Oracle Linux 8 : idm:DL1 (ELSA-2025-21140)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-21140 advisory. - Use DNS discovery for declared realms only CVE-2025-59088 Resolves: RHEL-113657 Tenable has extracted the preceding description block directly from...

idm:DL1 security update

bind-dyndb-ldap 11.6-6 - Fix rpminspect warnings Resolves: RHEL-22497 custodia ipa 4.9.13-20.0.1 - Set IPAPLATFORM=rhel when build on Oracle Linux Orabug: 29516674 ipa-healthcheck opendnssec 2.1.7-2 - Don't creat /var/run/opendnssec directory - Resolves: RHEL-12163 python-jwcrypto python-kdcproxy...

Siemens SIMATIC S7-1500 Exposure of Sensitive Information to an Unauthorized Actor (CVE-2020-8284)

A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract information about services that are otherwise private and not disclosed, for example doing port scanning and service...

Drupal core 8.0.0-10.4.8,10.5.0-10.5.5,11.0.0-11.1.8,11.2.0-11.2.7 - Authenticated Other Vulnerability Type vulnerability

Authenticated Other Vulnerability Type vulnerability discovered by anzuukino in WordPress Core Drupal versions 8.0.0-10.4.8,10.5.0-10.5.5,11.0.0-11.1.8,11.2.0-11.2.7...

EUVD-2025-98818

Malicious code in fitri-miebogor65-riris npm...

EUVD-2025-74273

Malicious code in secondarychickadeeamaranth-93 npm...

EUVD-2025-63293

Malicious code in linearocelotz3n npm...

WordPress Skip to Timestamp plugin <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Skip to Timestamp versions = 1.4.4...

EUVD-2025-48413

Malicious code in cici-sate37-sukiwir npm...

WordPress Seriously Simple Podcasting plugin <= 3.13.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by daroo in WordPress Plugin Seriously Simple Podcasting versions = 3.13.0...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: falco-no-driver, podman, grafana-alloy, nvidia-container-toolkit, kubernetes, sriov-network-device-plugin, buildah, node-feature-discovery, k3s...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: falco-no-driver, podman, grafana-alloy, nvidia-container-toolkit, kubernetes, sriov-network-device-plugin, buildah, node-feature-discovery, k3s...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: falco-no-driver, podman, grafana-alloy, nvidia-container-toolkit, kubernetes, sriov-network-device-plugin, buildah, node-feature-discovery, k3s...

CVE-2025-52565 vulnerabilities

Vulnerabilities for packages: falco-no-driver, podman, grafana-alloy, nvidia-container-toolkit, kubernetes, sriov-network-device-plugin, buildah, node-feature-discovery, k3s...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: neuvector-scanner, xeol, trivy, ctop, newrelic-infrastructure-agent, skaffold, osv-scanner, trivy-operator, grafana-alloy, docker, sriov-network-device-plugin, wolfictl, k9s, syft, kubescape, skopeo, zot, k3s, zarf, k8s-device-plugin, falco-no-driver,...

GHSA-CGRX-MC8F-2PRM vulnerabilities

Vulnerabilities for packages: volcano-fips, skaffold, podman, grafana-alloy, virt-handler-fips, nerdctl, prometheus-podman-exporter-fips, blob-csi-fips, sriov-network-device-plugin, checksec, osv-scanner, neuvector-scanner, eks-distro-fips, kaniko-fips, containerd, prometheus-node-exporter-fips,...

CVE-2025-31133 vulnerabilities

Vulnerabilities for packages: podman, cluster-autoscaler-fips, grafana-alloy, virt-handler-fips, buildah, node-feature-discovery, sriov-network-device-plugin, k3s, virt-launcher, kubernetes-fips, rke2-runtime, prometheus-podman-exporter, kubernetes, rancher, virt-handler, eks-distro-fips,...

GHSA-9493-H29P-RFM2 vulnerabilities

Vulnerabilities for packages: podman, cluster-autoscaler-fips, grafana-alloy, virt-handler-fips, buildah, node-feature-discovery, sriov-network-device-plugin, k3s, virt-launcher, kubernetes-fips, rke2-runtime, prometheus-podman-exporter, kubernetes, rancher, virt-handler, eks-distro-fips,...

GHSA-QW9X-CQR3-WC7R vulnerabilities

Vulnerabilities for packages: podman, cluster-autoscaler-fips, grafana-alloy, buildah, node-feature-discovery, sriov-network-device-plugin, k3s, kubernetes-fips, rke2-runtime, prometheus-podman-exporter, kubernetes, rancher, eks-distro-fips, grafana-alloy-fips, rancher-agent, eks-distro,...

CVE-2025-52881 vulnerabilities

Vulnerabilities for packages: volcano-fips, skaffold, podman, grafana-alloy, virt-handler-fips, nerdctl, prometheus-podman-exporter-fips, blob-csi-fips, sriov-network-device-plugin, checksec, osv-scanner, neuvector-scanner, eks-distro-fips, kaniko-fips, containerd, prometheus-node-exporter-fips,...