PT-2025-33857 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions 7.4.0 through 7.4.3.132 Liferay DXP versions 2024.Q1.1 through 2024.Q1.19 Liferay DXP versions 2024.Q2.0 through 2024.Q2.13 Liferay DXP versions 2024.Q3.1 through 2024.Q3.13 Liferay DXP versions 2024.Q4.0 through...

PT-2025-33750 · N8N · N8N

Name of the Vulnerable Software and Affected Versions: n8n versions 1.77.0 through 1.98.1 Description: n8n is a workflow automation platform. A stored Cross-Site Scripting XSS vulnerability exists in the Form Trigger node's HTML form element. An authenticated attacker can inject malicious HTML vi...

PT-2025-33736 · WordPress · Jonkastonka Cookies/Content Security Policy

Name of the Vulnerable Software and Affected Versions: jonkastonka Cookies and Content Security Policy plugin versions through 2.29 Description: Incorrect access control in the AJAX endpoint functionality allows remote attackers to cause a denial of service database server resource exhaustion via...

PT-2025-33707 · WordPress · Media Library Assistant

Name of the Vulnerable Software and Affected Versions: Media Library Assistant plugin for WordPress versions up to and including 3.27 Description: The Media Library Assistant plugin for WordPress is susceptible to arbitrary file deletion within the /wp-content/uploads directory. This is due to...

Linux Distros Unpatched Vulnerability : CVE-2022-39282

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free remote desktop protocol library and clients. FreeRDP based clients on unix systems using /parallel command line switch might read uninitialize...

CVE-2025-54472

Unlimited memory allocation in redis protocol parser in Apache bRPC all versions 1.14.1 on all platforms allows attackers to crash the service via network. Root Cause: In the bRPC Redis protocol parser code, memory for arrays or strings of corresponding sizes is allocated based on the integers re...

Linux Distros Unpatched Vulnerability : CVE-2025-30195

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses an...

PT-2025-33463 · WordPress · Icons Factory

Name of the Vulnerable Software and Affected Versions: Icons Factory plugin for WordPress versions up to and including 1.6.12 Description: The Icons Factory plugin for WordPress is vulnerable to Arbitrary File Deletion due to insufficient authorization and improper path validation within the dele...

PT-2025-33357 · Dell · Dell Data Lakehouse

Name of the Vulnerable Software and Affected Versions: Dell Data Lakehouse versions prior to 1.5.0.0 Description: Dell Data Lakehouse is susceptible to an Execution with Unnecessary Privileges issue. A local attacker with high privileges could potentially exploit this, resulting in a Denial of...

PT-2025-33147

Name of the Vulnerable Software and Affected Versions: Flowise versions prior to 3.0.1 Description: Flowise, a software platform for building user interfaces over language models LLM, has a missing authentication check for a critical function. This allows remote, unauthenticated attackers to...

PT-2025-33161 · Themeatelier · Idonatepro

Name of the Vulnerable Software and Affected Versions: IDonatePro versions n/d through 2.1.9 Description: A missing authorization flaw in ThemeAtelier IDonatePro allows exploitation due to incorrectly configured access control security levels. Recommendations: Update IDonatePro to a version later...

PT-2025-33188 · Unknown · Soundst Seo Search

Name of the Vulnerable Software and Affected Versions: SoundSt SEO Search versions through 1.2.3 Description: The software contains a reflected cross-site scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Versions prior to 1.2.3 should be...

PT-2025-33163 · WordPress · Wp Links Page

Name of the Vulnerable Software and Affected Versions: WP Links Page versions through 4.9.6 Description: The software contains an improper neutralization of special elements used in an SQL command, which allows for SQL injection. Recommendations: Update WP Links Page to a version later than 4.9.6...

PT-2025-33379 · Unknown · Apustheme Findgo

Name of the Vulnerable Software and Affected Versions: ApusTheme Findgo versions through 1.3.57 Description: A Cross-Site Request Forgery CSRF vulnerability exists in ApusTheme Findgo, allowing attackers to perform actions on behalf of an unsuspecting user. Recommendations: Update ApusTheme Findg...

PT-2025-33216 · Unity Business Technology Pty · The E-Commerce Erp

Name of the Vulnerable Software and Affected Versions: The E-Commerce ERP versions n/a through 2.1.1.3 Description: A missing authorization flaw exists in Unity Business Technology Pty Ltd The E-Commerce ERP. This issue allows access to functionality that is not properly restricted by Access...

PT-2025-33402 · Crocoblock +1 · Jetelements For Elementor +1

Name of the Vulnerable Software and Affected Versions: Crocoblock JetElements For Elementor versions through 2.7.9 Description: Improper neutralization of input during web page generation allows for Stored Cross-site Scripting XSS. Recommendations: Update Crocoblock JetElements For Elementor to a...

CVE-2025-8908 Shanghai Lingdang Information Technology Lingdang CRM event.php sql injection

A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinApp/yunzhijia/event.php. The manipulation of the argument openid leads to sql injection. The attack may be launched...

PT-2025-34542 · Swifturl · Github.Com/Apple/Swift-Nio-Http2

The HTTP/2 MadeYouReset vulnerability has a mild effect on swift-nio-http2. swift-nio-http2 mostly protects against MadeYouReset by using a number of existing denial-of-service prevention patterns that we added in response to the RapidReset vulnerabilities. The result is that servers are not...

PT-2025-32951 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8 through 2022.6 Description: Adobe Framemaker is susceptible to a Use After Free issue that may lead to arbitrary code execution with the privileges of the current user. A user must open a specially crafted fil...

Siemens SINEC Traffic Analyzer

SUMMARY SINEC Traffic Analyzer before V3.0 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC Traffic Analyzer and recommends to update to the latest version. Siemens is preparing further fix versions and recommends countermeasures for products where fixes are...