PT-2025-20404 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.4.0.0 through 9.10.1.0 Description: The issue is an out-of-bounds write vulnerability. A local low privileged attacker could potentially exploit this, leading to denial of service. Recommendations: For Dell...

PT-2025-20220 · Woobox · Woobox

Name of the Vulnerable Software and Affected Versions: Woobox versions n/a through 1.6 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a DOM-Based XSS vulnerability, which allows attackers to...

PT-2025-20226 · Unknown · Smaily For Wp

Name of the Vulnerable Software and Affected Versions: Smaily for WP versions 3.1.6 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 3.1.6 and earlier,...

PT-2025-20080 · Unknown · Cc Bmi Calculator

Name of the Vulnerable Software and Affected Versions: CC BMI Calculator versions n/a through 2.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-20170 · Unknown · Really Simple Under Construction Page

Name of the Vulnerable Software and Affected Versions: Really Simple Under Construction Page versions 1.4.6 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

PT-2025-20177 · Appjetty · Appjetty Wp Jquery Datatable

Name of the Vulnerable Software and Affected Versions: AppJetty WP jQuery DataTable versions through 4.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can...

PT-2025-20153 · WordPress · Wpdever Cart Tracking For Woocommerce

Name of the Vulnerable Software and Affected Versions: wpdever Cart tracking for WooCommerce versions 1.0.0 through 1.0.17 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...

PT-2025-20099 · Hash Form · Hash Form

Name of the Vulnerable Software and Affected Versions: Hash Form versions 1.2.8 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized requests. Recommendations: For versions 1.2.8 and earlier, update to a version that includes a fix for this...

PT-2025-20317

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.20 Django versions 5.1 through 5.1.8 Django versions 5.2 through 5.2.0 Description An issue was discovered in Django, where the django.utils.html.strip tags function is vulnerable to a potential denial-of-servic...

PT-2025-20183 · Unknown · Flowdee Amazon Product In A Post

Name of the Vulnerable Software and Affected Versions: flowdee Amazon Product in a Post versions n/a through 5.2.2 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-20290 · Opentext · Opentext Operations Bridge Manager

Name of the Vulnerable Software and Affected Versions: OpenText Operations Bridge Manager versions 24.2 through 24.4 Description: The issue allows authenticated users to change their password without providing their old password. Recommendations: For versions 24.2 and 24.4, update to a version th...

PT-2025-20128

Name of the Vulnerable Software and Affected Versions Custom Checkout Fields for WooCommerce versions 1.8.3 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2025-20133 · Unknown · Ajay Top 10

Name of the Vulnerable Software and Affected Versions: Ajay Top 10 versions n/a through 4.1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. Recommendations: For versions n/a through...

PT-2025-20056 · Samsung · Samsung Flow

Name of the Vulnerable Software and Affected Versions: Samsung Flow versions prior to 4.9.17.6 Description: The issue is related to improper input validation, allowing local attackers to access data within Samsung Flow. Recommendations: For versions prior to 4.9.17.6, update to version 4.9.17.6 o...

PT-2025-20089 · Unknown · Crm Perks Integration For Woocommerce/Salesforce

Name of the Vulnerable Software and Affected Versions: CRM Perks Integration for WooCommerce and Salesforce versions 1.7.5 and earlier Description: The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, which can be used for Phishing attacks...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in Mongoose

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of Mongoose Vulnerability Details CVEID:CVE-2025-23061 DESCRIPTION: Mongoose before 8.9.5 can improperly use a nested $where filter with a populate match, leading to search injection. NOTE: this issue exists because of an...

RHSA-2025:4513 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:4499 Red Hat Security Advisory: kpatch-patch-5_14_0-503_15_1 and kpatch-patch-5_14_0-503_26_1 security update

Bulletin has no description...

RHSA-2025:4462 Red Hat Security Advisory: osbuild-composer security update

Bulletin has no description...

PT-2025-19997 · Brightsign · Brightsign Os Series 4 +1

Name of the Vulnerable Software and Affected Versions: BrightSign OS series 4 versions prior to 8.5.53.1 BrightSign OS series 5 versions prior to 9.0.166 Description: The issue allows for privilege escalation on the device once code execution has been obtained, due to execution with unnecessary...