12715 matches found
PT-2025-16417
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise MyS...
PT-2025-16419
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise MyS...
PT-2025-16405
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description A vulnerability in the MySQL Server product allows a high-privileged attacker with network access via...
PT-2025-16430
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0 Description A vulnerability in the MySQL Server product allows a high-privileged attacker with network access via...
PT-2025-16408 · Oracle +1 · Mysql Server
Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.4.0 through 9.0.0 Description: The issue allows a high-privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks can result in the unauthorized ability to cause a han...
PT-2025-16513 · Wpfactory · Wpfactory Additional Custom Product Tabs For Woocommerce
Name of the Vulnerable Software and Affected Versions: WPFactory Additional Custom Product Tabs for WooCommerce versions 1.7.0 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means...
PT-2025-16288 · Dell · Dell Trusted Device
Name of the Vulnerable Software and Affected Versions: Dell Trusted Device versions prior to 7.0.3.0 Description: Dell Trusted Device, versions prior to 7.0.3.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this...
PT-2025-16518 · Unknown · Gurmehub Kargo Entegratör
Name of the Vulnerable Software and Affected Versions: Gurmehub Kargo Entegratör versions 1.1.14 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
PT-2025-16525 · Unknown · Notfound Jetmenu
Name of the Vulnerable Software and Affected Versions: NotFound JetMenu versions n/d through 2.4.9 Description: The issue is related to a lack of authorization in NotFound JetMenu, allowing access to functionalities not properly constrained by Access Control Lists ACLs. Recommendations: For...
PT-2025-16316 · Unknown · Hockeydata Los
Name of the Vulnerable Software and Affected Versions: hockeydata LOS versions 1.2.4 and earlier Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...
PT-2025-16322 · Jetblog · Jetblog
Name of the Vulnerable Software and Affected Versions: JetBlog versions n/a through 2.4.3 Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For JetBlog versions n/a through 2.4.3,...
PT-2025-16313 · WordPress · Advance Wp Query Search Filter
Name of the Vulnerable Software and Affected Versions: Advance WP Query Search Filter versions 1.0.10 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the Advance WP Query...
PT-2025-16328 · Unknown · Epc Photography
Name of the Vulnerable Software and Affected Versions: EPC Photography versions through 7.5.2 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means an attacker could potentially force the server to make unintended requests, potentially leading to unauthorized acce...
PT-2025-16526 · Unknown · Fetch Designs Sign-Up Sheets
Name of the Vulnerable Software and Affected Versions: Fetch Designs Sign-up Sheets versions prior to 2.3.0.1 Description: The issue is related to improper control of code generation, allowing code injection. This problem enables the injection of code, potentially leading to unauthorized access o...
PT-2025-16517 · WordPress · Wp Delete User Accounts
Name of the Vulnerable Software and Affected Versions: WP Delete User Accounts versions 1.2.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This enables potential attackers to...
PT-2025-16511 · Unknown · Advanced Custom Fields Pro
Name of the Vulnerable Software and Affected Versions: NotFound Advanced Custom Fields: Link Picker Field versions 1.2.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected Cross-site Scripting XSS. This enables...
Mozilla Firefox Security Advisory (MFSA2025-25) - Linux
The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-25. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...
PT-2025-16352 · Mozilla +10 · Thunderbird +10
Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 137.0.2 Thunderbird versions prior to 128.9.2 Description: The issue arises from Thunderbird's handling of the X-Mozilla-External-Attachment-URL header, which allows for external attachments. When an email is...
CVE-2025-32428 Jupyter Remote Desktop Proxy makes TigerVNC accessible via the network and not just via a UNIX socket as intended
Jupyter Remote Desktop Proxy allows you to run a Linux Desktop on a JupyterHub. jupyter-remote-desktop-proxy was meant to rely on UNIX sockets readable only by the current user since version 3.0.0, but when used with TigerVNC, the VNC server started by jupyter-remote-desktop-proxy were still...