PT-2025-33567

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A race condition exists in the rxrpc subsystem where a call can be processed by multiple threads concurrently. This occurs when a call is placed on the socket queue and multiple thread...

PT-2025-29960 · Lenovo · Lenovo Browser

Name of the Vulnerable Software and Affected Versions: Lenovo Browser affected versions not specified Description: A cross-site scripting XSS issue exists in Lenovo Browser. This could allow an attacker to obtain sensitive information if a user visits a web page containing specially crafted...

PT-2025-29922 · Unknown · Oa Ekp Version 16

Name of the Vulnerable Software and Affected Versions: OA EKP version 16 Description: OA EKP version 16 contains an arbitrary download vulnerability within the /ui/sys ui extend/sysUiExtend.do component. This issue allows attackers to obtain the background administrator password and subsequently...

PT-2025-29712 · Unknown · Tech.Palm.Id

Name of the Vulnerable Software and Affected Versions: tech.palm.id affected versions not specified Description: An authentication issue exists in the mobile application that may result in information disclosure. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-29702 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The reported issue concerns a cross-site request forgery. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer...

PT-2025-29701 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The Apache HTTP Server is susceptible to a Cross-Site Request Forgery. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information...

PT-2025-29720 · Eclipse · Eclipse Glassfish

Name of the Vulnerable Software and Affected Versions: Eclipse GlassFish version 7.0.15 Description: Eclipse GlassFish version 7.0.15 is susceptible to Stored Cross-site scripting attacks within the Administration Console. Recommendations: At the moment, there is no information about a newer...

PT-2025-29698 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache Apache HTTP Server affected versions not specified Description: The reported issue concerns an authentication bypass. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a new...

PT-2025-29802 · WordPress · Profiler

Name of the Vulnerable Software and Affected Versions: Profiler - What Slowing Down Your WP versions n/a through 1.0.0 Description: The software contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations: Versions prior to 1.0.0 are affecte...

PT-2025-29695 · Unknown · Access Point

Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: Successful exploitation of the issue could allow an attacker with administrator credentials for the access point to inject malicious JavaScript into the payload of web traffic, potentially leading ...

PT-2025-29703 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The vulnerability is a cross-site request forgery. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer version...

PT-2025-29700 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The provided descriptions indicate a cross-site request forgery issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information...

PT-2025-29811 · Unknown · Shinetheme Traveler

Name of the Vulnerable Software and Affected Versions: shinetheme Traveler affected versions not specified Description: The software contains a SQL injection flaw due to improper neutralization of special elements used in an SQL command. This allows for potential SQL injection attacks...

PT-2025-29699 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The reported issue is a Cross-Site Request Forgery. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer versio...

PT-2025-29838 · Emlog · Emlog

Name of the Vulnerable Software and Affected Versions: Emlog versions through 2.5.17 Description: Emlog is a website building system. A cross-site scripting XSS issue exists in versions up to and including 2.5.17, allowing remote attackers to inject arbitrary web script or HTML via the comment an...

CVE-2025-53891 TIME LINE has Improper File Validation in Upload Section

The timelineofficial/Time-Line- repository contains the source code for the TIME LINE website. A vulnerability was found in the TIME LINE website where uploaded files instruction/message media are not strictly validated for type and size. A user may upload renamed or oversized files that can...

PT-2025-37212

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains an issue in the gfs2 subsystem related to the handling of migrate folio in gfs2 rgrp,meta aops. This resolves a warning that occurred in xfstests, leading to...

PT-2025-29620 · Oracle · Oracle Graalvm For Jdk +1

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM for JDK version 24.0.1 Description: A difficult-to-exploit issue exists in the Oracle GraalVM for JDK product of Oracle Java SE component: Native Image. An unauthenticated attacker with network access via HTTP can compromise...

PT-2025-29682 · Unknown · Gpt-Sovits-Webui

Name of the Vulnerable Software and Affected Versions: GPT-SoVITS-WebUI versions 20250228v3 and prior Description: GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. An unsafe deserialization issue exists in the inference webui.py file. The application takes user input via the gpt...

PT-2025-29588

Name of the Vulnerable Software and Affected Versions File Browser version 2.39.0 Description File Browser provides a file managing interface within a specified directory, allowing users to upload, delete, preview, rename, and edit files. The authentication system in version 2.39.0 issues...