PT-2025-14704 · Unknown · Wptobe-Signinup

Name of the Vulnerable Software and Affected Versions: Wptobe-signinup versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

PT-2025-14730 · Unknown · Rich Text Editor

Name of the Vulnerable Software and Affected Versions: Rich Text Editor versions 1.0.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in the Rich Text Editor, which allows exploitation of incorrectly configured access control security levels. Recommendation...

DSA-5892-1 atop - security update

Bulletin has no description...

PT-2025-14735 · Unknown · Textme Sms

Name of the Vulnerable Software and Affected Versions: TextMe SMS versions 1.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For TextMe SMS versions 1.9.1 an...

CVE-2025-24269

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination...

CVE-2025-27608 Self Cross-Site Scripting in Arduino IDE

Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting XSS vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the...

RHSA-2025:3490 Red Hat Security Advisory: Satellite 6.16.4 Async Update

Bulletin has no description...

RHSA-2025:3465 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update

Bulletin has no description...

PT-2025-14548

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions 29 through 36.2 Description The issue is related to improper input validation in the signalling component, allowing remote attackers to trigger a temporary denial of service, resulting in a software abort. Recommendatio...

PT-2025-14566

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 9.2.0 through 9.2.9 Apache Traffic Server versions 10.0.0 through 10.0.4 Description The issue affects Apache Traffic Server when chunked messages are malformed, allowing request smuggling. Users are recommended ...

PT-2025-14555 · Obfuscate · Obfuscate

Name of the Vulnerable Software and Affected Versions: Obfuscate versions 0.0.0 through 2.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website,...

PT-2025-19697 · Opensuse +1 · Govulncheck-Vulndb

Name of the Vulnerable Software and Affected Versions: govulncheck-vulndb versions prior to 0.0.20250327T184518 Description: This update addresses multiple issues within govulncheck-vulndb. Recommendations: Update to version 0.0.20250327T184518 or later. Update to version 0.0.20250331T171002 or...

PT-2025-14551 · Arduino · Arduino Ide

Name of the Vulnerable Software and Affected Versions: Arduino IDE versions prior to 2.3.5 Description: A Self Cross-Site Scripting XSS vulnerability has been identified in the Arduino IDE. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the Preferences ...

PT-2025-14512 · Jenkins · Jenkins Templating Engine Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Templating Engine Plugin versions 2.5.3 and earlier Description: The issue allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM, due to libraries defined in folders not...

WordPress Publitio Plugin <= 2.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Publitio versions = 2.1.8...

CVE-2025-21904 caif_virtio: fix wrong pointer check in cfv_probe()

In the Linux kernel, the following vulnerability has been resolved: caifvirtio: fix wrong pointer check in cfvprobe delvqs frees virtqueues, therefore cfv-vqtx pointer should be checked for NULL before calling it, not cfv-vdev. Also the current implementation is redundant because the pointer...

CVE-2025-31121 OpenEMR allows XSS in Patient Image feature

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1...

RHSA-2025:3407 Red Hat Security Advisory: freetype security update

Bulletin has no description...

PT-2025-14436 · Cbx Poll · Cbx Poll

Name of the Vulnerable Software and Affected Versions: CBX Poll versions 1.2.7 and earlier Description: The issue is related to Deserialization of Untrusted Data, which allows Object Injection. Recommendations: For CBX Poll versions 1.2.7 and earlier, update to a version that fixes this issue, as...

PT-2025-14179 · Unknown · Elementscss Addons For Elementor

Name of the Vulnerable Software and Affected Versions: ElementsCSS Addons for Elementor versions 1.0.8.7 and earlier Description: The issue is a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. This means an attacker can potentially force the server to...