PT-2025-14704 · Unknown · Wptobe-Signinup

Name of the Vulnerable Software and Affected Versions: Wptobe-signinup versions 1.1.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attackers to injec...

PT-2025-14581 · WordPress · Mappress Maps

Name of the Vulnerable Software and Affected Versions: MapPress Maps for WordPress versions prior to 2.94.9 Description: The issue concerns the MapPress Maps plugin for WordPress, where certain parameters are not properly sanitized and escaped when displayed on the page. This could allow users wi...

PT-2025-14735 · Unknown · Textme Sms

Name of the Vulnerable Software and Affected Versions: TextMe SMS versions 1.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For TextMe SMS versions 1.9.1 an...

DSA-5892-1 atop - security update

Bulletin has no description...

CVE-2025-24269

The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to cause unexpected system termination...

CVE-2025-27608 Self Cross-Site Scripting in Arduino IDE

Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting XSS vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the...

RHSA-2025:3490 Red Hat Security Advisory: Satellite 6.16.4 Async Update

Bulletin has no description...

RHSA-2025:3465 Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.21 security update

Bulletin has no description...

PT-2025-14548

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions 29 through 36.2 Description The issue is related to improper input validation in the signalling component, allowing remote attackers to trigger a temporary denial of service, resulting in a software abort. Recommendatio...

PT-2025-14566

Name of the Vulnerable Software and Affected Versions Apache Traffic Server versions 9.2.0 through 9.2.9 Apache Traffic Server versions 10.0.0 through 10.0.4 Description The issue affects Apache Traffic Server when chunked messages are malformed, allowing request smuggling. Users are recommended ...

PT-2025-14551 · Arduino · Arduino Ide

Name of the Vulnerable Software and Affected Versions: Arduino IDE versions prior to 2.3.5 Description: A Self Cross-Site Scripting XSS vulnerability has been identified in the Arduino IDE. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the Preferences ...

PT-2025-19697 · Opensuse +1 · Govulncheck-Vulndb

Name of the Vulnerable Software and Affected Versions: govulncheck-vulndb versions prior to 0.0.20250327T184518 Description: This update addresses multiple issues within govulncheck-vulndb. Recommendations: Update to version 0.0.20250327T184518 or later. Update to version 0.0.20250331T171002 or...

PT-2025-14555 · Obfuscate · Obfuscate

Name of the Vulnerable Software and Affected Versions: Obfuscate versions 0.0.0 through 2.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored XSS. This means that an attacker can inject malicious scripts into the website,...

PT-2025-14512 · Jenkins · Jenkins Templating Engine Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Templating Engine Plugin versions 2.5.3 and earlier Description: The issue allows attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM, due to libraries defined in folders not...

WordPress Publitio Plugin <= 2.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Publitio versions = 2.1.8...

CVE-2025-21904 caif_virtio: fix wrong pointer check in cfv_probe()

In the Linux kernel, the following vulnerability has been resolved: caifvirtio: fix wrong pointer check in cfvprobe delvqs frees virtqueues, therefore cfv-vqtx pointer should be checked for NULL before calling it, not cfv-vdev. Also the current implementation is redundant because the pointer...

CVE-2025-31121 OpenEMR allows XSS in Patient Image feature

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 7.0.3.1, the Patient Image feature in OpenEMR is vulnerable to cross-site scripting attacks via the EXIF title in an image. This vulnerability is fixed in 7.0.3.1...

RHSA-2025:3407 Red Hat Security Advisory: freetype security update

Bulletin has no description...

PT-2025-14090 · Unknown · Welcart E-Commerce

Name of the Vulnerable Software and Affected Versions: Welcart e-Commerce versions 2.11.6 and earlier Description: The issue concerns an untrusted data deserialization vulnerability. If exploited, this could allow a remote unauthenticated attacker to execute arbitrary code and access websites...

PT-2025-14420 · Mad Fish Digital · Mad Fish Digital Bulk Noindex & Nofollow Toolkit

Name of the Vulnerable Software and Affected Versions: madfishdigital Bulk NoIndex & NoFollow Toolkit versions n/a through 2.16 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. This enable...