PT-2024-9154 · Nextcloud +1 · Nextcloud Enterprise Server +2

Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions prior to 28.0.10 Nextcloud Server versions prior to 29.0.7 Nextcloud Enterprise Server versions prior to 27.1.11.8 Nextcloud Enterprise Server versions prior to 28.0.10 Nextcloud Enterprise Server versions prior to...

PT-2024-38528 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue in question has been either rejected or withdrawn by its assigning authority. No further details are available regarding the nature of the issue or its potential...

PT-2025-25439 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions prior to 15.10.16 XWiki versions prior to 16.4.7 XWiki versions prior to 16.10.2 Description: The issue arises when a user without script rights creates a document containing an XWiki.Notifications.Code.NotificationDisplayerCla...

PT-2024-6112 · Google +10 · Go +10

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.23.1 Go versions prior to 1.22.7 Description: The issue is related to the Parse function in the Go programming language, which can cause a panic due to stack exhaustion when dealing with deeply nested expressions in a "...

PT-2024-6096

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.6.3 Description The issue is related to a problem in the libexpat library, which is used for parsing XML files. It is caused by the library's failure to properly restrict references to external XML entities. This c...

PT-2024-26329 · Ibm · Ibm Security Verify Access

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access versions 10.0.0 through 10.0.8 Description: The issue allows a remote authenticated attacker to conduct phishing attacks using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a...

PT-2024-31302 · Irfan Skiljan · Irfanview

Name of the Vulnerable Software and Affected Versions: Irfanview version 4.67.1.0 Description: An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview allows attackers to cause an access violation via a crafted EXR file, leading to a Denial of Service DoS. Recommendations: For Irfanview versio...

PT-2024-37923 · WordPress · The Quiz/Survey Master

Name of the Vulnerable Software and Affected Versions: The Quiz and Survey Master QSM WordPress plugin versions prior to 9.1.1 Description: The issue is related to the failure of the plugin to validate and escape certain Quiz fields before displaying them on a page or post where the Quiz is...

PT-2024-24894 · WordPress · Wp Table Builder

Name of the Vulnerable Software and Affected Versions: WP Table Builder WordPress plugin versions 1.5.0 and earlier Description: The issue concerns the WP Table Builder WordPress plugin, which does not properly sanitise and escape some of its table data. This could allow high-privilege users, suc...

PT-2024-12486 · Mobotix · Mx6 Cameras +1

Name of the Vulnerable Software and Affected Versions: MOBOTIX P3 cameras versions prior to MX-V4.7.2.18 MOBOTIX Mx6 cameras versions prior to MX-V5.2.0.61 Description: The issue concerns the tcpdump feature, which does not properly validate input. This allows authenticated users to execute code...

PT-2024-5817

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Opera versions prior to 113.0.5230.32 Chromium versions prior to 128.0.6613.84 Description A type confusion issue exists in the V8 JavaScript and...

PT-2024-30065 · Pligg Cms · Pligg Cms

Name of the Vulnerable Software and Affected Versions: Pligg CMS version 2.0.2 Description: A Cross-Site Request Forgery CSRF issue was discovered in Pligg CMS. The vulnerability is exploited via the "/admin/domain management.php?whitelist add" API endpoint. Recommendations: For Pligg CMS version...

PT-2024-21719 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla versions 3.4.6 through 5.1.2 Description: Inadequate validation of URLs could result in an invalid check of whether a redirect URL is internal or not. This issue may allow obscure unsafe links. Recommendations: For Joomla versions 3.4....

PT-2024-30020 · Unknown · Blood Bank/Donation Management System

Name of the Vulnerable Software and Affected Versions: Blood Bank And Donation Management System affected versions not specified Description: A cross-site scripting XSS vulnerability in the component update page details.php allows attackers to execute arbitrary web scripts or HTML via a crafted...

PT-2024-6564

Name of the Vulnerable Software and Affected Versions SPIP versions prior to 4.30-alpha2, 4.2.13, and 4.1.16 Description The porte plume plugin used by SPIP is vulnerable to an arbitrary code execution vulnerability. A remote and unauthenticated attacker can execute arbitrary PHP as the SPIP user...

PT-2024-9089

Name of the Vulnerable Software and Affected Versions GNU Emacs versions through 30.0.92 Description The issue is related to the elisp-completion-at-point function in GNU Emacs, which can trigger unsafe Lisp macro expansion when used on untrusted Emacs Lisp source code. This allows attackers to...

PT-2024-37695 · Directus · Directus

Name of the Vulnerable Software and Affected Versions: Directus version 10.13.0 Description: The issue allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application injects an attacker-controlled parameter into an unsanitized DOM...

PT-2025-28262 · Invt · Invt Vt-Designer

Name of the Vulnerable Software and Affected Versions: INVT VT-Designer affected versions not specified Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write when parsing PM3 files. There is no information provided about the estimated number of...

PT-2025-28263 · Invt · Invt Vt-Designer

Name of the Vulnerable Software and Affected Versions: INVT VT-Designer affected versions not specified Description: The issue is related to a remote code execution vulnerability due to out-of-bounds write when parsing PM3 files. There is no information provided about the estimated number of...

Adobe Releases Security Updates for Multiple Products

Adobe released security updates to address multiple vulnerabilities in Adobe software. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the...