PT-2025-20770

Name of the Vulnerable Software and Affected Versions iPadOS versions prior to 17.7.7 macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description A privacy issue was addressed by removing sensitive data. A malicious app may be able...

PT-2025-20680 · Wormhole Tech · Wormhole Tech Gpm

Name of the Vulnerable Software and Affected Versions: WormHole Tech GPM versions prior to 202502 Description: The issue allows unauthenticated remote attackers to change any user's password and use the modified password to log into the system. This is due to an Unverified Password Change...

PT-2025-20725 · Unknown · Twitter Follow Button

Name of the Vulnerable Software and Affected Versions: BNS Twitter Follow Button versions 0.3.8 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This means that an attacker cou...

PT-2025-20691 · Invelos +1 · Dvdprofiler +1

Name of the Vulnerable Software and Affected Versions: julmud/phpDVDProfiler versions v 20230807 through v 20250510 Description: The issue concerns cross-site scripting in the search function of the software. This allows for potential malicious script execution when a user interacts with the sear...

PT-2025-20722 · Sel Bios · Sel Bios

Name of the Vulnerable Software and Affected Versions: SEL BIOS packages versions prior to 1.3.49152.117 SEL BIOS packages versions prior to 2.6.49152.98 Description: A local attacker can bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file...

PT-2025-20762 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 Description: Processing web content may lead to a denial-of-service. The issue was addressed with improved UI. Recommendations: For iPadOS versions prior...

PT-2025-20794 · Apple · Ipados +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...

PT-2025-20768 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: An issue allows an app to potentially observe the hostnames of new network connections. The problem was resolved by removing the vulnerable code. Recommendations: For versions prior to 15.5, update to...

PT-2025-20761 · Apple · Ipados +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...

PT-2025-25203

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.7.x through 10.7.1 Mattermost versions 10.6.x through 10.6.3 Mattermost versions 10.5.x through 10.5.4 Mattermost versions 9.11.x through 9.11.13 Description The issue is related to the improper validation of LDAP group ...

PT-2025-23032 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 137.0.7151.55 Description: The issue is an out of bounds write in V8, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue is considered High...

MGASA-2025-0154 Updated libreoffice packages fix security vulnerability

PDF signature forgery with adbe.pkcs7.sha1 SubFilter. CVE-2025-2866...

PT-2025-20607 · Totolink · Totolink T10 +6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R versions 4.1.8cu.5241 B20210927 Description: A critical vulnerability exists in the CloudACMunualUpdate function of the /cgi-bin/cstecgi.cgi file in the affected devices. The...

CVE-2025-37883 s390/sclp: Add check for get_zeroed_page()

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Add check for getzeroedpage Add check for the return value of getzeroedpage in sclpconsoleinit to prevent null pointer dereference. Furthermore, to solve the memory leak caused by the loop allocation, add a free helper...

PT-2025-20474 · Sparx Systems · Sparx Systems Pro Cloud Server

Name of the Vulnerable Software and Affected Versions: Sparx Systems Pro Cloud Server versions earlier than 6.0.165 Description: The issue is related to an Improper Input Validation vulnerability in the WebEA model search field of Sparx Systems Pro Cloud Server, which allows Cross-Site Scripting...

PT-2025-22457 · Manageengine · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine ADAudit Plus versions 8510 and prior Description: The issue is related to authenticated SQL injection when fetching service account audit data. Recommendations: For ManageEngine ADAudit Plus versions 8510 and prior, update to a...

DLA-4160-1 libbson-xs-perl - security update

Bulletin has no description...

PT-2025-20555 · Enersys · Enersys Ampa

Name of the Vulnerable Software and Affected Versions: EnerSys AMPA versions 22.09 and prior Description: The issue allows for command injection, which can lead to privileged remote shell access. Recommendations: For versions 22.09 and prior, update to a version later than 22.09 to resolve the...

PT-2025-24423 · Zoho · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue concerns an authenticated SQL injection vulnerability in the Service Account Auditing reports of the affected software. Recommendations: For Zohocorp ManageEngi...

Trix vulnerable to Cross-site Scripting on copy & paste

Impact The Trix editor, in versions prior to 2.1.15, is vulnerable to XSS attacks when pasting malicious code. An attacker could trick a user to copy and paste malicious code that would execute arbitrary JavaScript code within the context of the user's session, potentially leading to unauthorized...