PT-2025-5210

Name of the Vulnerable Software and Affected Versions WordPress Local SEO versions prior to 2.3 Description The issue is related to improper neutralization of special elements used in an SQL command, allowing Blind SQL Injection. This problem enables attackers to inject malicious SQL code,...

CVE-2025-21540

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple...

CVE-2025-21541

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Admin Screens and Grants UI. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow...

PT-2025-4544

Name of the Vulnerable Software and Affected Versions NotFound Multiple Carousel versions n/a through 2.0 Description The issue is related to improper neutralization of special elements used in SQL commands, allowing SQL Injection attacks. This enables attackers to inject malicious SQL code,...

CVE-2024-51462 IBM QRadar WinCollect Agent data manipulation

IBM QRadar WinCollect Agent 10.0.0 through 10.1.12 could allow a remote attacker to inject XML data into parameter values due to improper input validation of assumed immutable data...

CVE-2024-51462

IBM QRadar WinCollect Agent (Windows) versions 10.0.0–10.1.12 are affected by CVE-2024-51462 due to improper input validation of assumed immutable data, enabling a remote attacker to inject XML data into parameter values and potentially modify data. Remediation is to upgrade to WinCollect Standal...

PT-2025-3392

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.2.0 Description The issue concerns SQL Injection in the /funcionario/remuneracao.php endpoint via the id funcionario parameter. This allows for potential unauthorized access and manipulation of data. Recommendations F...

CVE-2025-22964

DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by directly incorporating user-supplied...

CVE-2024-55945

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2024-55945

TYPO3 is a free and open source Content Management Framework. A vulnerability has been identified in the backend user interface functionality involving deep links. Specifically, this functionality is susceptible to Cross-Site Request Forgery CSRF. Additionally, state-changing actions in downstrea...

CVE-2024-29980

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...

CVE-2024-29979

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...

CVE-2024-29980

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...

CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...

CVE-2024-29980 Unsafe Handling of IHV UEFI Variables

Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...

CVE-2024-29980

CVE-2024-29980 affects Phoenix SecureCore software across Intel Kaby Lake, Coffee Lake, Comet Lake and Ice Lake. Root cause: improper check for unusual or exceptional conditions leading to input data manipulation. Affected versions: Kaby Lake before 4.0.1.1012; Coffee Lake before 4.1.0.568; Comet...

CVE-2024-29979

CVE-2024-29979 affects Phoenix SecureCore on Intel Kaby Lake, Coffee Lake, Comet Lake and Ice Lake. The vulnerability is an Improper Check for Unusual or Exceptional Conditions that allows Input Data Manipulation. Affected versions are: Kaby Lake before 4.0.1.1012; Coffee Lake before 4.1.0.568; C...

Vulnerabilities fixed in Siemens products

Siemens has fixed vulnerabilities in various products such as Industrial Edge Management, Mendix, SIMATIC, SIPROTEC and Siveillance. The vulnerabilities potentially enable a malicious person to carry out attacks that can lead to the following categories of damage: - Cross-Site Scripting XSS. -...

CVE-2025-0061

SAP BusinessObjects Business Intelligence Platform is affected by CVE-2025-0061, an unauthenticated information-disclosure vulnerability that enables session hijacking over the network. The issue allows an attacker to access and modify all data in the application without user interaction. Impact ...

PT-2025-2403

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore™ for Intel Kaby Lake versions prior to 4.0.1.1012 Phoenix SecureCore™ for Intel Coffee Lake versions prior to 4.1.0.568 Phoenix SecureCore™ for Intel Comet Lake versions prior to 4.2.1.292 Phoenix SecureCore™ for Intel Ice...