PT-2025-49827

Name of the Vulnerable Software and Affected Versions RUGGEDCOM ROX II versions prior to 2.17.0 Description A flaw exists in the RUGGEDCOM ROX II family that allows for the injection of additional configuration parameters during Dynamic DNS configuration. An attacker could potentially exploit thi...

PT-2025-49965

Name of the Vulnerable Software and Affected Versions JNews Paywall versions prior to 12.0.1 Description A Cross-Site Request Forgery CSRF issue exists in JNews Paywall. This allows attackers to perform actions on behalf of an authenticated user without their knowledge. Recommendations Update JNe...

PT-2025-49936

Name of the Vulnerable Software and Affected Versions Image Caption Hover Pro versions prior to 20.0 Description An authorization issue exists in WebCodingPlace Image Caption Hover Pro image-caption-hover-pro, allowing exploitation due to incorrectly configured access control security levels...

PT-2025-49835

A vulnerability has been identified in Gridscale X Prepay All versions V4.2.1. The affected application is vulnerable to capture-replay of authentication tokens. This could allow an authenticated but already locked-out user to establish still valid user sessions...

Linux Distros Unpatched Vulnerability : CVE-2025-14321

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6...

Linux Distros Unpatched Vulnerability : CVE-2025-14330

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird...

WordPress Just TinyMCE Custom Styles plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Just TinyMCE Custom Styles versions = 1.2.1...

firefox: thunderbird: Incorrect boundary conditions in the JavaScript: WebAssembly component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the JavaScript: WebAssembly component...

firefox: thunderbird: Spoofing issue in Firefox

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in Firefox...

WordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin JNews Paywall versions 12.0.1...

CVE-2025-55552 affecting package pytorch for versions less than 2.0.0-10

CVE-2025-55552 affecting package pytorch for versions less than 2.0.0-10. A patched version of the package is available...

CVE-2025-61729 affecting package msft-golang for versions less than 1.24.11-1

CVE-2025-61729 affecting package msft-golang for versions less than 1.24.11-1. A patched version of the package is available...

CVE-2025-55552 affecting package pytorch for versions less than 2.2.2-8

CVE-2025-55552 affecting package pytorch for versions less than 2.2.2-8. A patched version of the package is available...

CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-5

CVE-2025-12970 affecting package fluent-bit for versions less than 3.0.6-5. A patched version of the package is available...

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12969 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1

CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6

CVE-2025-12977 affecting package fluent-bit for versions less than 3.0.6-6. A patched version of the package is available...

CVE-2025-66031 affecting package reaper for versions less than 3.1.1-21

CVE-2025-66031 affecting package reaper for versions less than 3.1.1-21. A patched version of the package is available...

CVE-2025-66030 affecting package reaper for versions less than 3.1.1-21

CVE-2025-66030 affecting package reaper for versions less than 3.1.1-21. A patched version of the package is available...

CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1

CVE-2025-65018 affecting package libpng for versions less than 1.6.51-1. An upgraded version of the package is available that resolves this issue...