CVE-2022-43916

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure...

CVE-2022-43916 IBM App Connect Enterprise Certified Container improper communications restriction

IBM App Connect Enterprise Certified Container 7.1, 7.2, 8.0, 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, and 12.7 Pods do not restrict network egress for Pods that are used for internal infrastructure...

PT-2025-2179 · Pirateforms · Contact Form & Smtp Plugin

Name of the Vulnerable Software and Affected Versions: The Contact Form & SMTP Plugin for WordPress by PirateForms versions up to, and including, 2.6.0 Description: The issue arises from the software allowing users to execute an action that does not properly validate a value before running do...

PT-2025-1597 · WordPress · Mwb Hubspot For Woocommerce

Name of the Vulnerable Software and Affected Versions: MWB HubSpot for WooCommerce – CRM, Abandoned Cart, Email Marketing, Marketing Automation & Analytics plugin for WordPress versions up to, and including, 1.5.9 Description: The issue concerns unauthorized modification of data that can lead to...

PT-2025-4193 · Dell · Dell Networker

Name of the Vulnerable Software and Affected Versions: Dell NetWorker versions prior to 19.11.0.3 Dell NetWorker versions 19.10 and earlier Description: The issue is related to an Unquoted Search Path or Element vulnerability. A low privileged attacker with local access could potentially exploit...

ublk: don't allow user copy for unprivileged device

...

PT-2025-5380 · Akamai · Akamai Enterprise Application Access

Name of the Vulnerable Software and Affected Versions: Akamai Enterprise Application Access EAA versions prior to 2025-01-17 Description: An issue was discovered in Akamai Enterprise Application Access EAA. If an administrator knows another tenant's 128-bit connector GUID, they can execute debug...

PT-2025-3984 · Hx · Hx

Name of the Vulnerable Software and Affected Versions: HX versions 10.0.0 and earlier Description: An attacker with access to the vulnerable software may send specially-crafted data to the HX console. The malicious detection would then trigger file parsing containing exponential entity expansions...

Security Bulletin:Psf Requests Vulnerability Affects IBM Data Observability by Databand Self-Hosted (CVE-2024-35195)

Summary A vulnerability in Psf Requests was addressed in IBM Data Observability by Databand Self-Hosted Vulnerability Details CVEID:CVE-2024-35195 DESCRIPTION: Psf Requests could allow a local authenticated attacker to bypass security restrictions, caused by an incorrect control flow implementati...

CVE-2024-50248 affecting package kernel for versions less than 6.6.64.2-1

CVE-2024-50248 affecting package kernel for versions less than 6.6.64.2-1. An upgraded version of the package is available that resolves this issue...

PT-2025-1624 · WordPress · Eventer

Name of the Vulnerable Software and Affected Versions: Eventer plugin for WordPress versions up to, and including, 3.9.8 Description: The issue concerns a SQL injection vulnerability via the event parameter in the eventer get attendees function. This vulnerability is due to insufficient escaping ...

PT-2025-4047 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A vulnerability was found in an unknown functionality of the file /appDetail.jsp. The manipulation of the curpage argument leads to cross site scripting. The attack can be launched remotely. The vendor was contact...

PT-2025-4048 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue affects some unknown functionality of the file /content top.jsp. The manipulation of the id argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to...

PT-2025-4045 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A vulnerability was found in ESAFENET CDG V5, classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross-site...

PT-2025-1306 · Devdojo · Devdojo Voyager

Name of the Vulnerable Software and Affected Versions: DevDojo Voyager versions 1.8.0 and earlier Description: The issue allows an authenticated user to bypass file type verification when uploading a file via the "/admin/media/upload" endpoint. This can lead to the upload of a web shell, resultin...

PT-2025-4049 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical vulnerability has been found in ESAFENET CDG V5, affecting an unknown part of the file /doneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to initiate the...

Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator

Incorrect Usage of Seeds in Pseudo-Random Number Generator PRNG vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. When a continuation is created, it gets a random identifier. Because the random number generator used to generate these identifiers was seeded with the...

PT-2025-4004 · Cesanta · Cesanta Frozen

Name of the Vulnerable Software and Affected Versions: Cesanta Frozen versions less than 1.7 Description: An Allocation of Resources Without Limits or Throttling issue allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...

PT-2025-3364 · Beijing Sogou Technology Development Co. · Sogou Input

Name of the Vulnerable Software and Affected Versions: Beijing Sogou Technology Development Co., Ltd Sogou Input version 12.2.0 Description: An issue in the software allows attackers to access sensitive user information via supplying a crafted link. This is achieved by providing a manipulated lin...

The vulnerability of SimpleHelp’s software for remote support stems from an incorrect limitation on the path to the restricted-access directory, allowing a perpetrator to disclose protected information.

The vulnerability of SimpleHelp’s software for remote support is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...