PT-2025-29657

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Server: DDL component of Oracle MySQL Server. A high-privileged attacker with...

PT-2025-29637

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description A vulnerability exists in the Optimizer component of Oracle MySQL Server. Successful exploitation of thi...

PT-2025-29646

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description A vulnerability exists in the Server: DDL component of Oracle MySQL Server. This vulnerability allows a...

PT-2025-29630

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the InnoDB component of Oracle MySQL Server. Successful exploitation can lead to a...

PT-2025-29645

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description A vulnerability exists within the InnoDB component of Oracle MySQL Server. Successful exploitation of th...

PT-2025-29639

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Server: Components Services component of Oracle MySQL. A high-privileged attacker...

PT-2025-29688 · Node.Js · Node.Js

Name of the Vulnerable Software and Affected Versions: Node.js versions 20.x through 20.19.3 Node.js versions 22.x through 22.17.0 Node.js versions 24.x through 24.4.0 Description: The path.normalize function in Node.js does not properly restrict Windows device names such as CON, PRN, and AUX...

PT-2025-29681 · Unknown · Gpt-Sovits-Webui

Name of the Vulnerable Software and Affected Versions: GPT-SoVITS-WebUI versions 20250228v3 and prior Description: GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. A deserialization issue exists in the bsroformer.py file. The model choose variable accepts user-supplied input, such...

PT-2025-29551 · Panda Security · Panda Internet Security 2016 +3

Name of the Vulnerable Software and Affected Versions: Panda Global Protection 2016 versions prior to 16.1.2 Panda Antivirus Pro 2016 versions prior to 16.1.2 Panda Small Business Protection versions prior to 16.1.2 Panda Internet Security 2016 versions prior to 16.1.2 Description: PSEvents.exe i...

PT-2025-29601

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 8u451 Oracle GraalVM for JDK versions prior to 17.0.15 Oracle GraalVM Enterprise Edition versions prior to 21.3.14 Oracle Java SE versions 11.0.27 Oracle Java SE versions 17.0.15 Oracle Java SE versions 21.0.7...

PT-2025-29670 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.8 through 8.0.8.6 Oracle Financial Services Analytical Applications Infrastructure versions 8.1.1.4 through 8.1.2.5 Description: An easily exploitable issue exist...

PT-2025-29651

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Optimizer component of Oracle MySQL Server. A highly privileged attacker with...

PT-2025-29649

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the InnoDB component of Oracle MySQL Server. Successful exploitation can lead to a...

PT-2025-29419 · Unknown · Utt Hiper 840G

Name of the Vulnerable Software and Affected Versions: UTT HiPER 840G versions up to 3.1.1-190328 Description: A critical buffer overflow vulnerability exists in UTT HiPER 840G. The issue is due to the manipulation of the remoteSrcTemp argument within the file /goform/aspRemoteApConfTempSend. The...

PT-2025-29432 · Phpgurukul · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue exists in PHPGurukul Online Fire Reporting System 1.2. The vulnerability is due to SQL injection in an unknown part of the /admin/assigned-requests.php file...

PT-2025-29487 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.22.10 Description: NanoMQ version 0.22.10 contains a memory leak that allows attackers to cause a Denial of Service DoS by sending a crafted PUBLISH message. Recommendations: At the moment, there is no information about a new...

PT-2025-29499 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection vulnerability through the ID parameter at the SEMCMS Products.php endpoint. Recommendations: As a mitigation, sanitize or validate the ID parameter at the SEMCMS...

PT-2025-29445 · Avid +1 · Avid Nexis Pro+ +3

Name of the Vulnerable Software and Affected Versions: Avid NEXIS E-series versions prior to 2025.5.1 Avid NEXIS F-series versions prior to 2025.5.1 Avid NEXIS PRO+ versions prior to 2025.5.1 System Director Appliance SDA+ versions prior to 2025.5.1 Description: The Avid Nexis Agent uses a...

PT-2025-29524 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions 4.2-milestone-1 through 13.10.10 XWiki versions 14.4.0 through 14.4.6 XWiki versions 14.10.0 through 14.9.9 Description: XWiki Rendering is a system that converts textual input into different syntaxes. A flaw exists where the...

PT-2025-29469 · Wavlink · Wavlink Wn535G3

Name of the Vulnerable Software and Affected Versions: Wavlink WN535K3 version 20191010 Description: A command injection issue exists in the set sys adm function due to a flaw in handling the newpass parameter. This allows attackers to execute arbitrary commands through a crafted request...