PT-2025-28966 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions prior to 7.0.4 Description: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is susceptible to Reflected Cross-Site Scriptin...

PT-2025-28902 · Jenkins · Jenkins Credentials Binding Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Credentials Binding Plugin versions 687.v619cb 15e923f and earlier Description: The Jenkins Credentials Binding Plugin does not properly mask credentials present in exception error messages written to the build log. This can lead to t...

PT-2025-28955

Name of the Vulnerable Software and Affected Versions Drupal Mail Login versions 3.0.0 through 3.1.x Drupal Mail Login versions 4.0.0 through 4.1.x Description An improper restriction of excessive authentication attempts exists in Drupal Mail Login, allowing for brute force attacks. Recommendatio...

PT-2025-29254

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.2R3-S9 Juniper Networks Junos OS versions 21.4 prior to 21.4R3-S10 Juniper Networks Junos OS versions 22.2 prior to 22.2R3-S6 Juniper Networks Junos OS versions 22.4 prior to 22.4R3-S6 Juniper...

PT-2025-28929 · Jenkins · Jenkins Xooa Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Xooa Plugin versions 0.0.7 and earlier Description: The Jenkins Xooa Plugin does not mask the Xooa Deployment Token on the global configuration form, potentially allowing attackers to observe and capture it. Recommendations: Update to...

PT-2025-28910 · Jenkins · Jenkins Applitools Eyes Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier Description: The Jenkins Applitools Eyes Plugin does not properly escape the Applitools URL displayed on the build page, leading to a stored cross-site scripting XSS issue. An attacke...

PT-2025-30493

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 138.0.7204.168 Microsoft Edge versions prior to 138.0.7204.168 Chromium versions prior to 138.0.7204.168 Chromium in Debian versions prior to 138.0.7204.168-1deb12u1 Description A type confusion issue exists in...

PT-2025-30492

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 138.0.7204.168 Microsoft Edge versions prior to 138.0.7204.168 Chromium versions prior to 138.0.7204.168 Chromium versions 138.0.7204.168-1deb12u1 Description A type confusion issue exists in the V8 JavaScript...

PT-2025-29241 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS Evolved versions prior to 22.2R3-S7-EVO Juniper Networks Junos OS Evolved versions 22.4 through 22.4R3-S7-EVO Juniper Networks Junos OS Evolved versions 23.2 through 23.2R2-S4-EVO Juniper Networks Junos OS Evolved...

ALSA-2025:10676 Moderate: golang security update

The golang packages provide the Go programming language compiler. Security Fixes: net/http: Sensitive headers not cleared on cross-origin redirect in net/http CVE-2025-4673 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

CVE-2025-48384 Git allows arbitrary code execution through broken config quoting

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config entry, values with ...

RHSA-2025:10410 Red Hat Security Advisory: tigervnc security update

Bulletin has no description...

RHSA-2025:10407 Red Hat Security Advisory: python-setuptools security update

Bulletin has no description...

RHBA-2025:6470 Red Hat Bug Fix Advisory: rsync bug fix and enhancement update

Bulletin has no description...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in jsonpath-plus-0.19.0.tgz

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of jsonpath-plus-0.19.0.tgz Vulnerability Details CVEID:CVE-2024-21534 DESCRIPTION: All versions of the package jsonpath-plus are vulnerable to Remote Code Execution RCE due to improper input sanitization. An attacker can...

PT-2025-28408 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the campo parameter in the "/FacturaE/BusquedasFacturasSesion" endpoint. Recommendations: For versions...

PT-2025-28410

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the campo mensaje in the "/QISClient/api/v1/sucesospaginas" API endpoint. Recommendations: For versions...

PT-2025-28751 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is related to an Improper Restriction of XML External Entity Reference 'XXE' vulnerability. This could result in a security feature bypass, allowing a...

PT-2025-28374 · Samsung · Knoxvault Trustlet

Name of the Vulnerable Software and Affected Versions: KnoxVault trustlet versions prior to SMR Jul-2025 Release 1 Description: The issue is related to an out-of-bounds write in setting auth secret, which allows local privileged attackers to write out-of-bounds memory. This can be exploited by...

PT-2025-28375 · Unknown · Knoxvault Trustlet

Name of the Vulnerable Software and Affected Versions: KnoxVault trustlet versions prior to SMR Jul-2025 Release 1 Description: The issue is related to an out-of-bounds write in the authentication secret checking process. This allows local privileged attackers to write to memory outside the...