PT-2025-23745

Name of the Vulnerable Software and Affected Versions AudioService versions prior to SMR Jun-2025 Release 1 Description The issue is related to improper access control in the AudioService, allowing local attackers to access sensitive information. Recommendations For versions prior to SMR Jun-2025...

PT-2025-23742 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector versions prior to 4.2.0.241 Description: The issue is related to an improper verification of a loaded library, which may allow a local attacker to elevate their privileges. Recommendations: For versions prior to...

PT-2025-23846 · Freshrss · Freshrss

Name of the Vulnerable Software and Affected Versions: FreshRSS versions prior to 1.26.2 Description: FreshRSS is a self-hosted RSS feed aggregator. An attacker can gain additional information about the server by checking if certain directories exist, potentially discovering older PHP versions or...

PT-2025-23749

Name of the Vulnerable Software and Affected Versions Fingerprint trustlet versions prior to SMR May-2025 Release 1 Description The issue is related to improper access control in the fingerprint trustlet, allowing local privileged attackers to obtain an auth token. This can be exploited by...

WordPress FancyBox for WordPress plugin < 3.3.6 - Unauthenticated Stored XSS vulnerability

Unauthenticated Stored XSS vulnerability discovered by Pierre Rudloff, Marc Montpas in WordPress Plugin FancyBox for WordPress versions 3.3.6...

RHSA-2025:8427 Red Hat Security Advisory: pandoc security update

Bulletin has no description...

RHSA-2025:8411 Red Hat Security Advisory: krb5 security update

Bulletin has no description...

RHSA-2025:8391 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

WordPress Universal Video Player plugin <= 3.8.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao KhanhVCI - VNPT in WordPress Plugin Universal Video Player versions = 3.8.3...

JVN#05562338: Improper file access permission settings in PC Time Tracer

PC Time Tracer provided by Keiyo System Co., LTD contains a vulnerability listed below. Incorrect default permissions CWE-276 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Base Score 7.3 CVE-2025-46355 Impact Arbitrary...

PT-2025-23620 · Dell · Dell Encryption Admin Utilities

Name of the Vulnerable Software and Affected Versions: Dell Encryption Admin Utilities versions prior to 11.10.2 Description: The issue is related to an Improper Link Resolution, which could be exploited by a local malicious user, potentially leading to privilege escalation. Recommendations: For...

PT-2025-23628 · Ibm · Ibm Cloud Pak For Security +1

Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue arises because the software does not invalidate a session after a user logs out, potentially...

PT-2025-23649

Name of the Vulnerable Software and Affected Versions webpack-dev-server versions prior to 5.2.1 Description The issue allows an attacker to obtain source code via a method similar to that used to exploit a previously reported vulnerability. This is possible because webpack-dev-server always allo...

PT-2025-23635 · Ibm · Ibm Cloud Pak For Security +1

Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue allows an authenticated user to cause a denial of service due to improperly validating API dat...

SUSE SLED15 / SLES15 Security Update : sqlite3 (SUSE-SU-2025:01456-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:01456-1 advisory. - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function bsc1241020 - CVE-2025-29088:...

RHSA-2025:8347 Red Hat Security Advisory: kpatch-patch-4_18_0-372_118_1, kpatch-patch-4_18_0-372_131_1, kpatch-patch-4_18_0-372_137_1, and kpatch-patch-4_18_0-372_91_1 security update

Bulletin has no description...

PT-2025-27467 · Akamai · Akamai Cloudtest

Name of the Vulnerable Software and Affected Versions: Akamai CloudTest versions prior to 60 2025.06.02 12988 Description: Akamai CloudTest is susceptible to an XML External Entity XXE injection flaw. This allows for file inclusion by manipulating XML input, potentially leading to unauthorized...

PT-2025-23558 · WordPress · Wordpress Comments Import & Export

Name of the Vulnerable Software and Affected Versions: WordPress Comments Import & Export plugin versions up to 2.4.3 Description: The issue arises from a missing capability check on the save settings function and the failure to properly sanitize and escape FTP settings parameters. This allows...

PT-2025-23536 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB versions prior to 1.8.39 Description: The search component in MyBB does not validate permissions correctly, allowing attackers to determine the existence of hidden threads, including draft, unapproved, or soft-deleted threads, by analyzi...

PT-2025-23537

Name of the Vulnerable Software and Affected Versions SignXML versions prior to 4.0.4 Description The issue concerns a potential algorithm confusion attack when verifying signatures with X509 certificate validation turned off and HMAC shared secret set. This could allow an attacker to supply a...