PT-2025-18130 · Apple · Macos Sonoma +6

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 tvOS versions prior to 18.4 macOS Ventura versions prior to 13.7.5 iPadOS versions prior to 17.7.6 macOS Sonoma versions prior to 14.7.5 iOS versions prior to 18.4 iPadOS versions prior to 18.4 visionOS versions...

PT-2025-20754 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.6 macOS versions prior to 14.7.6 macOS versions prior to 15.4 Description: The issue allows a malicious app to potentially gain root privileges. This was addressed with additional permissions checks...

PT-2025-14003 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A race condition was addressed with additional validation. This issue allows an app to potentially bypass Privacy preferences...

PT-2025-13993 · Apple · Macos Sonoma +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 iPadOS versions prior to 17.7.6 macOS Sequoia versions prior to 15.4 macOS Sonoma versions prior to 14.7.5 Description: A permissions issue was addressed with improved validation. This issue allows a shortcut to...

PT-2025-18129 · Apple · Macos Sonoma +7

Name of the Vulnerable Software and Affected Versions: macOS Sequoia versions prior to 15.4 tvOS versions prior to 18.4 macOS Ventura versions prior to 13.7.5 iPadOS versions prior to 17.7.6 macOS Sonoma versions prior to 14.7.5 iOS versions prior to 18.4 iPadOS versions prior to 18.4 visionOS...

PT-2025-18128

Name of the Vulnerable Software and Affected Versions Apple macOS versions prior to 15.4 Apple tvOS versions prior to 18.4 Apple macOS Ventura versions prior to 13.7.5 Apple iPadOS versions prior to 17.7.6 Apple macOS Sonoma versions prior to 14.7.5 Apple iOS versions prior to 18.4 Apple visionOS...

PT-2025-23203

Name of the Vulnerable Software and Affected Versions: Safari versions prior to 18.4 iOS versions prior to 18.4 iPadOS versions prior to 18.4 visionOS versions prior to 2.4 macOS Sequoia versions prior to 15.4 Description: The issue allows a website to bypass Same Origin Policy. This was addresse...

PT-2025-13910 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.7.5 macOS versions prior to 14.7.5 macOS versions prior to 15.4 Description: A buffer overflow issue was addressed with improved memory handling, allowing an app to potentially execute arbitrary code with kernel...

PT-2025-13838 · Drupal · Drupal

Name of the Vulnerable Software and Affected Versions: Drupal core versions 8.0.0 through 10.3.12 Drupal core versions 10.4.0 through 10.4.2 Drupal core versions 11.0.0 through 11.0.11 Drupal core versions 11.1.0 through 11.1.2 Description: The issue is related to an Improperly Controlled...

PT-2025-13981 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.4 Description: The issue allows an app to potentially access sensitive user data due to inadequate redaction of sensitive information. This issue was addressed with improved redaction of sensitive information...

CVE-2025-30371

Metabase is a business intelligence and embedded analytics tool. Versions prior to v0.52.16.4, v1.52.16.4, v0.53.8, and v1.53.8 are vulnerable to circumvention of local link access protection in GeoJson endpoint. Self hosted Metabase instances that are using the GeoJson feature could be potential...

PT-2025-13608 · WordPress · So-Called Air Quotes

Name of the Vulnerable Software and Affected Versions: So-Called Air Quotes plugin for WordPress versions up to, and including, 0.1 Description: The issue allows unauthenticated attackers to execute arbitrary shortcodes due to the software not properly validating a value before running do...

PT-2025-13607 · WordPress · Checkout Mestres Wp

Name of the Vulnerable Software and Affected Versions: Checkout Mestres do WP for WooCommerce plugin for WordPress versions 8.6.5 through 8.7.5 Description: The issue allows unauthorized modification of data, leading to privilege escalation due to a missing capability check on the cwmpUpdateOptio...

GHSA-5VMP-M5V2-HX47 tough root metadata version is not checked for sequential versioning

Summary When updating the root role, a TUF client must establish a trusted line of continuity to the latest set of keys. While sequentially downloading new versions of the root metadata file, tough will not check that the root object version it received was the next sequential version from the...

PT-2025-13641

Name of the Vulnerable Software and Affected Versions Generic Plus PCL6 Printer Driver versions 3.12 and earlier Generic Plus UFR II Printer Driver versions 3.12 and earlier Generic Plus LIPS4 Printer Driver versions 3.12 and earlier Generic Plus LIPSLX Printer Driver versions 3.12 and earlier...

PT-2025-13597 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue could disclose sensitive user credentials from log files during the new installation of the product. Recommendations: For IBM InfoSphere Information Server version 11.7,...

PT-2025-13570 · Unknown · Aliconnect /Sdk

Name of the Vulnerable Software and Affected Versions: Aliconnect /sdk version 0.0.6 Description: A Prototype Pollution issue allows an attacker to execute arbitrary code via the aim function in the aim.js component. This issue enables attackers to potentially compromise systems by injecting...

PT-2025-13572 · Alizeait · Unflatto

Name of the Vulnerable Software and Affected Versions: alizeait unflatto versions 1.0.2 and earlier Description: The issue is related to a prototype pollution vulnerability via the exports.unflatto method at /dist/index.js. This allows attackers to execute arbitrary code or cause a Denial of...

PT-2025-13391 · Mitel · Mitel Micontact Center Business

Name of the Vulnerable Software and Affected Versions: Mitel OpenScape Accounting Management through V5 R1.1.0 Description: The issue is related to a path traversal attack due to insufficient sanitization of user input, which could allow an authenticated attacker with administrative privileges to...

PT-2025-24374

Name of the Vulnerable Software and Affected Versions Quantenna Wi-Fi chipset versions prior to 8.0.0.28 Description The Quantenna Wi-Fi chipset ships with a local control script, set tx pow, that is vulnerable to command injection. This issue is an instance of CWE-88, "Improper Neutralization of...