RHSA-2025:7893 Red Hat Security Advisory: grafana security update

Bulletin has no description...

PT-2025-22280 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03.2 Description: The issue allows for stored XSS via GitHub Checks Webhook. Recommendations: For versions prior to 2025.03.2, update to version 2025.03.2 or later to resolve the issue...

PT-2025-22276

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.53.15 Description The issue concerns Langroid, a Python framework for building large language model LLM-powered applications. In versions prior to 0.53.15, the TableChatAgent uses pandas eval, which may be vulnerab...

PT-2025-22143 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions 12.x prior to 12.4.31 LTS TYPO3 versions 13.x prior to 13.4.2 LTS Description: The issue concerns the multifactor authentication MFA dialog presented during backend login, which can be bypassed due to insufficient enforcement o...

PT-2025-22283 · Jetbrains · Teamcity

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2025.03.2 Description: The issue allows for an open redirect on the editing VCS Root page. Recommendations: For versions prior to 2025.03.2, update to version 2025.03.2 or later to resolve the issue...

PT-2025-22139 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions 9.0.0 through 9.5.50 ELTS TYPO3 versions 10.0.0 through 10.4.49 ELTS TYPO3 versions 11.0.0 through 11.5.43 ELTS TYPO3 versions 12.0.0 through 12.4.30 LTS TYPO3 versions 13.0.0 through 13.4.11 LTS Description: The issue affects...

PT-2025-22122 · WordPress · Motors

Name of the Vulnerable Software and Affected Versions: Motors WordPress theme versions prior to 5.6.68 Description: The Motors theme for WordPress is vulnerable to privilege escalation via account takeover. This is due to the theme not properly validating a user's identity prior to updating their...

DLA-4175-1 mongo-c-driver - security update

Bulletin has no description...

DLA-4174-1 openjdk-11 - security update

Bulletin has no description...

Advisory ROSA-SA-2025-2862

Software: kernel 4.18.0 OS: ROSA Virtualization 3.0 packageevrstring: kernel-4.18.0-553.40.1.el810 CVE-ID: CVE-2023-52864 BDU-ID: 2024-10416 CVE-Crit: MEDIUM. CVE-DESC.: A vulnerability in the wmicharopen function of the Linux operating system kernel is related to the driver not binding to a devi...

WordPress SKT Blocks plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by zaim in WordPress Plugin SKT Blocks versions = 2.2...

RHSA-2025:7901 Red Hat Security Advisory: kernel security update

Bulletin has no description...

K000151398: PyTorch vulnerability CVE-2025-32434

Security Advisory Description PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system. In version 2.5.1 and prior, a Remote Command Execution RCE vulnerability exists in PyTorch when loading a model...

PT-2025-22038 · Unknown · Lloyd Saunders Author Box After Posts

Name of the Vulnerable Software and Affected Versions: Lloyd Saunders Author Box After Posts versions 1.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-21999 · Unknown · Mythemes My White

Name of the Vulnerable Software and Affected Versions: mythemes my white versions n/a through 2.0.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to...

PT-2025-21989 · Elementor · Elementinvader Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor versions 1.3.5 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-21993 · Woocommerce · Redefiningtheweb Dynamic Pricing & Discounts Lite

Name of the Vulnerable Software and Affected Versions: RedefiningTheWeb Dynamic Pricing & Discounts Lite for WooCommerce versions through 2.0.3 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. Recommendations: For versions through 2.0.3,...

PT-2025-22089 · Chimpstudio · Chimpstudio Foodbakery

Name of the Vulnerable Software and Affected Versions: Chimpstudio FoodBakery versions n/a through 3.3 Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For versions n/a through 3.3, update to a version that fixes the...

PT-2025-22050 · WordPress · Wp Vegas

Name of the Vulnerable Software and Affected Versions: WP Vegas versions n/a through 2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This means that an attacker can inject malicious...

PT-2025-21970 · Unknown · Jetmonsters Mega Menu Block

Name of the Vulnerable Software and Affected Versions: jetmonsters Mega Menu Block versions 1.0.0 through 1.0.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacke...