: UNKNOWN WRITE Crash state: SHA224Result mdmapsh224...

DataEase security vulnerabilities

DataEase is an open-source data visualization and analysis tool developed by DataEase. It helps users quickly analyze data and gain insights into business trends, thereby enabling improvements and optimizations in operations. Versions of DataEase prior to 2.10.19 contained a security vulnerabilit...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35787)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35787 advisory. - In the Linux kernel, the following vulnerability has been resolved: md/md-bitmap: fix incorrect usag...

Azure Linux 3.0 Security Update: hyperv-daemons (CVE-2024-35808)

The version of hyperv-daemons installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-35808 advisory. - In the Linux kernel, the following vulnerability has been resolved: md/dm-raid: don't call...

WordPress PostX plugin <= 5.0.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by MD ISMAIL in WordPress Plugin PostX versions = 5.0.3...

ROS-20260119-7316

A vulnerability in the md/md-bitmap component of the Linux operating system kernel is related to insufficient input validation. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-23525 1panel App Store vulnerable to Cross-site Scripting

1Panel is an open-source, web-based control panel for Linux server management. A stored Cross-Site Scripting XSS vulnerability exists in the 1Panel App Store when viewing application details. Malicious scripts can execute in the context of the user’s browser, potentially compromising session data...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001397)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001397 advisory. An out-of-bounds OOB memory write flaw was found in listdevices in drivers/md/dm-ioctl.c in the Multi- device driver module in the Linux kernel before 5.12. A bound...

MiracleLinux 3 : kernel-2.6.18-128.12AXS3 (AXSA:2009-411:13)

The remote MiracleLinux 3 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2009-411:13 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating system:...

MiracleLinux 7 : kernel-3.10.0-1160.119.1.0.8.el7.AXS7 (AXSA:2025-9625:10)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-9625:10 advisory. media: edia: dvbdev: fix a use-after-free CVE-2024-27043 btrfs: dev-replace: properly validate device names CVE-2024-26791 KVM: nSVM: Ignore nCR34:0...

CVE-2025-67279

An issue in TIM Solution GmbH TIM BPM Suite & TIM FLOW before v.9.1.2 allows a remote attacker to escalate privileges via the application stores password hashes in MD5 format...

WordPress Blockons plugin <= 1.2.15 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by MD ISMAIL in WordPress Plugin Blockons versions = 1.2.15...

RHSA-2026:0094 Red Hat Security Advisory: mod_md security update

Bulletin has no description...

RHEL 9 : mod_md (RHSA-2026:0092)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:0092 advisory. This module manages common properties of domains for one or more virtual hosts. Specifically it can use the ACME protocol to automate certificate...

WordPress Cookies and Content Security Policy plugin <= 2.34 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by MD ISMAIL in WordPress Plugin Cookies and Content Security Policy versions = 2.34...