PT-2025-29752 · WordPress · Wp Delicious

Name of the Vulnerable Software and Affected Versions: WP Delicious versions through 1.8.4 Description: WP Delicious is susceptible to a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. This allows for potential malicious code execution with...

Security Bulletin: Apache Commons FileUpload used by IBM InfoSphere Identity Insight has a potential vulnerability (CVE-2025-48976))

Summary Apache Commons FileUpload used by IBM InforSphere Identity Insight provided a hard-coded limit of 10kB for the size of the headers associated with a multipart request. A specially crafted request that used a large number of parts with large headers could trigger excessive memory usage...

DSpace is vulnerable to Path Traversal attacks when importing packages using Simple Archive Format

Impact A path traversal vulnerability is possible during the import of an archive in Simple Archive Format, either from command-line ./dspace import command or from the "Batch Import Zip" user interface feature. This vulnerability likely impacts all versions of DSpace 1.x = 7.6.3, 8.0 = 8.1, and...

LITEON IC48A and IC80A EV Chargers

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access sensitive information when accessing the Liteon EV chargers. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as:...

PT-2025-29562 · Apache · Apache Cxf

Name of the Vulnerable Software and Affected Versions: Apache CXF versions prior to 3.5.11 Apache CXF versions prior to 3.6.6 Apache CXF versions prior to 4.0.7 Apache CXF versions prior to 4.1.1 Description: Apache CXF improperly handles large stream-based messages, storing them as temporary fil...

PT-2025-29670 · Oracle · Oracle Financial Services Analytical Applications Infrastructure

Name of the Vulnerable Software and Affected Versions: Oracle Financial Services Analytical Applications Infrastructure versions 8.0.7.8 through 8.0.8.6 Oracle Financial Services Analytical Applications Infrastructure versions 8.1.1.4 through 8.1.2.5 Description: An easily exploitable issue exist...

PT-2025-29671

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 9.0.0 through 9.1.0 Description A flaw exists in the Optimizer component of Oracle MySQL Server that allows a high-privileged attacker with network access to cause a denial-of-service DOS condition, resulting in a hang or...

PT-2025-29627 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 Oracle WebLogic Server versions 14.1.2.0.0 Description: An easily exploitable issue exists in the Oracle WebLogic Server Core component, allowing an...

PT-2025-29551 · Panda Security · Panda Internet Security 2016 +3

Name of the Vulnerable Software and Affected Versions: Panda Global Protection 2016 versions prior to 16.1.2 Panda Antivirus Pro 2016 versions prior to 16.1.2 Panda Small Business Protection versions prior to 16.1.2 Panda Internet Security 2016 versions prior to 16.1.2 Description: PSEvents.exe i...

PT-2025-29566 · Dspace · Dspace

Name of the Vulnerable Software and Affected Versions: DSpace versions prior to 7.6.4 DSpace versions prior to 8.2 DSpace versions prior to 9.1 Description: DSpace is a repository application that provides durable access to digital resources. Two related XML External Entity XXE injection...

PT-2025-29626

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description A vulnerability exists in the Oracle Applications Framework component Web Utilities of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can...

PT-2025-29601

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions prior to 8u451 Oracle GraalVM for JDK versions prior to 17.0.15 Oracle GraalVM Enterprise Edition versions prior to 21.3.14 Oracle Java SE versions 11.0.27 Oracle Java SE versions 17.0.15 Oracle Java SE versions 21.0.7...

PT-2025-29630

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the InnoDB component of Oracle MySQL Server. Successful exploitation can lead to a...

PT-2025-29645

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description A vulnerability exists within the InnoDB component of Oracle MySQL Server. Successful exploitation of th...

PT-2025-29646

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description A vulnerability exists in the Server: DDL component of Oracle MySQL Server. This vulnerability allows a...

PT-2025-29649

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the InnoDB component of Oracle MySQL Server. Successful exploitation can lead to a...

PT-2025-29652

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the InnoDB component of Oracle MySQL Server. Successful exploitation can lead to a...

PT-2025-29681 · Unknown · Gpt-Sovits-Webui

Name of the Vulnerable Software and Affected Versions: GPT-SoVITS-WebUI versions 20250228v3 and prior Description: GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. A deserialization issue exists in the bsroformer.py file. The model choose variable accepts user-supplied input, such...

PT-2025-29674

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u451 and 8u451-perf Oracle Java SE version 11.0.27 Oracle GraalVM Enterprise Edition version 21.3.14 Description A difficult-to-exploit issue exists in the Scripting component of Oracle Java SE and Oracle GraalVM...

PT-2025-29557 · Ipfire · Ipfire

Name of the Vulnerable Software and Affected Versions: IPFire versions prior to 2.19 Core Update 101 Description: A remote command execution issue exists in IPFire due to a flaw in the proxy.cgi CGI interface. An authenticated attacker can inject arbitrary shell commands through crafted values in...