SUSE-SU-2025:02198-2 Security update for runc

This update for runc fixes the following issues: - CVE-2024-45310: Fixed unintentional creation of empty files/directories on host bsc1230092 Other fixes: - Update to runc v1.2.6...

BIT-APACHE-2025-53020 Apache HTTP Server: HTTP/2 DoS by Memory Increase

Late Release of Memory after Effective Lifetime vulnerability in Apache HTTP Server. This issue affects Apache HTTP Server: from 2.4.17 up to 2.4.63. Users are recommended to upgrade to version 2.4.64, which fixes the issue...

PT-2025-29816 · Unknown · Uxper Sala

Name of the Vulnerable Software and Affected Versions: uxper Sala versions n/a through 1.1.3 Description: A missing authorization issue exists in uxper Sala, allowing access to functionality not properly constrained by Access Control Lists ACLs. Recommendations: Update uxper Sala to a version...

PT-2025-29753 · WordPress · Wpadverts

Name of the Vulnerable Software and Affected Versions: WPAdverts versions through 2.2.5 Description: The software contains a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update WPAdverts to a version later than 2.2.5...

PT-2025-29805 · Unknown · Funnelkit Funnel Builder

Name of the Vulnerable Software and Affected Versions: FunnelKit Funnel Builder versions through 3.10.2 Description: FunnelKit Funnel Builder is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This issue allows for potential SQL injectio...

PT-2025-29721 · WordPress · Real Estate Property 2024 Create Your Own Fields/Search Bar Wp Plugin

Name of the Vulnerable Software and Affected Versions: Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin versions through 4.48 Description: The Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin contains a missing authorization issue. This allows...

PT-2025-29783 · August Infotech · Multi-Language Responsive Contact Form

Name of the Vulnerable Software and Affected Versions: August Infotech Multi-language Responsive Contact Form versions through 2.8 Description: The Multi-language Responsive Contact Form software contains a missing authorization issue. Access to functionality is not properly constrained by Access...

PT-2025-29732 · Crocoblock +1 · Jetelements For Elementor +1

Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions through 2.7.7 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...

PT-2025-29722 · Unknown · Atakan Au Import Cdn-Remote Images

Name of the Vulnerable Software and Affected Versions: Atakan Au Import CDN-Remote Images versions n/a through 2.1.2 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Atakan Au Import CDN-Remote Images, which can lead to Stored Cross-Site Scripting XSS. Recommendations: Updat...

PT-2025-29875 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server APLS versions prior to 9.18 Description: An authentication bypass allows unauthorized access to the system. Recommendations: Update HPE AutoPass License Server to version 9.18 or later...

PT-2025-29872 · Hewlett Packard · Hpe Autopass License Server

Name of the Vulnerable Software and Affected Versions: HPE AutoPass License Server APLS versions prior to 9.18 Description: An hsqldb-related remote code execution vulnerability exists. Recommendations: Update HPE AutoPass License Server to version 9.18 or later...

PT-2025-29767 · WordPress · Bplugins Lightbox Block

Name of the Vulnerable Software and Affected Versions: bPlugins LightBox Block versions through 1.1.30 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS. This can lead to the execution of...

PT-2025-29893 · Lilin · Lilin Digital Video Recorder

Name of the Vulnerable Software and Affected Versions: LILIN Digital Video Recorder DVR versions prior to 2.0b60 20200207 Description: A command injection issue exists in LILIN Digital Video Recorder DVR devices. The web service at /z/zbin/dvr box does not properly sanitize input provided to the...

PT-2025-29797 · WordPress · Quanticalabs Css3 Compare Pricing Tables For Wordpress

Name of the Vulnerable Software and Affected Versions: QuanticaLabs CSS3 Compare Pricing Tables for WordPress versions through 11.6 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for reflected XSS...

PT-2025-29809 · Unknown +1 · Pimwick Pw Woocommerce On Sale! +1

Name of the Vulnerable Software and Affected Versions: pimwick PW WooCommerce On Sale! versions through 1.39 Description: A missing authorization flaw exists in pimwick PW WooCommerce On Sale! due to incorrectly configured access control security levels. Recommendations: Update pimwick PW...

PT-2025-29791 · WordPress +1 · Html5 Audio Player +1

Name of the Vulnerable Software and Affected Versions: HTML5 Radio Player - WPBakery Page Builder Addon versions through 2.5 Description: The HTML5 Radio Player - WPBakery Page Builder Addon is susceptible to a path traversal issue. This allows an attacker to access files outside of the intended...

PT-2025-29724 · Unknown · Parakoos Image Wall

Name of the Vulnerable Software and Affected Versions: Parakoos Image Wall versions through 3.1 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, leading to a Cross-site Scripting condition. This allows for Stored XSS attacks. Recommendations...

PT-2025-29740 · Crocoblock · Crocoblock Jetsearch

Name of the Vulnerable Software and Affected Versions: Crocoblock JetSearch versions through 3.5.10.1 Description: The software contains a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation...

PT-2025-29723 · Enituretechnology · Residential Address Detection

Name of the Vulnerable Software and Affected Versions: enituretechnology Residential Address Detection versions through 2.5.9 Description: The Residential Address Detection software contains a missing authorization flaw. This allows unauthorized access to functionality not properly constrained by...

PT-2025-29766 · WordPress · Responsive Addons For Elementor

Name of the Vulnerable Software and Affected Versions: CyberChimps Responsive Addons for Elementor versions through 1.7.3 Description: The software contains a cross-site scripting XSS issue due to improper neutralization of input during web page generation. This allows for stored XSS attacks...