java-21-openjdk security update

1:21.0.8.0.9-1.0.1 - Add Oracle vendor bug URL Orabug: 34340155 1:21.0.8.0.9-1.1 - Update to jdk-21.0.8+9 GA - Update release notes to 21.0.8+9 - Switch to GA mode - Sync the copy of the portable specfile with the latest update - This tarball is embargoed until 2025-07-15 @ 1pm PT. - Resolves:...

PT-2025-31168 · WordPress · Bricks Theme For Wordpress

Name of the Vulnerable Software and Affected Versions: Bricks theme for WordPress versions prior to 1.12.5 Description: The Bricks theme for WordPress is susceptible to a blind SQL Injection issue via the p parameter. Insufficient escaping of user-supplied input and inadequate preparation of...

PT-2025-31271 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A logic issue existed due to insufficient checks. Processing maliciously crafted web content may lead to an unexpected Safari crash. Recommendations: Update to macOS version 15.6...

PT-2025-31221 · Grandstream Networks · Gxp1628

Name of the Vulnerable Software and Affected Versions: Grandstream Networks GXP1628 versions 1.0.4.130 and earlier Description: The Grandstream Networks GXP1628 device is susceptible to incorrect access control due to directory listing being enabled. This allows unauthorized access to sensitive...

PT-2025-31702

Name of the Vulnerable Software and Affected Versions Cursor versions 1.2.4 and earlier Description Cursor is a code editor designed for AI-assisted programming. A flaw, dubbed MCPoison CVE-2025-54136, allows attackers to achieve remote and persistent code execution. This is accomplished by...

PT-2025-31341 · Bma · Bma

Name of the Vulnerable Software and Affected Versions: BMA affected versions not specified Description: The BMA login interface allows arbitrary JavaScript or HTML to be written directly into the page’s Document Object Model DOM via the error= URL parameter. This can lead to potential cross-site...

PT-2025-31251 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Nipah virus NiV Testing Management System version 1.0 Description: phpgurukul Nipah virus NiV Testing Management System 1.0 contains a SQL injection vulnerability in the /new-user-testing.php file, due to insufficient validation of...

PT-2025-31326 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: An authorization issue was addressed with improved state management. A local attacker may gain access to Keychain items. Recommendations: Update to macOS version 15.6...

PT-2025-31199 · Sandboxie · Sandboxie

Name of the Vulnerable Software and Affected Versions: Sandboxie versions 1.16.1 and earlier Description: Sandboxie is a sandbox-based isolation software for 32-bit and 64-bit Windows NT-based operating systems. A critical security issue exists in password handling mechanisms. During encrypted...

PT-2025-31256 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions 13.8.0 and below Description: Piwigo versions 13.8.0 and below are vulnerable to SQL Injection in the parameters max level and min register. These parameters are used in the ws user gerList function from the file includews...

PT-2025-31189 · WordPress · Appzend

Name of the Vulnerable Software and Affected Versions: Appzend versions prior to 1.2.7 Description: The Appzend theme for WordPress is susceptible to Stored Cross-Site Scripting through the progressbarLayout parameter. Insufficient input sanitization and output escaping allow authenticated...

PT-2025-31286 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A permissions issue was addressed with additional restrictions. A malicious app may be able to gain root privileges. Recommendations: Update to macOS version 15.6...

PT-2025-31281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A memory corruption issue was addressed with improved validation. Processing a maliciously crafted file may lead to heap corruption. Recommendations: Update to version 15.6...

PT-2025-31347 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: An out-of-bounds read issue was addressed through improved input validation. Processing a maliciously crafted USD file may lead to the disclosure of memory contents. Recommendations: Update to macOS...

PT-2025-31219 · Grandstream · Grandstream Ucm6510

Name of the Vulnerable Software and Affected Versions: Grandstream UCM6510 versions prior to 1.0.20.53 Description: An issue allows a remote attacker to obtain sensitive information via the Login function. The vulnerable endpoints are /cgi and /webrtccgi. Recommendations: Update to version...

PT-2025-31284 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: A flaw allows an application to potentially access protected user data due to a downgrade issue. This issue was addressed with additional code-signing restrictions. Recommendations: Update to macOS...

PT-2025-31314 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.6 Description: The issue involves improved memory handling. An application may be able to cause a denial-of-service. Recommendations: Update to version 15.6...

PT-2025-31269

Name of the Vulnerable Software and Affected Versions BentoML versions 1.4.0 through 1.4.19 Description BentoML contains a Server-Side Request Forgery SSRF issue in the file upload processing system. This allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests...

Atlassian Jira Service Management Data Center and Server < 5.12.25 / 10.3.x < 10.3.8 / 10.7.x < 10.7.2 (JSDSERVER-16309)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16309 advisory. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue...

PT-2025-31183 · WordPress · Fan Page

Name of the Vulnerable Software and Affected Versions: Fan Page plugin for WordPress versions up to and including 1.0.1 Description: The plugin is susceptible to Stored Cross-Site Scripting through the width parameter due to inadequate input sanitization and output escaping. This allows...