PT-2025-29756 · WordPress · Blockswp Theme Builder For Elementor

Name of the Vulnerable Software and Affected Versions: BlocksWP Theme Builder For Elementor versions through 1.2.3 Description: The BlocksWP Theme Builder For Elementor software contains a Cross-Site Request Forgery CSRF issue. This allows for the execution of unintended actions on behalf of an...

PT-2025-29776 · Awethemes · Hillter

Name of the Vulnerable Software and Affected Versions: awethemes Hillter versions through 3.0.7 Description: The software contains a deserialization of untrusted data flaw that allows for object injection. Recommendations: Update awethemes Hillter to a version later than 3.0.7...

PT-2025-29763 · WordPress · Wp Hide Post

Name of the Vulnerable Software and Affected Versions: xfinitysoft WP Post Hide versions n/a through 1.0.9 Description: A Cross-Site Request Forgery CSRF issue exists in xfinitysoft WP Post Hide, allowing attackers to perform actions on behalf of an authenticated user. Recommendations: Update...

CVE-2025-30761

CVE-2025-30761 is reported in Oracle Java SE and GraalVM family (component: Scripting) with affected Oracle Java SE versions 8u451, 8u451-perf, 11.0.27 and Oracle GraalVM Enterprise Edition 21.3.14; and is echoed across various Linux advisories (ALAS2, ALAS2CORRETTO8, etc.). Connected documents p...

CVE-2025-49841 GHSL-2025-053: GPT-SoVITS Deserialization of Untrusted Data vulnerability

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in processckpt.py. The SoVITSdropdown variable takes user input and passes it to the loadsovitsnew function in processckpt.py. In loadsovitsnew, the...

CVE-2025-50088

...

CVE-2025-50082

CVE-2025-50082 is a MySQL Server (Oracle) vulnerability affecting the Server: Optimizer component. Affected versions are 8.0.0–8.0.42, 8.4.0–8.4.5, 9.0.0–9.3.0 . The flaw allows a low-privilege remote attacker (network access via multiple protocols) to cause a hang or a frequent crash (complete D...

CVE-2025-50069

CVE-2025-50069 affects the Java VM component of Oracle Database Server. Affected versions are 19.3–19.27 and 21.3–21.18. An attacker with Create Session and Create Procedure privileges and network access via Oracle Net can exploit the Java VM to gain unauthorized access to data or data across all...

CVE-2025-50062

The CVE-2025-50062 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Core (Global Payroll for Core) with affected versions 9.2.51–9.2.52. Multiple connected sources describe a vulnerability where a low-privileged attacker with network access over HTTP can compromise the system, enabl...

CVE-2025-30753

CVE-2025-30753 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affects WebLogic versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to cause a hang or frequent crashes (complete DOS). No pu...

RHSA-2025:11045 Red Hat Security Advisory: kernel security update

Bulletin has no description...

BELL-CVE-2024-47252

Bulletin has no description...

BELL-CVE-2024-43204

Bulletin has no description...

BELL-CVE-2025-45582

Bulletin has no description...

PT-2025-29557 · Ipfire · Ipfire

Name of the Vulnerable Software and Affected Versions: IPFire versions prior to 2.19 Core Update 101 Description: A remote command execution issue exists in IPFire due to a flaw in the proxy.cgi CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in...

PT-2025-29571 · Dassault Systèmes · Solidworks Desktop +1

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description: A Use After Free issue exists in the CATPRODUCT file reading procedure. This could allow an attacker to execute arbitrary code when opening a specially crafted...

PT-2025-29569 · Dspace · Dspace

Name of the Vulnerable Software and Affected Versions: DSpace versions prior to 7.6.4 DSpace versions prior to 8.2 DSpace versions prior to 9.1 Description: DSpace is a repository application providing access to digital resources. A path traversal issue exists during the import of an archive in...

PT-2025-29554 · Riverbed Technology · Riverbed Steelcentral Netprofiler +1

Name of the Vulnerable Software and Affected Versions: Riverbed SteelCentral NetProfiler and NetExpress version 10.8.7 Description: An authenticated multi-stage remote code execution issue exists. A SQL injection vulnerability in the /api/common/1.0/login endpoint can be exploited to create a new...

PT-2025-30150 · Tenda · Tenda Fh451

Name of the Vulnerable Software and Affected Versions: Tenda FH451 version 1.0.0.9 Description: A critical issue exists in Tenda FH451 version 1.0.0.9 related to a stack-based buffer overflow. The vulnerability is located in the fromSetIpBind function within the /goform/SetIpBind file. The page...

PT-2025-29580

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.2.86069 JetBrains YouTrack versions prior to 2024.3.85077 JetBrains YouTrack versions prior to 2025.1.86199 Description An issue exists in JetBrains YouTrack that allows for email spoofing through an...