PT-2025-16384

Name of the Vulnerable Software and Affected Versions Dpanel versions prior to 1.6.1 Description The Dpanel service contains a hardcoded JWT secret in its default configuration, allowing attackers to generate valid JWT tokens and compromise the host machine. This security flaw enables attackers t...

PT-2025-16352 · Mozilla +10 · Thunderbird +10

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 137.0.2 Thunderbird versions prior to 128.9.2 Description: The issue arises from Thunderbird's handling of the X-Mozilla-External-Attachment-URL header, which allows for external attachments. When an email is...

RHEL 6 : jbossweb (RHSA-2013:0631)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0631 advisory. JBoss Web is a web container based on Apache Tomcat. It provides a single deployment platform for the JavaServer Pages JSP and Java Servlet...

PT-2025-16325 · Unknown · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: Royal Elementor Addons versions 1.7.1006 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For Royal Elementor Addons versions 1.7.1006 and...

PT-2025-16356 · Unknown +1 · Oncord+ Android Infotainment Systems +1

Name of the Vulnerable Software and Affected Versions: Oncord+ Android Infotainment Systems version Android 12 Description: The issue allows a remote attacker to execute arbitrary code via the ADB port component. Recommendations: For Oncord+ Android Infotainment Systems version Android 12, consid...

PT-2025-16364 · Bleachbit · Bleachbit

Name of the Vulnerable Software and Affected Versions: BleachBit versions prior to 4.9.0 BleachBit version 4.6.2 and earlier Description: BleachBit cleans files to free disk space and to maintain privacy. It is vulnerable to a DLL Hijacking issue. By placing a malicious DLL with the name uuid.dll...

PT-2025-16403 · Oracle · Oracle Secure Backup

Name of the Vulnerable Software and Affected Versions: Oracle Secure Backup versions 12.1.0.1 through 12.1.0.3 Oracle Secure Backup versions 18.1.0.0 through 18.1.0.2 Description: The issue allows a high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to...

PT-2025-16484

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Unauthenticated attackers can rename arbitrary devices of arbitrary users, specifically EV chargers. Recommendations At the moment, there is no information about a newer version that contains ...

PT-2025-16400

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.41 Oracle MySQL versions 8.4.0 through 8.4.4 Oracle MySQL versions 9.0.0 through 9.2.0 Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise the...

PT-2025-16459 · Oracle · Virtualbox

Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox version 7.1.6 Description: The issue allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized...

PT-2025-16447 · Oracle · Peoplesoft Enterprise Hcm Talent Acquisition Manager

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other...

PT-2025-16377 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: Totolink N600R version 4.3.0cu.7647 B20210106 Description: A stack overflow issue was discovered via the macCloneMac parameter in the setWanConfig function. Recommendations: For Totolink N600R version 4.3.0cu.7647 B20210106, consider...

PT-2025-16391 · Teigarage · Teigarage

Name of the Vulnerable Software and Affected Versions: TEIGarage versions prior to 1.2.4 Description: The Document Conversion Service in TEIGarage contains a critical XML External Entity XXE Injection issue in its document conversion functionality. This allows an attacker to read arbitrary files...

PT-2025-16411 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools, requiring human interaction from a person other...

PT-2025-16359 · Unknown · Hitout Carsale

Name of the Vulnerable Software and Affected Versions: Hitout car sale version 1.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component. Recommendations: For version 1.0, consider restricting...

PT-2025-16468 · Oracle · Peoplesoft Enterprise Cc Common Application Objects

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise CC Common Application Objects version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks can...

PT-2025-16287 · Dell · Dell Trusted Device

Name of the Vulnerable Software and Affected Versions: Dell Trusted Device versions prior to 7.0.3.0 Description: Dell Trusted Device contains an Improper Link Resolution Before File Access 'Link Following' vulnerability. A low-privileged attacker with local access could potentially exploit this...

PT-2025-16451 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Teleservice, resulting in unauthorized access to critical data or complete acces...

PT-2025-16452 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks can result in unauthorized update,...

RHEL 6 : openstack-packstack (RHSA-2013:0595)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2013:0595 advisory. PackStack is a command line utility that uses Puppet modules to support rapid deployment of OpenStack on existing servers over an SSH...