PT-2025-6535 · WordPress · Maps Plugin Using Google Maps

Name of the Vulnerable Software and Affected Versions: Maps Plugin using Google Maps for WordPress versions prior to 1.9.4 Description: The issue concerns the Maps Plugin using Google Maps for WordPress, where versions prior to 1.9.4 do not properly sanitise and escape some of its settings. This...

CVE-2023-34478

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests. Mitigation: Update to Apache Shiro 1.12.0+ or 2.0.0-alpha...

PT-2025-7035

Name of the Vulnerable Software and Affected Versions: WP Event Aggregator versions 1.8.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can...

PT-2025-6768 · WordPress · Forminator Forms

Name of the Vulnerable Software and Affected Versions: The Forminator Forms WordPress plugin versions prior to 1.38.3 Description: The issue allows high privilege users, such as Admin, to perform Stored Cross-Site Scripting attacks, even when the unfiltered html capability is disallowed, for...

PT-2025-10625 · Mozilla +4 · Thunderbird +4

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 136 Thunderbird versions prior to 128.8 Description: The issue arises when requesting an OpenPGP key from a WKD server, where an incorrect padding size was used. This could allow a network observer to learn the...

PT-2025-6806 · Saadiqbal +2 · Advanced File Manager – Ultimate Wp File Manager/Document Library Solution +2

Name of the Vulnerable Software and Affected Versions: elFinder versions prior to 2.1.65 Description: Several WordPress plugins utilizing elFinder are susceptible to Directory Traversal, allowing unauthenticated attackers to delete arbitrary files. Exploitation requires the site owner to make an...

PT-2025-6972 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions 0.72 through 10.0.17 Description: The issue allows an anonymous user to disable all active plugins. The estimated number of potentially affected devices is not provided. There is no information about real-world incidents where...

PT-2025-6927 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions prior to 10.0.18 Description: The issue allows an administrator user to perform a SQL injection through the rules configuration forms. Recommendations: For versions prior to 10.0.18, update to version 10.0.18 to resolve the issu...

PT-2025-6973 · Unknown +2 · Oauthimap Plugin +2

Name of the Vulnerable Software and Affected Versions: GLPI versions 9.5.0 through 10.0.17 Description: The issue allows unauthorized access to GLPI when a "Mail servers" authentication provider is configured to use an Oauth connection provided by the OauthIMAP plugin, leveraging existing Oauth...

PT-2025-6643 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 16.0 through 17.6.5 GitLab EE versions 17.7 through 17.7.4 GitLab EE versions 17.8 through 17.8.2 Description: An issue was discovered in GitLab EE which allows an attacker to exfiltrate contents of a private issue using...

PT-2025-6642 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 24.2.19.5 Description: The issue is related to incorrect default permissions for some IntelR DSA installers for Windows, which may allow an authenticated user to potentially enable escalation of privilege via loca...

PT-2025-23053 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.13.0 through 2.1.0 Description: The issue affects Apache InLong, allowing attackers to bypass its security mechanisms and enabling arbitrary file reading due to a deserialization of untrusted data vulnerability...

Intel® Ethernet Adapter Complete Driver Pack Advisory

Summary: Potential security vulnerabilities in some Intel® Ethernet Adapter Complete Driver Pack may allow escalation of privilege or denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-24852 Description: Uncontrolled...

Intel® GPA and Intel® GPA Framework Software Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics Performance Analyzers Intel® GPA and Intel® Graphics Performance Analyzers Framework Intel® GPA Framework software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these...

PT-2025-6261 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9, and prior to 7.0.15 FortiOS versions 6.4.x Description: The issue is related to an incorrect privilege assignment in FortiOS, allowing an authenticated admin with the Security...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1172)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-11973

Name of the Vulnerable Software and Affected Versions GnuPG versions prior to 2.5.5 Description The issue arises when a user imports a certificate with crafted subkey data lacking a valid backsig or having incorrect usage flags, leading to a loss of ability to verify signatures made from certain...

PT-2025-6084

Name of the Vulnerable Software and Affected Versions: mintplex-labs/anything-llm versions prior to 1.3.1 Description: A vulnerability exists in mintplex-labs/anything-llm due to improper handling of non-ASCII filenames within the multer library. This can lead to path traversal, allowing attacker...

PT-2025-10637 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.88 Description: A use after free issue in the Inspector component of Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue...

PT-2025-5925 · Unknown · Child Themes Helper

Name of the Vulnerable Software and Affected Versions: Child Themes Helper versions n/a through 2.2.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Path Traversal. This means an attacker could potentially trick a user into performing unintended actions on a...