Security Bulletin: Vulnerability in Elasticsearch (CVE-2023-49921) affects IBM Watson CP4D Data Stores

Summary A potential vulnerability CVE-2023-49921 has been identified related to Elasticsearch that may affect IBM Watson CP4D Data Stores. This vulnerability have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-49921 DESCRIPTION: An issue was...

PT-2025-16321 · Unknown · Vw Themes Industrial Lite

Name of the Vulnerable Software and Affected Versions: VW Themes Industrial Lite versions 1.0.0 through 1.0.8 Description: The issue is related to a Missing Authorization vulnerability, which allows the exploitation of incorrectly configured access control security levels. Recommendations: For...

PT-2025-16506 · Shapedplugin Llc · Real Testimonials

Name of the Vulnerable Software and Affected Versions: ShapedPlugin LLC Real Testimonials versions 3.1.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-16484

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Unauthenticated attackers can rename arbitrary devices of arbitrary users, specifically EV chargers. Recommendations At the moment, there is no information about a newer version that contains ...

PT-2025-16377 · Totolink · Totolink N600R

Name of the Vulnerable Software and Affected Versions: Totolink N600R version 4.3.0cu.7647 B20210106 Description: A stack overflow issue was discovered via the macCloneMac parameter in the setWanConfig function. Recommendations: For Totolink N600R version 4.3.0cu.7647 B20210106, consider...

PT-2025-16341 · Unknown · Perfreeblog

Name of the Vulnerable Software and Affected Versions: PerfreeBlog version 4.0.11 Description: A stored cross-site scripting vulnerability exists in the website name field of the backend system settings interface, allowing an attacker to insert and execute arbitrary malicious code. Recommendation...

PT-2025-16356 · Unknown +1 · Oncord+ Android Infotainment Systems +1

Name of the Vulnerable Software and Affected Versions: Oncord+ Android Infotainment Systems version Android 12 Description: The issue allows a remote attacker to execute arbitrary code via the ADB port component. Recommendations: For Oncord+ Android Infotainment Systems version Android 12, consid...

PT-2025-16411 · Oracle · Jd Edwards Enterpriseone Tools

Name of the Vulnerable Software and Affected Versions: JD Edwards EnterpriseOne Tools versions 9.2.0.0 through 9.2.9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools, requiring human interaction from a person other...

PT-2025-16491

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can obtain a serial number of a smart meters using its owner's username. Recommendations At the moment, there is no information about a newer version that contains ...

PT-2025-16468 · Oracle · Peoplesoft Enterprise Cc Common Application Objects

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise CC Common Application Objects version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CC Common Application Objects. Successful attacks can...

PT-2025-16391 · Teigarage · Teigarage

Name of the Vulnerable Software and Affected Versions: TEIGarage versions prior to 1.2.4 Description: The Document Conversion Service in TEIGarage contains a critical XML External Entity XXE Injection issue in its document conversion functionality. This allows an attacker to read arbitrary files...

PT-2025-16325 · Unknown · Royal Elementor Addons

Name of the Vulnerable Software and Affected Versions: Royal Elementor Addons versions 1.7.1006 and earlier Description: A Server-Side Request Forgery SSRF issue affects the software, allowing for Server Side Request Forgery. Recommendations: For Royal Elementor Addons versions 1.7.1006 and...

PT-2025-16459

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox version 7.1.6 Description The issue allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized...

PT-2025-16518 · Unknown · Gurmehub Kargo Entegratör

Name of the Vulnerable Software and Affected Versions: Gurmehub Kargo Entegratör versions 1.1.14 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-16364 · Bleachbit · Bleachbit

Name of the Vulnerable Software and Affected Versions: BleachBit versions prior to 4.9.0 BleachBit version 4.6.2 and earlier Description: BleachBit cleans files to free disk space and to maintain privacy. It is vulnerable to a DLL Hijacking issue. By placing a malicious DLL with the name uuid.dll...

PT-2025-16517 · WordPress · Wp Delete User Accounts

Name of the Vulnerable Software and Affected Versions: WP Delete User Accounts versions 1.2.3 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based Cross-site Scripting XSS. This enables potential attackers to...

PT-2025-16472

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can obtain a user's plant list by knowing the username. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-16359 · Unknown · Hitout Carsale

Name of the Vulnerable Software and Affected Versions: Hitout car sale version 1.0 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the orderBy parameter of the StoreController.java component. Recommendations: For version 1.0, consider restricting...

PT-2025-16447 · Oracle · Peoplesoft Enterprise Hcm Talent Acquisition Manager

Name of the Vulnerable Software and Affected Versions: PeopleSoft Enterprise HCM Talent Acquisition Manager version 9.2 Description: The issue allows a low-privileged attacker with network access via HTTP to compromise the system. Successful attacks require human interaction from a person other...

PT-2025-16403 · Oracle · Oracle Secure Backup

Name of the Vulnerable Software and Affected Versions: Oracle Secure Backup versions 12.1.0.1 through 12.1.0.3 Oracle Secure Backup versions 18.1.0.0 through 18.1.0.2 Description: The issue allows a high privileged attacker with logon to the infrastructure where Oracle Secure Backup executes to...