PT-2025-16934 · WordPress · Wp Editor

Name of the Vulnerable Software and Affected Versions: WP Editor plugin for WordPress versions up to, and including, 1.2.9.1 Description: The issue allows authenticated attackers with Administrator-level access and above to read arbitrary files on the affected site's server, potentially revealing...

PT-2025-17178 · Unknown · Fluentcommunity

Name of the Vulnerable Software and Affected Versions: FluentCommunity versions 1.2.15 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. This can potentially lead to security breaches. Recommendations: For versions 1.2.15 and earlie...

PT-2025-13: Bypass Regular Expression Denial of Service (ReDoS) in jsPDF

The vulnerability was identified in jsPDF library, versions prior to 3.0.0. The discovered vulnerability allows an attacker to pass unsanitized image urls to the vulnerable method that results in high CPU utilization and denial of service. Vulnerability status: Confirmed by vendor Date of...

PT-2025-10852 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for iOS versions prior to 6.3.0 Description: The issue is related to incorrect behavior order in some Zoom Workplace Apps for iOS, which may allow an authenticated user to conduct a denial of service via network access...

SUSE SLES15 : Recommended update for python3-M2Crypto (SUSE-SU-SUSE-RU-2025:0800-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-SUSE-RU-2025:0800-1 advisory. - Fix spelling of BSD-2-Clause license. - Update to 0.44.0: - The real license is BSD 2-Clause, not MIT. - Remove...

PT-2025-9977 · Servicenow · Servicenow

Name of the Vulnerable Software and Affected Versions: ServiceNow versions prior to the fixed version in the Washington release of Now Platform Description: The issue is an authorization bypass vulnerability that could enable an authenticated user to access unauthorized data stored within the Now...

PT-2025-9909 · Elastic · Kibana

Name of the Vulnerable Software and Affected Versions: Kibana versions 8.15.0 through 8.17.2 Description: The issue is related to a prototype pollution vulnerability in Kibana, which can lead to arbitrary code execution via crafted file uploads and HTTP requests. This vulnerability poses a seriou...

PT-2025-7052 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.18 Description: A low-privileged user can enable debug mode and access sensitive information. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents...

PT-2025-6243 · Misskey · Misskey

Name of the Vulnerable Software and Affected Versions: Misskey versions 12.109.0 through 2025.2.0-alpha.0 Description: Misskey is an open source, federated social media platform. A login token named token is stored in a cookie for authentication purposes in Bull Dashboard, but this remains...

PT-2025-5526 · Unknown · Radius Blocks

Name of the Vulnerable Software and Affected Versions: Radius Blocks versions 2.1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 2.1.2 and earlier,...

EulerOS Virtualization 2.12.1 : python-urllib3 (EulerOS-SA-2024-2761)

According to the versions of the python-urllib3 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : urllib3 is a user-friendly HTTP client library for Python. When using urllib3's proxy support with ProxyManager, the...

PT-2024-32458 · Nix +3 · Nix +3

Name of the Vulnerable Software and Affected Versions: Nix versions 1.11 through 2.18.7 Nix versions 1.11 through 2.24.7 Description: The issue is related to the Nix package manager for Linux and other Unix systems. Starting in version 1.11 and prior to versions 2.18.8 and 2.24.8, did not verify...

PT-2024-5135 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 6.0.0 Description: The issue is related to a race condition error in the installer for some Zoom Apps and SDKs for Windows, which may allow an authenticated user to conduct a privilege escalation via local access. This ...

PT-2024-40070 · Budibase +2 · Budibase +2

Name of the Vulnerable Software and Affected Versions: Budibase versions prior to 2.20.0 Description: The issue arises from a vulnerability in the vm2 library used for code execution inside the Budibase builder and apps. This vulnerability allows users to escape the sandbox provided by vm2 and...

PT-2023-7645 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to a reflected Cross-Site Scripting XSS vulnerability. It can be exploited if a low-privileged attacker convinces a victim to visit a URL referencing a...

PT-2023-31559 · Zammad · Zammad

Name of the Vulnerable Software and Affected Versions: Zammad versions prior to 6.2.0 Description: An issue was discovered due to a lack of rate limiting in the "email address verification" feature. This allows an attacker to send many requests for a known address, causing Denial Of Service by...

PT-2023-27037 · Npmjs · Node Email Check

Name of the Vulnerable Software and Affected Versions: NPMJS Node Email Check version 1.0.4 Description: The issue allows an attacker to cause a denial of service via a crafted string to the scpSyntax component. This can be exploited by sending a specifically designed string, leading to a denial ...

PT-2023-29342 · WordPress · Order Tracking Pro

Name of the Vulnerable Software and Affected Versions: Order Tracking Pro plugin for WordPress versions up to, and including, 3.3.6 Description: The issue is related to Stored Cross-Site Scripting via the order status parameter due to insufficient input sanitization and output escaping. This allo...

PT-2023-21991 · Intel · Intel Oneapi Toolkit

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Toolkit versions prior to 4.3.1.493 Description: The issue is related to an uncontrolled search path in some IntelR oneAPI Toolkit and component software installers. This may allow an authenticated user to potentially enable...

PT-2023-5211 · Curl +6 · Curl +6

Name of the Vulnerable Software and Affected Versions: curl versions prior to 8.4.0 Description: The issue is related to the handling of HTTP headers by the curl utility. When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl header...