PT-2025-14551 · Arduino · Arduino Ide

Name of the Vulnerable Software and Affected Versions: Arduino IDE versions prior to 2.3.5 Description: A Self Cross-Site Scripting XSS vulnerability has been identified in the Arduino IDE. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the Preferences ...

PT-2025-14129 · Unknown · Leadquizzes

Name of the Vulnerable Software and Affected Versions: LeadQuizzes versions 1.1.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can inject malicious script...

PT-2025-14264 · WordPress · Wp Multi Store Locator

Name of the Vulnerable Software and Affected Versions: WP Multistore Locator versions n/a through 2.5.2 Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including data modification or...

PT-2025-14022 · Valmet · Valmet Dna

Name of the Vulnerable Software and Affected Versions: Valmet DNA versions prior to C2023 Description: The issue concerns an insecure DCOM configuration in Valmet DNA, specifically with the DCOM object Valmet DNA Engineering. This object has permissions that allow it to run commands as a user wit...

PT-2025-14248 · WordPress · Galaxy Weblinks Wp Clone Any Post Type

Name of the Vulnerable Software and Affected Versions: Galaxy Weblinks WP Clone any post type versions n/a through 3.4 Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which allows phishing attacks. This vulnerability can be...

CVE-2025-1979

Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password. This is only...

PT-2025-9902 · Samsung · Samsung Notes

Name of the Vulnerable Software and Affected Versions: Samsung Notes versions prior to 4.4.26.71 Description: The issue is related to an out-of-bounds write in the parsing of bmp images, which can be exploited by local attackers to execute arbitrary code. Recommendations: For versions prior to...

PT-2025-9749 · Unknown · Vasion Print

Name of the Vulnerable Software and Affected Versions: Vasion Print formerly PrinterLogic versions prior to Virtual Appliance Host 22.0.933 Application 20.0.2368 Description: The issue allows unauthenticated editing of driver packages. Recommendations: For versions prior to Virtual Appliance Host...

PT-2025-16807 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: A SQL injection vulnerability has been identified in the affected application through the internally used CreateTrace method. This could allow an unauthenticated remote attacker ...

CVE-2023-34478

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests. Mitigation: Update to Apache Shiro 1.12.0+ or 2.0.0-alpha...

Intel® GPA and Intel® GPA Framework Software Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Performance Analyzers Intel® GPA and Intel® Graphics Performance Analyzers Framework Intel® GPA Framework software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these...

PT-2025-2114

Name of the Vulnerable Software and Affected Versions Giga Messenger WordPress plugin versions 2.3.1 and earlier Description The issue is related to a Reflected Cross-Site Scripting problem, where a parameter is not properly sanitized and escaped before being outputted back in the page. This coul...

PT-2025-2758 · Ibm · Ibm Sterling B2B Integrator

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.5 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.3 Description: The issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, altering the intended...

PT-2025-5098 · Unknown +1 · Buddypress +1

Name of the Vulnerable Software and Affected Versions: Eliott Robson Mass Messaging in BuddyPress versions n/a through 2.2.1 Description: The issue is related to improper neutralization of input during web page generation, which allows for Reflected Cross-site Scripting XSS. This means an attacke...

PT-2025-3568 · Jfinaloa · Jfinaloa

Name of the Vulnerable Software and Affected Versions: JFinalOA versions prior to v2025.01.01 Description: A cross-site scripting XSS vulnerability in the "getBusinessUploadListPage?busid" interface of JFinalOA allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2025-1283 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Payments component of Google Chrome and Microsoft Edge, allowing a remote...

PT-2025-1240 · Microsoft · Office Word +4

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions prior to the fixed version Microsoft 365 Apps for Enterprise versions prior to the fixed version Description: The issue is related to the use of an unreliable path search in Microsoft Office and Microsoft 365 Apps fo...

PT-2025-1238

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2016 Microsoft Office versions 2019 through 2024 Description The issue allows remote attackers to execute arbitrary code and affect the system. It is reported that this issue has been patched by Microsoft with the ai...

PT-2024-16023 · Telerik · Telerik Ui For Wpf

Name of the Vulnerable Software and Affected Versions: Telerik UI for WPF versions prior to 2024 Q4 2024.4.1213 Description: A code execution attack is possible through an insecure deserialization vulnerability. This issue affects Telerik UI for WPF and can be exploited, allowing for code...

PT-2024-39476 · Funnelkit · Recover Woocommerce Cart Abandonment

Name of the Vulnerable Software and Affected Versions: Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit WordPress plugin versions prior to 3.3.0 Description: The issue allows unauthenticated users to perform SQL injection attacks due to the lack...