container-tools:rhel8 security update

An update is available for module.python-podman, cockpit-podman, module.containernetworking-plugins, module.skopeo, aardvark-dns, module.oci-seccomp-bpf-hook, module.conmon, module.cockpit-podman, oci-seccomp-bpf-hook, slirp4netns, libslirp, python-podman, criu, conmon, module.slirp4netns,...

CVE-2025-37772

In the Linux kernel, the following vulnerability has been resolved: RDMA/cma: Fix workqueue crash in cmaneteventworkhandler struct rdmacmid has member "struct workstruct network" that is reused for enqueuing cmaneteventworkhandlers onto cmawq. Below crash1 can occur if more than one call to...

CVE-2025-1304

creationtimestamp| type| source ---|---|--- 2025-05-01 05:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114431001193499369 2025-05-01 05:56:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo3mskmmtd2p 2025-05-01 07:01:28+00:00| seen|...

CVE-2025-46613

OpenPLC 3 through 64f9c11 has server.cpp Memory Corruption because a thread may access handleConnections arguments after the parent stack frame becomes unavailable...

GHSA-F46R-RW29-R322

creationtimestamp| type| source ---|---|--- 2025-04-25 01:10:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13367 2025-04-25 03:30:33+00:00| published-proof-of-concept| Telegram/oGnFJdmXUCqYx0xYR0D8dpnhpl9VxD3P3IPRWVfgfpPSsY...

Ubuntu: Security Advisory (USN-7463-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-45643

creationtimestamp| type| source ---|---|--- 2025-04-24 14:05:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13236...

Ubuntu: Security Advisory (USN-7450-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-36018

creationtimestamp| type| source ---|---|--- 2025-04-23 17:04:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13073...

CVE-2025-22093

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid NPD when ASIC does not support DMUB ctx-dmubsrv will de NULL if the ASIC does not support DMUB, which is tested in dmdmubswinit. However, it will be dereferenced in dmubhwlockmgrcmd if shouldusedmublock...

CVE-2025-22128

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Clear affinity hint before calling ath12kpcifreeirq in error path If a shared IRQ is used by the driver due to platform limitation, then the IRQ affinity hint is set right after the allocation of IRQ vectors in...

Following the News: MITRE’s Common Vulnerabilities and Exposures (CVE) Funding

The current situation On April 16, CISA extended funding to ensure no continuity issues with the critical Common Vulnerabilities and Exposures CVE program. This was in response to a letter sent by MITRE on April 15 to CVE board members warning of a potential issue with MITRE's support for the CVE...

CVE-2025-39563

Cross-Site Request Forgery CSRF vulnerability in WP Trio Conditional Payments for WooCommerce conditional-payments-for-woocommerce allows Cross Site Request Forgery.This issue affects Conditional Payments for WooCommerce: from n/a through = 3.3.0...

CVE-2025-30740

CVE-2025-30740 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime SEC) for JD Edwards EnterpriseOne Tools versions 9.2.0.0–9.2.9.2. The vulnerability allows a low-privilege attacker with network access over HTTP to compromise the Tools and potentially access unauthorized data. CVSS v3.1 b...

CVE-2025-30692

CVE-2025-30692 corresponds to a vulnerability in Oracle E-Business Suite's iSupplier Portal (Attachments component) affecting 12.2.7–12.2.14. Public sources describe an easily exploitable issue where a low-privileged attacker with network access via HTTP can compromise the iSupplier Portal and po...

CVE-2025-30686

...

CVE-2025-21580

CVE-2025-21580 affects Oracle MySQL Server, component Server: DML. Affected versions include 8.0.0–8.0.41, 8.4.0–8.4.4, and 9.0.0–9.2.0. An attacker with network access via multiple protocols and high privileges can cause a hang or a frequently repeatable crash (complete DoS) of MySQL Server. The...

CVE-2025-21573

...

CVE-2025-21573

Oracle Financial Services Revenue Management and Billing (Chatbot component) is affected in versions 5.1.0.0.0, 6.1.0.0.0, and 7.0.0.0.0. The issue is a network-accessible vulnerability in the Chatbot that requires user interaction and could lead to unauthorized data creation/modification, or par...

Microsoft Windows Multiple Vulnerabilities (KB5055518)

This host is missing an important security update according to Microsoft KB5055518 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...