WordPress Graphina plugin <= 3.0.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Anhchangmutrang in WordPress Plugin Graphina versions = 3.0.4...

Security Bulletin: IBM Sterling Partner Engagement Manager has several issues with secrets management (CVE-2025-33093)

Summary IBM Sterling Partner Engagement Manager's JWT secret is stored in public Helm Charts and is not stored as a Kubernetes secret. This issue has been addressed in the latest Helm Chart. Vulnerability Details CVEID:CVE-2025-33093 DESCRIPTION: IBM Sterling Partner Engagement Manager's JWT secr...

RockyLinux 9 : grub2 (RLSA-2025:2867)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:2867 advisory. grub2: net: Out-of-bounds write in grubnetsearchconfigfile CVE-2025-0624 Tenable has extracted the preceding description block directly from the RockyLinux securi...

RockyLinux 9 : zziplib (RLSA-2024:2377)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2024:2377 advisory. zziplib: invalid memory access at zzipdiskentrytofileheader in mmapped.c CVE-2020-18770 Tenable has extracted the preceding description block directly from the...

CVE-2025-4388

A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated...

BELL-CVE-2023-53086

Bulletin has no description...

BELL-CVE-2023-53131

Bulletin has no description...

BELL-CVE-2023-53053

Bulletin has no description...

EulerOS 2.0 SP12 : gnutls (EulerOS-SA-2025-1420)

According to the versions of the gnutls packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing. Due to an inefficient algorithm in libtasn1, decoding certain...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57911)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57911 advisory. - In the Linux kernel, the following vulnerability has been resolved: iio: dummy: iiosimplydummybuffer: fix...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21687)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21687 advisory. - In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21764)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21764 advisory. - In the Linux kernel, the following vulnerability has been resolved: ndisc: use RCU protection in ndiscallocs...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-21904)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21904 advisory. - In the Linux kernel, the following vulnerability has been resolved: caifvirtio: fix wrong pointer check in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21631)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21631 advisory. - In the Linux kernel, the following vulnerability has been resolved: block, bfq: fix wakerbfqq UAF after...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-58076)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58076 advisory. - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: gcc-sm6350: Add missing...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21694)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21694 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/proc: fix softlockup in readvmcore pa...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21760)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21760 advisory. - In the Linux kernel, the following vulnerability has been resolved: ndisc: extend RCU protection in...

Azure Linux 3.0 Security Update: kernel (CVE-2025-21637)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21637 advisory. - In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: udpport: avoid using...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57951)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57951 advisory. - In the Linux kernel, the following vulnerability has been resolved: hrtimers: Handle CPU state correctly on...

CBL Mariner 2.0 Security Update: kernel (CVE-2025-23136)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-23136 advisory. - In the Linux kernel, the following vulnerability has been resolved: thermal: int340x: Add NULL check for ade...