PT-2025-30510 · WordPress · Valuation Calculator

Name of the Vulnerable Software and Affected Versions: Valuation Calculator plugin for WordPress versions up to and including 1.3.2 Description: The Valuation Calculator plugin for WordPress is susceptible to Stored Cross-Site Scripting through the link parameter due to insufficient input...

Lantronix Provisioning Manager

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker perform a cross-site scripting attack, which could result in remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

Malicious code in kiwi-module-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83d5585ffa8a9b91652a5a6696f15e108b45a86acc0edbe6ae6afb7ba4b0cd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-6173 Malicious code in kiwi-module-recommendations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f83d5585ffa8a9b91652a5a6696f15e108b45a86acc0edbe6ae6afb7ba4b0cd7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-30395 · Typo3 · Femanager

Name of the Vulnerable Software and Affected Versions: femanager versions 6.4.1 and below femanager versions 7.0.0 through 7.5.2 femanager versions 8.0.0 through 8.3.0 Description: The femanager extension for TYPO3 contains an Insecure Direct Object Reference issue, which allows unauthorized...

PT-2025-30463

Name of the Vulnerable Software and Affected Versions: Ashlar-Vellum Cobalt affected versions not specified Description: This issue is an integer overflow vulnerability in the parsing of Cobalt LI files, potentially leading to remote code execution. Recommendations: At the moment, there is no...

PT-2025-30452 · Alertenterprise · Alertenterprise Guardian

Name of the Vulnerable Software and Affected Versions: AlertEnterprise Guardian version 4.1.14.2.2.1 Description: An issue allows bypassing manager approval via the isAddedByApprover parameter in a Request Building Access requestSubmit API call. Recommendations: Apply a fix to address the bypass ...

PT-2025-30421 · Unknown · Chatgpt Unli

Name of the Vulnerable Software and Affected Versions: ChatGPT Unli versions through 2025-05-26 Description: A self cross-site scripting XSS issue exists in ChatGPT Unli that allows attackers to execute arbitrary code. The issue is triggered by a crafted SVG file submitted to the chat interface...

PT-2025-30435 · Okta · Okta On-Premises Provisioning Agent

Name of the Vulnerable Software and Affected Versions: Okta On-Premises Provisioning OPP agents versions 2.2.1 through 2.3.0 Description: Okta On-Premises Provisioning OPP agents log specific user data during administrator-initiated password resets. An attacker gaining access to the local servers...

PT-2025-30474 · Unknown · Vigi Nvr1104H-4P V1 +1

Name of the Vulnerable Software and Affected Versions: VIGI NVR1104H-4P V1 versions prior to 1.1.5 Build 250518 VIGI NVR2016H-16MP V2 versions prior to 1.3.1 Build 250407 Description: A command injection vulnerability exists that can be exploited after authentication. Recommendations: Update VIGI...

PT-2025-30484

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Thunderbird versions prior to 141 Firefox ESR versions prior to 128.13 Firefox ESR versions prior to 140.1 Thunderbird ESR versions prior to 128.13 Thunderbird ESR versions prior to 140.1 Description Memory safety...

PT-2025-30477

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Firefox ESR versions prior to 115.26 Firefox ESR versions prior to 128.13 Firefox ESR versions prior to 140.1 Thunderbird versions prior to 141 Thunderbird versions prior to 128.13 Thunderbird versions prior to...

PT-2025-30488

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Firefox ESR versions prior to 140.1 Thunderbird versions prior to 141 Thunderbird versions prior to 140.1 Description Search terms could persist in the URL bar even after navigating away from the search page...

PT-2025-30483

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Firefox ESR versions prior to 115.26 Firefox ESR versions prior to 128.13 Firefox ESR version 140.0 Thunderbird versions prior to 141 Thunderbird ESR versions prior to 128.13 Thunderbird ESR version 140.0...

PT-2025-30476

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Firefox ESR versions prior to 115.26 Firefox ESR versions prior to 128.13 Firefox ESR versions prior to 140.1 Thunderbird versions prior to 141 Thunderbird versions prior to 128.13 Thunderbird versions prior to...

PT-2025-30485

Name of the Vulnerable Software and Affected Versions Thunderbird versions prior to 141 Thunderbird versions prior to 140.1 Description Thunderbird cached Cross-Origin Resource Sharing CORS preflight responses across IP address changes, which allowed bypassing CORS protections with DNS rebinding...

PT-2025-30480

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Firefox ESR versions prior to 128.13 Firefox ESR versions prior to 140.1 Thunderbird versions prior to 141 Thunderbird versions prior to 128.13 Thunderbird versions prior to 140.1 Description The username:password...

PT-2025-30486

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Firefox ESR versions prior to 140.1 Thunderbird versions prior to 141 Thunderbird versions prior to 140.1 Description Setting a nameless cookie with an equals sign in the value shadowed other cookies. This occurre...

PT-2025-30490

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 141 Thunderbird versions prior to 141 Description The software incorrectly truncated URLs towards the beginning instead of around the origin. Recommendations Update Firefox to version 141 or later. Update Thunderbird ...

PT-2025-30229 · Simopro Technology · Winmatrix3

Name of the Vulnerable Software and Affected Versions: WinMatrix3 affected versions not specified Description: WinMatrix3 developed by Simopro Technology has an Insecure Deserialization vulnerability. This allows unauthenticated remote attackers to execute arbitrary code on the server by sending...