PT-2025-13960 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: A logging issue was addressed with improved data redaction. Deleting a conversation in Messages may expose user contact...

PT-2025-13940 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: The issue allows an app to potentially modify protected parts of the file system due to inadequate checks. Recommendations:...

PT-2025-13898

Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 18.4 Apple Safari versions prior to 18.4 Apple iPadOS versions prior to 17.7.6 and 18.4 Apple iOS versions prior to 18.4 Apple macOS Sequoia versions prior to 15.4 Description A buffer overflow issue was addressed...

PT-2025-13846 · Drupal · Drupal Google Tag

Name of the Vulnerable Software and Affected Versions: Drupal Google Tag versions 0.0.0 through 1.7.x Drupal Google Tag versions 2.0.0 through 2.0.7 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allow...

PT-2025-13837 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal core versions 8.0.0 through 10.3.12 Drupal core versions 10.4.0 through 10.4.2 Drupal core versions 11.0.0 through 11.0.11 Drupal core versions 11.1.0 through 11.1.2 Description: The issue is related to an Incorrect Authorization...

PT-2025-18132 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 and 18.4 macOS Sonoma versions prior to 14.7.5 iOS versions prior to 18.4 watchOS versions prior to 11.4 visionOS versions prior to 2.4 Description: The...

PT-2025-13797 · Tuleap · Tuleap

Name of the Vulnerable Software and Affected Versions: Tuleap versions prior to 16.5.99.1742392651 Tuleap Enterprise Edition versions prior to 16.5-5 and 16.4-8 Description: The issue concerns the lack of enforcement of read permissions on parent trackers in the REST API. This affects the...

PT-2025-13893

Name of the Vulnerable Software and Affected Versions macOS versions prior to 13.7.5 iPadOS versions prior to 17.7.6 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 iOS versions 16.0 through 18.3.2 Description The issue involves inadequate access control mechanisms,...

PT-2025-13809 · Unknown · Sayski Forestblog

Name of the Vulnerable Software and Affected Versions: Sayski ForestBlog versions up to 20250321 Description: A vulnerability has been found in Sayski ForestBlog, affecting an unknown functionality of the file /search. The manipulation of the keywords argument leads to cross-site scripting. The...

PT-2025-13990 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: A library injection issue was addressed with additional restrictions. Apps that appear to use App Sandbox may be able to...

PT-2025-13890 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 iOS versions prior to 18.4 iPadOS versions prior to 18.4 iPadOS versions prior to 17.7.6 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: This issue allows an attacker with...

PT-2025-13932 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: The issue allows a malicious app acting as a HTTPS proxy to access sensitive user data. This is achieved through inadequate...

PT-2025-13945 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A buffer overflow issue was addressed with improved bounds checking. This issue may allow an app to cause unexpected system termination...

PT-2025-13957 · Apple · Visionos +4

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: A logging issue was addressed with improved data redaction, which may have allowed an app to access...

PT-2025-31283 · Apple · Macos Sequoia +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Sonoma 14.7.7 macOS versions prior to Ventura 13.7.7 macOS versions prior to Sequoia 15.4 Description: A shortcut may be able to bypass sensitive Shortcuts app settings. This issue was addressed by adding an additional...

PT-2025-13839 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal core versions 8.0.0 through 10.3.13 Drupal core versions 10.4.0 through 10.4.4 Drupal core versions 11.0.0 through 11.0.12 Drupal core versions 11.1.0 through 11.1.4 Description: The issue affects Drupal core, allowing Cross-Site...

PT-2025-13900 · Apple · Macos Sequoia +7

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 macOS Ventura versions prior to 13.7.5 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Descriptio...

PT-2025-13671 · Legrand · Legrand Sms Powerview

Name of the Vulnerable Software and Affected Versions: Legrand SMS PowerView versions 1.x Description: A critical issue has been discovered, affecting an unknown functionality. The manipulation of the redirect argument leads to os command injection. The exploit has been publicly disclosed. There ...

PT-2025-13812

Name of the Vulnerable Software and Affected Versions Vite versions 4.5.11, 5.4.16, 6.0.13, 6.1.3, and 6.2.4 Description Vite, a frontend tooling framework for JavaScript, has an issue where it exposes the content of non-allowed files through the use of the ?inline&import or ?raw?import query...

PT-2025-14002 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: An issue exists where an app may be able to modify protected parts of the file system. This issue was addressed by removing the vulnerable...