2321 matches found
PT-2025-1681 · Unknown +1 · Woocommerce-Warranty +1
Name of the Vulnerable Software and Affected Versions: SMS Alert Order Notifications – WooCommerce plugin for WordPress versions up to, and including, 3.7.6 Description: The issue concerns unauthorized modification of data that can lead to privilege escalation due to a missing capability check on...
PT-2025-3315 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to the fixed version Description: A bug in the Linux kernel has been resolved, specifically in the bpf get smp processor id function when CONFIG SMP is disabled. On x86-64, calling this function can trigger an erro...
PT-2025-3338 · Unknown · Chestnutcms
Name of the Vulnerable Software and Affected Versions: ChestnutCMS versions prior to 1.5.0 Description: The issue concerns a file upload vulnerability where the /api/member/avatar API endpoint receives a base64 string as input, which is then processed by the memberService.uploadAvatarByBase64...
PT-2025-3123 · Codeastro · Codeastro Complaint Management System
Name of the Vulnerable Software and Affected Versions: CodeAstro Complaint Management System version 1.0 Description: The issue allows a remote attacker to escalate privileges via the delete e.php component. Recommendations: For CodeAstro Complaint Management System version 1.0, consider disablin...
PT-2025-1144 · Gocd · Gocd
Name of the Vulnerable Software and Affected Versions: GoCD versions prior to 24.4.0 Description: The issue is related to the incorrect restriction of XML external entity references in GoCD, a continuous delivery server. This can allow "group admins" to abuse the ability to edit raw XML...
PT-2025-25391
Name of the Vulnerable Software and Affected Versions SaltStack Salt versions 3007.0 and later Description The issue concerns an authorization bypass in the Minion event bus. An attacker with access to a minion key can craft a message to potentially execute a job on other minions. Recommendations...
PT-2025-1629 · WordPress · Wp-Enable-Svg
Name of the Vulnerable Software and Affected Versions: wp-enable-svg WordPress plugin versions 0.7 and earlier wp-enable-svg WordPress plugin versions 0.2 and earlier Description: The issue is related to the wp-enable-svg WordPress plugin, which does not sanitize SVG files when uploaded. This...
PT-2025-21892 · Slurm-Wlm +1 · Slurm-Wlm +1
Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in slurm-wlm within Debian Linux. No further details are available. Recommendations: At the moment, there is no information about a newer...
PT-2025-27765
Name of the Vulnerable Software and Affected Versions: MediaWiki versions affected versions not specified Description: The issue concerns package vulnerabilities in MediaWiki, specifically within Debian Linux. No further details are provided about the nature of the issue or its potential impact...
PT-2025-27859
Name of the Vulnerable Software and Affected Versions PHP versions prior to 8.1.33 PHP versions prior to 8.2.29 PHP versions prior to 8.3.23 PHP versions prior to 8.4 php7.4 php8.2 Description The pgsql and pdo pgsql escaping functions do not verify if the underlying quoting functions return...
PT-2025-11345
Name of the Vulnerable Software and Affected Versions: PHP versions up to 8.1.31 PHP versions up to 8.2.27 PHP versions up to 8.3.18 PHP versions up to 8.4.4 php7.4 Description: The issue concerns the Streams HTTP Wrapper in PHP. Recommendations: For PHP versions up to 8.1.31, update to a version...
PT-2025-28036
Name of the Vulnerable Software and Affected Versions PHP versions prior to 8.1.33 PHP versions prior to 8.2.29 PHP versions prior to 8.3.23 PHP versions prior to 8.4.10 PHP 7.4 affected versions not specified PHP 8.2 affected versions not specified Description PHP versions 8.1. before 8.1.33, 8....
PT-2024-15992 · Unknown · Lm-Sys/Fastchat
Name of the Vulnerable Software and Affected Versions: lm-sys/fastchat versions as of commit e208d5677c6837d590b81cb03847c0b9de100765 Description: A Server-Side Request Forgery SSRF vulnerability exists in the "POST /worker generate stream" API endpoint of the Controller API Server. This issue...
PT-2025-6966
Name of the Vulnerable Software and Affected Versions: FFmpeg git-master commit N-113007-g8d24a28d06 Description: A reachable assertion in FFmpeg allows attackers to cause a Denial of Service DoS via opening a crafted AAC file. Recommendations: For FFmpeg git-master commit N-113007-g8d24a28d06,...
PT-2024-35654 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-2024-03-19-intel-next-iLS-24ww14 Description: The issue is related to possible deadlocks in the Bluetooth management MGMT component of the Linux kernel, caused by the hci cmd sync dequeue function. This ca...
PT-2024-36416 · Unknown · Dcat-Admin
Name of the Vulnerable Software and Affected Versions: Dcat Admin version 2.2.0-beta Description: The issue is a cross-site scripting XSS vulnerability. It affects the /admin/articles/create endpoint. Recommendations: For Dcat Admin version 2.2.0-beta, consider disabling access to the...
PT-2024-17822 · Code Projects · Code-Projects Travel Management System
Name of the Vulnerable Software and Affected Versions: code-projects Travel Management System version 1.0 Description: A critical issue affects the processing of the file /subcat.php, where the manipulation of the catid argument leads to sql injection. The attack can be initiated remotely. The...
PT-2024-36782 · Redcap · Redcap
Name of the Vulnerable Software and Affected Versions: REDCap versions 14.9.6 through 15.0.0 Description: The issue is related to a security flaw in the Notes section of calendar events in REDCap, exposing users to a Cross-Site Request Forgery CSRF attack. An attacker can exploit this by luring...
PT-2024-34639 · Ibm · Ibm I
Name of the Vulnerable Software and Affected Versions: IBM i versions 7.3 through 7.5 Description: The issue is related to server-side request forgery SSRF, which may allow an authenticated attacker to send unauthorized requests from the system. This could potentially lead to network enumeration ...
