PT-2025-13947

Name of the Vulnerable Software and Affected Versions macOS versions prior to 15.4 Description The issue was addressed with improved memory handling. An app may be able to cause unexpected system termination. Recommendations For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the...

PT-2025-13921 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A downgrade issue was addressed with additional code-signing restrictions. This issue allows an app to potentially access protected user data. Recommendations: For versions prior to 15.4, update to...

PT-2025-13969 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 18.4 iPadOS versions prior to 18.4 Description: The issue was addressed with improved input sanitization. Processing a maliciously crafted file may lead to a cross-site scripting attack. Recommendations: For iOS versions...

PT-2025-13942 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A privacy issue was addressed by moving sensitive data to a protected location. An app may be able to observe unprotected user data. Recommendations: For versions prior to 15.4, update to macOS Sequoi...

PT-2025-13810 · Openemr · Openemr

Name of the Vulnerable Software and Affected Versions: OpenEMR versions prior to 7.0.3.1 Description: An Out-of-Band Server-Side Request Forgery OOB SSRF issue was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. This...

PT-2025-13963

Name of the Vulnerable Software and Affected Versions Safari versions prior to 18.4 visionOS versions prior to 2.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 and prior to 18.4 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description A use-after-free issue was...

PT-2025-13859 · Drupal · Drupal Profile Private

Name of the Vulnerable Software and Affected Versions: Drupal Profile Private version . Description: The issue affects the private profile functionality. Recommendations: For version ., consider updating to a newer version that addresses this issue, if available. At the moment, there is no...

PT-2025-23206 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: A permissions issue was addressed with additional restrictions. This issue may allow an app to read sensitive location information. Recommendations: For versions prior to 15.4, update to macOS Sequoia...

PT-2025-13800 · Beego · Beego

Name of the Vulnerable Software and Affected Versions: Beego versions prior to 2.3.6 Description: Beego is an open-source web framework for the Go programming language. A Cross-Site Scripting XSS vulnerability exists in the RenderForm function due to improper HTML escaping of user-controlled data...

PT-2025-13853 · Drupal · Drupal General Data Protection Regulation

Name of the Vulnerable Software and Affected Versions: Drupal General Data Protection Regulation versions 0.0.0 through 3.0.1, versions 3.1.0 through 3.1.2 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. This is a type of...

PT-2025-23208 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue was addressed with improved memory handling. An app may be able to corrupt coprocessor memory. Recommendations: For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the issue...

PT-2025-13873 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A buffer overflow issue was addressed with improved memory handling. This issue may allow an app to cause unexpected system termination or...

PT-2025-20755 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows an app to potentially break out of its sandbox. This was addressed by adding additional logic. Recommendations: For versions prior to 15.4, update to macOS Sequoia 15.4 to resolve the...

PT-2025-15076

Name of the Vulnerable Software and Affected Versions Poppler versions prior to 25.04.0 Description The issue allows crafted input files to trigger out-of-bounds reads in the JBIG2Bitmap::combine function due to a misplaced isOk check. This occurs in the JBIG2 parsing component of the software...

PT-2025-14579 · Winrar · Winrar

Name of the Vulnerable Software and Affected Versions: WinRAR versions prior to 7.11 Description: A security issue exists in WinRAR that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file. If a symbolic link specially...

PT-2025-13421 · Unknown +1 · String::Compare::Constanttime +1

Name of the Vulnerable Software and Affected Versions: String::Compare::ConstantTime versions prior to 0.322 Description: The issue allows an attacker to guess the length of a secret string through timing attacks. According to the documentation, if the lengths of the strings are different, the si...

Microsoft .NET End of Life (EOL) Detection

The Microsoft .NET product on the remote host has reached the End of Life EOL and should not be used anymore. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

PT-2025-13060 · Wpguppy · Wpguppy

Name of the Vulnerable Software and Affected Versions: WPGuppy versions 1.1.3 and earlier Description: The issue is related to an SQL Injection vulnerability, which allows attackers to exploit the system. This is due to the improper neutralization of special elements used in an SQL command...

PT-2025-13385 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.8 Description: A SQL Injection issue was identified in the "/WeGIA/html/socio/sistema/controller/query geracao auto.php" endpoint, specifically in the query parameter. This issue allows the execution of arbitrary S...

PT-2025-27475 · Unknown · Filebrowser

Name of the Vulnerable Software and Affected Versions: File Browser versions prior to 2.34.1 Description: The issue concerns a missing password policy and brute-force protection in the authentication process, making it insecure. Attackers could potentially mount a brute-force attack to retrieve t...