Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2025-813)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-813 advisory. Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for wri...

PT-2025-5531 · Wow Company · Wow-Company Modal Window

Name of the Vulnerable Software and Affected Versions: Wow-Company Modal Window versions through 6.1.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This can be achieved by tricking the user...

PT-2025-3408 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 0.8.0 Description: The issue is a heap-based buffer overflow in the gf m2ts process pmt function in media tools/mpegts.c:2163, which can cause a denial of service DOS via a crafted MP4 file. This can be exploited when processing ...

Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2025-814)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-814 advisory. Time-of-check Time-of-use TOCTOU Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for wri...

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in rexml-3.3.6.gem

Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of rexml-3.3.6.gem . Vulnerability Details CVEID:CVE-2024-49761 DESCRIPTION: REXML is an XML toolkit for Ruby. The REXML gem before 3.3.9 has a ReDoS vulnerability when it parses an XML that has many digits...

PT-2025-3426 · Unknown · Online Pizza Delivery System

Name of the Vulnerable Software and Affected Versions: Online Pizza Delivery System version 1.0 Description: A Reflected Cross-Site Scripting XSS vulnerability exists in the search.php file of the Online Pizza Delivery System. The vulnerability allows an attacker to execute arbitrary JavaScript...

PT-2025-2237 · WordPress · Listamester

Name of the Vulnerable Software and Affected Versions: Listamester plugin for WordPress versions up to and including 2.3.4 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'listamester' shortcode due to insufficient input sanitization and output escaping on...

PT-2025-2997 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon Web versions 23.04.x through 23.04.23 Centreon Web versions 23.10.x through 23.10.18 Centreon Web versions 24.04.x through 24.04.8 Centreon Web versions 24.10.x through 24.10.2 Description: A user with high privileges is able to...

CVE-2025-23087

CVE-2025-23087 entry is rejected/not used per CVE Program; it does not represent an active vulnerability.

PT-2025-1628 · Tcas Ii · Tcas Ii

Name of the Vulnerable Software and Affected Versions: TCAS II systems using transponders compliant with MOPS earlier than RTCA DO-181F Description: The issue allows an attacker to impersonate a ground station and issue a Comm-A Identity Request. This action can set the Sensitivity Level Control...

PT-2025-3349 · Unknown · Codeastro Internet Banking System

Name of the Vulnerable Software and Affected Versions: Code Astro Internet banking system version 2.0.0 Description: A Cross Site Request Forgery CSRF vulnerability exists in Code Astro Internet banking system version 2.0.0. This allows remote attackers to execute arbitrary JavaScript on the admi...

EulerOS 2.0 SP8 : httpd (EulerOS-SA-2025-1122)

According to the versions of the httpd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of...

PT-2025-4866 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions prior to 3.12.14 GitHub Enterprise Server versions prior to 3.13.10 GitHub Enterprise Server versions prior to 3.14.7 GitHub Enterprise Server versions prior to 3.15.2 GitHub Enterprise Server versions prior ...

PT-2025-4290 · Oracle · Oracle Hyperion Data Relationship Management

Name of the Vulnerable Software and Affected Versions: Oracle Hyperion Data Relationship Management version 11.2.19.0.000 Description: The issue is related to the Web Services component of Oracle Hyperion Data Relationship Management, allowing a high-privileged attacker with network access via HT...

PT-2025-4265 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The vulnerability in the MySQL Server product of Oracle MySQL is related to the Server: Packaging component and ca...

PT-2025-4262 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: A vulnerability in the MySQL Server product of Oracle MySQL allows a low-privileged attacker with network access v...

PT-2025-4241 · Oracle · Oracle E-Business Suite +1

Name of the Vulnerable Software and Affected Versions: Oracle Project Foundation versions 12.2.3 through 12.2.13 Description: The issue is related to the Technology Foundation component of Oracle Project Foundation in Oracle E-Business Suite. It can be easily exploited by an attacker with reduced...

PT-2025-13420 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This can be exploited by an unauthenticated attacker with remot...

PT-2025-4253 · Oracle +6 · Mysql Server +5

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue is related to a component called InnoDB in MySQL Server, which can be exploited by an attacker with high...

PT-2025-4280 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.40 and prior MySQL Server versions 8.4.3 and prior MySQL Server versions 9.1.0 and prior Description: The issue is related to the InnoDB component of MySQL Server, allowing an attacker with high privileges and networ...