lwIP: undisclosed vulnerability (ZAI-2026-TYF3SA)

Not disclosed. Details are not yet publicly disclosed...

Malicious code in @vietmoney/react-native-tags-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4eaba1a91c6cb85d46db01b9c4e96157cdeb905c8c7d1b0d6b3dbd507a58f402 The package @vietmoney/react-native-tags-input was found to contain malicious code. Source: ghsa-malware...

Malicious code in @vietmoney/react-big-calendar (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38aebebed4a38e2464d8abb76fbda4a16d4cf03b372124ec3d069c63f6e79f2 The package @vietmoney/react-big-calendar was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192998 Malicious code in @vietmoney/react-native-smart-gallery (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdecb4163903c7cab6a325ea865641719253be69a34f76a172a717792a8b53bb The package @vietmoney/react-native-smart-gallery was found to contain malicious code. Source: ghsa-malware...

Linux Distros Unpatched Vulnerability : CVE-2022-50886

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mmc: toshsd: fix return value check of mmcaddhost mmcaddhost may return error, if we ignore its return value, the memory that allocated in mmcallochost will be...

Linux Distros Unpatched Vulnerability : CVE-2023-54274

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/srpt: Add a check for valid 'madagent' pointer When unregistering MAD agent, srpt module has a non- null check for 'madagent' pointer before invoking...

Linux Distros Unpatched Vulnerability : CVE-2022-50842

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO. Add check for that to prevent NULL dereference if userspace...

Linux Distros Unpatched Vulnerability : CVE-2025-15278

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FontForge GUtils XBM File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...

Linux Distros Unpatched Vulnerability : CVE-2023-54189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pstore/ram: Add check for kstrdup Add check for the return value of kstrdup and return the error if it fails in order to avoid NULL pointer dereference...

Linux Distros Unpatched Vulnerability : CVE-2023-54316

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - refscale: Fix uninitalized use of waitqueueheadt Running the refscale test occasionally crashes the kernel with the following error: 8569.952896 BUG: unable to...

Linux Distros Unpatched Vulnerability : CVE-2022-50853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSv4: Fix a credential leak in nfs4discovertrunking CVE-2022-50853 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2025-68950

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, Magick fails to check for circular references between two MVGs, leading to a stack overflow. This is a DoS vulnerability, and any situation that allows reading the mvg file wi...

CVE-2025-68618

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, using Magick to read a malicious SVG file resulted in a DoS attack. Version 7.1.2-12 fixes the issue...

MAL-2025-192973 Malicious code in react-dom-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e3c021e2818d17945e50bcb89d19d34a8750ca14078220d113dc8b4c5f0c1392 The package react-dom-bindings was found to contain malicious code. Source: ghsa-malware...

MAL-2025-192968 Malicious code in express-js-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e922c32d1b163c8938985f7665f539243b9be99316491150e61476d30cf0ce68 The package express-js-web was found to contain malicious code. Source: ghsa-malware 50f874487616a31800182c5b87aec47559f7136d5ed3a84355446b795a3137d7...

CVE-2023-54285

In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomapwritedelallocscan folionextindex returns an unsigned long value which left shifted by PAGESHIFT could possibly cause an overflow on 32-bit system. Instead use folioposfolio +...

CVE-2023-54237

In the Linux kernel, the following vulnerability has been resolved: net/smc: fix potential panic dues to unprotected smcllcsrvaddlink There is a certain chance to trigger the following panic: PID: 5900 TASK: ffff88c1c8af4100 CPU: 1 COMMAND: "kworker/1:48" 0 ffff9456c1cc79a0 machinekexec at...

CVE-2022-50842

In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Check whether transferred 2D BO is shmem Transferred 2D BO always must be a shmem BO. Add check for that to prevent NULL dereference if userspace passes a VRAM BO...

CVE-2023-54175

In the Linux kernel, the following vulnerability has been resolved: i2c: xiic: xiicxfer: Fix runtime PM leak on error path The xiicxfer function gets a runtime PM reference when the function is entered. This reference is released when the function is exited. There is currently one error path wher...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS Advisories. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-364-01: WHILL C2 Wheelchairs ICSA-25-345-03: AzeoTech DAQFactory Update A CISA encourages users and...