PT-2025-20829

Name of the Vulnerable Software and Affected Versions Screen versions 5.0.0 Description The issue is related to the logfile reopen function in the GNU screen terminal multiplexer. When Screen runs with setuid-root privileges, it does not drop privileges while operating on a user-supplied path. Th...

PT-2025-20704 · Sudo-Rs · Sudo-Rs

Name of the Vulnerable Software and Affected Versions: sudo-rs versions prior to 0.2.6 Description: The issue allows users with limited sudo privileges to enumerate the sudoers file, revealing sensitive information about other users' permissions. This can be achieved using the -U flag. Attackers...

PT-2025-20799 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 Description: The issue was addressed with improved input sanitization. An app may be able to gain elevated privileges. Recommendations: For versions prior to 15.5, update to macOS Sequoia 15.5 to resolve the issue...

PT-2025-20619 · WordPress · The Wordpress Review Plugin

Name of the Vulnerable Software and Affected Versions: The WordPress Review Plugin: The Ultimate Solution for Building a Review Website versions up to, and including, 5.3.5 Description: The WordPress Review Plugin is vulnerable to Local File Inclusion, allowing authenticated attackers with...

SUSE SLES15 / openSUSE 15 Security Update : govulncheck-vulndb (SUSE-SU-2025:1520-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:1520-1 advisory. - Update to version 0.0.20250506T153719 2025-05-06T15:37:19Z jscPED-11136 GO-2025-3656 GO-2025-3661 GO-2025-3662 GO-2025-3663 GO-2025-3665...

SUSE SLES15: java-1_8_0-openjdk / java-1_8_0-openjdk-accessibility / etc (SUSE-SU-2025:1525-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1525-1 advisory. Update to version jdk8u452 icedtea-3.35.0 Security issues fixed: - CVE-2025-21587: unauthorized creation, deletion or...

PT-2025-27486

Name of the Vulnerable Software and Affected Versions Wing FTP Server versions prior to 7.4.4 Description Wing FTP Server contains an information disclosure issue in the loginok.html file. The vulnerability occurs when a long value is provided in the UID cookie. This allows a remote attacker to...

Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: Update to version 0.0.20250506T153719 2025-05-06T15:37:19Z jscPED-11136 GO-2025-3656 GO-2025-3661 GO-2025-3662 GO-2025-3663 GO-2025-3665 Update to version 0.0.20250505T161433 2025-05-05T16:14:33Z jscPED-11136 GO-2025-3645 GO-2025-3646...

SUSE-SU-2025:1520-1 Security update for govulncheck-vulndb

This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250506T153719 2025-05-06T15:37:19Z jscPED-11136 GO-2025-3656 GO-2025-3661 GO-2025-3662 GO-2025-3663 GO-2025-3665 - Update to version 0.0.20250505T161433 2025-05-05T16:14:33Z jscPED-11136 GO-2025-3645...

SUSE SLED15: libsqlite3-0 / libsqlite3-0-32bit / sqlite3 / sqlite3-devel / etc (SUSE-SU-2025:1456-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1456-1 advisory. - CVE-2025-29087,CVE-2025-3277: Fixed integer overflow in sqlite concat function bsc1241020 -...

PT-2025-20399 · Trix · Trix

Name of the Vulnerable Software and Affected Versions: Trix versions prior to 2.1.15 Description: The issue allows an attacker to execute arbitrary JavaScript code within the context of a user's session by tricking the user into copying and pasting malicious code. This could potentially lead to...

Oracle Linux 8 : thunderbird (ELSA-2025-4649)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2025-4649 advisory. 128.9.2-1.0.1 - Fix prefs for new nss Orabug: 37079820 - Add Oracle prefs file - Force use of gcc-toolset-13 due to clang dependency 128.9.2 - Add...

LibreOffice Improper Access Control vulnerability (May 2025) - Mac OS X

LibreOffice is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LibreOffice Improper Access Control vulnerability (May 2025) - Linux

LibreOffice is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-20424 · Phplist · Phplist

Name of the Vulnerable Software and Affected Versions: phpList versions prior to 3.6.15 Description: The issue is related to Cross-Site Scripting XSS due to improper input sanitization in lt.php. This can be exploited when the application dynamically references internal paths and processes...

CVE-2025-35939 Craft CMS stores user-provided content in session files

Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at...

python3.12-semantic_version bug fix and enhancement update

An update is available for python3.12-semanticversion. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see t...

PT-2025-20082 · Unknown · Listamester

Name of the Vulnerable Software and Affected Versions: Listamester versions prior to 2.3.7 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions prior to 2.3.7, update ...

PT-2025-20101 · Unknown · Gpt3 Ai Content Writer

Name of the Vulnerable Software and Affected Versions: GPT3 AI Content Writer versions 1.9.14 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the GPT3 AI Content Writer, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.9.1...

PT-2025-20207 · WordPress · Wp-Recall

Name of the Vulnerable Software and Affected Versions: WP-Recall versions through 16.26.14 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion', which allows PHP Local File Inclusion in...