PT-2025-22525 · Unknown · Wire-Webapp

Name of the Vulnerable Software and Affected Versions: wire-webapp versions prior to 2025-05-14-production.0 Description: A regression issue in the function to delete local data causes the client's local database not to be deleted upon user logout, even when instructed to do so. This affects both...

PT-2025-22508 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie versions 1.3.0 through 1.15.12 Description: The issue arises from the failure of Api GetSecureParam to sanitize incoming pointers, implicitly trusting the pointer passed by the user as safe to write to. GetRegValue then writes the...

PT-2025-22475 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the DEBUG Command Handler component, which can be exploited remotely. The manipulation of this component leads to a buffer overflow. Recommendations: For FreeFlo...

PT-2025-22558 · Ocuco Innovation · Reports.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - REPORTS.EXE version 2.10.24.13 Description: The issue allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco Innovation - REPORTS.EXE version...

PT-2025-22551 · Ocuco Innovation · Appmanager.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation APPMANAGER.EXE version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the application manager function. Recommendations: For Ocuco Innovation APPMANAGER.EXE version 2.10.24.51, consider...

PT-2025-22451 · WordPress · Hot Random Image

Name of the Vulnerable Software and Affected Versions: Hot Random Image plugin for WordPress versions up to, and including, 1.9.2 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping. This allows authenticated attackers with...

PT-2025-22535 · Unknown +1 · Nexus Series +3

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: The issue is related to insufficient security of Windows permissions for ASPECT configuration toolsets, leading to exposure ...

IOLeak - CPU Side Channel Attacks

AMD ID: AMD-SB-7042 Potential Impact: N/A Severity: N/A Summary Researchers have provided AMD with a summary of relevant remarks and findings detailed in a paper titled “IOLeak Side-Channel Attack Exploiting CPU Frequency Scaling and I/O Latency.” AMD reviewed the summary and believes this attack...

PT-2025-22556 · Ocuco Innovation · Reportserver.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation - REPORTSERVER.EXE version 2.10.24.13 Description: An issue in the REPORTSERVER.EXE allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet. Recommendations: For Ocuco...

PT-2025-22461 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical vulnerability was found in the PROMPT Command Handler component of FreeFloat FTP Server, leading to a buffer overflow. This issue can be exploited remotely. The vulnerability is...

CVE-2009-10004

A vulnerability was found in Turante Sandbox Theme up to 1.5.2. It has been classified as problematic. This affects the function sandboxbodyclass of the file functions.php. The manipulation of the argument page leads to cross site scripting. It is possible to initiate the attack remotely. Upgradi...

CVE-2009-10003

A vulnerability was found in capnsquarepants wordcraft up to 0.6. It has been classified as problematic. Affected is an unknown function of the file tag.php. The manipulation of the argument tag leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 0.7 ...

CVE-2008-10004

A vulnerability was found in Email Registration 5.x-2.1 on Drupal. It has been declared as critical. This vulnerability affects the function emailregistrationuser of the file emailregistration.module. The manipulation of the argument namenew leads to sql injection. The attack can be initiated...

CVE-2007-10001

A vulnerability classified as problematic has been found in web-cyradm. This affects an unknown part of the file search.php. The manipulation of the argument searchstring leads to sql injection. It is recommended to apply a patch to fix this issue. The identifier VDB-217449 was assigned to this...

Security Bulletin: Vulnerability in jsonpath-plus affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.

Summary Potential vulnerability in jsonpath-plus has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. . The vulnerability have been addressed. Refer to details for additional information...

PT-2025-22328 · WordPress · Affiliate Sales In Google Analytics/Other Tools

Name of the Vulnerable Software and Affected Versions: The Affiliate Sales in Google Analytics and other tools plugin for WordPress versions up to, and including, 1.4.9 Description: The issue is due to insufficient validation on the redirect url supplied via the afflink parameter. This makes it...

PT-2025-22327

Name of the Vulnerable Software and Affected Versions Clickhouse versions prior to 19.14.3.3 Description A stack overflow leading to a denial of service DoS can be triggered by a malicious authenticated client. Recommendations For versions prior to 19.14.3.3, update to version 19.14.3.3 or later ...

PT-2025-22411 · Github · Github Desktop

Name of the Vulnerable Software and Affected Versions: GitHub Desktop versions prior to 3.4.20 Description: The issue affects GitHub Desktop users on Windows, where an attacker can cause information disclosure by convincing a user to view a malicious file in the history view. This happens because...

PT-2025-22375

Name of the Vulnerable Software and Affected Versions TYPO3 ns backup extension versions prior to 13.0.1 Description The issue allows for XSS. Recommendations For versions prior to 13.0.1, update to version 13.0.1 or later to resolve the issue...

PT-2025-22337 · WordPress · Wp Youtube Video Optimizer

Name of the Vulnerable Software and Affected Versions: WP YouTube Video Optimizer plugin for WordPress versions up to, and including, 1.2 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'ib youtube' shortcode due to insufficient input sanitization and output...