The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain read, modify, and delete access to data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to a breach of the buffer’s initial boundary. Exploiting this vulnerability could allow an attacker operating remotely to gain read, modify, and delete acce...

The vulnerability of the XWiki platform, which relates to the failure to implement measures to neutralize instructions in dynamically executed code, allows attackers to execute arbitrary code and gain access to read and modify data.

The vulnerability of the XWiki Platform lies in the lack of measures taken to neutralize instructions in dynamically executed code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain access to read and modify data...

The vulnerability of the PIA Core Technology component of the Oracle PeopleSoft Enterprise PeopleTools business application suite allows a hacker to gain read, modify, and delete access to data.

The vulnerability of the PIA Core Technology component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to a breach of the buffer’s initial boundary. Exploiting this vulnerability could allow an attacker operating remotely to gain read, modify, and delete acce...

CVE-2025-10881

A maliciously crafted CATPRODUCT file, when parsed through certain Autodesk products, can force a Heap-Based Overflow vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-9460

A maliciously crafted SLDPRT file, when parsed through certain Autodesk products, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process...

CVE-2025-9453

CVE-2025-9453 is an Out-of-Bounds Read vulnerability tied to parsing a malicious PRT file in Autodesk products. The issue can cause a crash, allow reading sensitive data, or lead to arbitrary code execution within the current process. Related advisories reference Autodesk AutoCAD PRT parsing as t...

EUVD-2025-203404

An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party could retrieve them and...

CVE-2025-67809

An issue was discovered in Zimbra Collaboration ZCS 10.0 and 10.1. A hardcoded Flickr API key and secret are present in the publicly accessible Flickr Zimlet used by Zimbra Collaboration. Because these credentials are embedded directly in the Zimlet, any unauthorized party could retrieve them and...

Vulnerabilities fixed in Apple macOS

Apple has fixed vulnerabilities in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3 and macOS Tahoe 26.2. The vulnerabilities covered a wide range of issues, including memory corruption, logging problems, and unauthorized access to sensitive user data. These vulnerabilities could be exploited by malicio...

PT-2025-51326

Name of the Vulnerable Software and Affected Versions Autodesk AutoCAD affected versions not specified Description A specially designed CATPRODUCT file can trigger an Out-of-Bounds Read issue when processed by specific Autodesk products. Successful exploitation could allow an attacker to cause a...

The vulnerability of the astra-safepolicy security configuration software, related to improper code generation, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the astra-safepolicy security configuration software is related to improper code generation management. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

PT-2025-51261

Name of the Vulnerable Software and Affected Versions Frappe ERPNext versions through 15.89.0 Description A SQL injection issue exists in Frappe ERPNext. The get outstanding reference documents function within the erpnext/accounts/doctype/payment entry/payment entry.py file is susceptible to...

CVE-2025-66439

Frappe ERPNext versions through 15.89.0 are vulnerable to an SQL Injection flaw in the get_outstanding_reference_documents() function located at erpnext.accounts.doctype.payment_entry.payment_entry.py. The root cause is the direct interpolation of the from_posting_date parameter into a database q...

The vulnerability of MySQL and MariaDB database management systems relates to the exposure of information, allowing attackers to gain access to confidential data.

The vulnerability of MySQL and MariaDB database management systems is related to the exposure of information. Exploiting this vulnerability allows a malicious actor to gain access to confidential data...

The vulnerability of Linux Astra Modules, related to insufficient data authentication, allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Linux Astra Modules’ kernel modules is related to insufficient verification of data authenticity. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application package allows a hacker to gain access to read, modify, and delete data.

The vulnerability of the Rich Text Editor component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to the violation of the buffer’s initial limit. Exploiting this vulnerability can allow an attacker to gain read, modify, and delete access to data...

The vulnerability of the InnoDB component of the MySQL Database Server allows a hacker to gain access to data or cause service failures.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a malicious actor to gain access to data or cause service failures...

The vulnerability of the OpenSearch Dashboards component of the Oracle PeopleSoft Enterprise PeopleTools business application allows a hacker to gain unauthorized access to data.

The vulnerability of the OpenSearch Dashboards component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain unauthorized access to data...

The vulnerability of the astra-safepolicy security configuration software lies in the lack of data security mechanisms. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the astra-safepolicy security configuration software is related to the lack of a data security mechanism. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of Oracle VM VirtualBox’s kernel allows a hacker to gain unauthorized access to data.

The vulnerability of Oracle VM VirtualBox’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to data...