PT-2025-18126

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to 15.4 Apple tvOS versions prior to 18.4 Apple macOS Ventura versions prior to 13.7.5 Apple iPadOS versions prior to 17.7.6 Apple macOS Sonoma versions prior to 14.7.5 Apple iOS versions prior to 18.4 Apple iPadOS...

PT-2025-13957 · Apple · Visionos +4

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: A logging issue was addressed with improved data redaction, which may have allowed an app to access...

PT-2025-13910 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A buffer overflow issue was addressed with improved memory handling, allowing an app to potentially execute arbitrary code with kernel...

PT-2025-18124 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 tvOS versions prior to 18.4 macOS Ventura versions prior to 13.7.5 iPadOS versions prior to 17.7.6 macOS Sonoma versions prior to 14.7.5 iOS versions prior to 18.4 iPadOS versions prior to 18.4 visionOS versions...

PT-2025-13875 · Apple · Safari +4

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 Description: The issue arises from incorrect association of a download's origin. This was addressed through improved...

PT-2025-13883 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: visionOS versions prior to 2.4 macOS Ventura versions prior to 13.7.5 tvOS versions prior to 18.4 iPadOS versions prior to 17.7.6 iOS versions prior to 18.4 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Descriptio...

PT-2025-13838 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal core versions 8.0.0 through 10.3.12 Drupal core versions 10.4.0 through 10.4.2 Drupal core versions 11.0.0 through 11.0.11 Drupal core versions 11.1.0 through 11.1.2 Description: The issue is related to an Improperly Controlled...

CVE-2025-30371

Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and v1.53.8 are vulnerable to circumvention of local link access protection in GeoJson endpoint. Self hosted Metabase instances that are using the GeoJson feature could be potential...

PT-2025-13607 · WordPress · Checkout Mestres Wp

Name of the Vulnerable Software and Affected Versions: Checkout Mestres do WP for WooCommerce plugin for WordPress versions 8.6.5 through 8.7.5 Description: The issue allows unauthorized modification of data, leading to privilege escalation due to a missing capability check on the cwmpUpdateOptio...

PT-2025-13608 · WordPress · So-Called Air Quotes

Name of the Vulnerable Software and Affected Versions: So-Called Air Quotes plugin for WordPress versions up to, and including, 0.1 Description: The issue allows unauthenticated attackers to execute arbitrary shortcodes due to the software not properly validating a value before running do...

GHSA-5VMP-M5V2-HX47 tough root metadata version is not checked for sequential versioning

Summary When updating the root role, a TUF client must establish a trusted line of continuity to the latest set of keys. While sequentially downloading new versions of the root metadata file, tough will not check that the root object version it received was the next sequential version from the...

PT-2025-13572 · Alizeait · Unflatto

Name of the Vulnerable Software and Affected Versions: alizeait unflatto versions 1.0.2 and earlier Description: The issue is related to a prototype pollution vulnerability via the exports.unflatto method at /dist/index.js. This allows attackers to execute arbitrary code or cause a Denial of...

PT-2025-13570 · Unknown · Aliconnect /Sdk

Name of the Vulnerable Software and Affected Versions: Aliconnect /sdk version 0.0.6 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via the aim function in the aim.js component. This issue enables attackers to potentially compromise systems by injecting...

PT-2025-13597 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue could disclose sensitive user credentials from log files during the new installation of the product. Recommendations: For IBM InfoSphere Information Server version 11.7,...

PT-2025-13641

Name of the Vulnerable Software and Affected Versions Generic Plus PCL6 Printer Driver versions 3.12 and earlier Generic Plus UFR II Printer Driver versions 3.12 and earlier Generic Plus LIPS4 Printer Driver versions 3.12 and earlier Generic Plus LIPSLX Printer Driver versions 3.12 and earlier...

PT-2025-13033 · WordPress · Export All Posts

Name of the Vulnerable Software and Affected Versions: Export All Posts, Products, Orders, Refunds & Users plugin for WordPress versions up to, and including, 2.13 Description: The issue is related to PHP Object Injection via deserialization of untrusted input in the returnMetaValueAsCustomerInpu...

PT-2025-13414

Name of the Vulnerable Software and Affected Versions Data::Entropy versions 0.007 and earlier Description The issue concerns the use of the rand function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Recommendations For Data::Entropy versio...

PT-2025-24373

Name of the Vulnerable Software and Affected Versions Quantenna Wi-Fi chipset versions prior to 8.0.0.28 Description The Quantenna Wi-Fi chipset ships with a local control script, transmit file, that is vulnerable to command injection. This issue is an instance of CWE-88, "Improper Neutralization...

PT-2025-13067 · WordPress · Wp Subscription Forms

Name of the Vulnerable Software and Affected Versions: WP Subscription Forms versions 1.2.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-24368 · Quantenna · Quantenna Wi-Fi Chipset

Name of the Vulnerable Software and Affected Versions: Quantenna Wi-Fi chipset versions prior to 8.0.0.29 Description: The Quantenna Wi-Fi chipset contains a local control script, router command.sh, that is vulnerable to command injection, specifically an instance of improper neutralization of...