PT-2025-17861 · Unknown · Wgs-4215-8T2S +1

Name of the Vulnerable Software and Affected Versions: WGS-80HPT-V2 affected versions not specified WGS-4215-8T2S affected versions not specified Description: The issue is a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host system...

CVE-2025-32382

Metabase is an open source Business Intelligence and Embedded Analytics tool. When admins change Snowflake connection details in Metabase either updating a password or changing password to private key or vice versa, Metabase would not always purge older Snowflake connection details from the...

BIT-GITLAB-2025-1677 Allocation of Resources Without Limits or Throttling in GitLab

A Denial of Service DoS issue has been discovered in GitLab CE/EE affecting all up to 17.8.7, 17.9 prior to 17.9.6 and 17.10 prior to 17.10.4 A denial of service could occur upon injecting oversized payloads into CI pipeline exports...

BIT-GITLAB-2024-11129 Generation of Error Message Containing Sensitive Information in GitLab

An issue has been discovered in GitLab EE affecting all versions from 17.1 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. This allows attackers to perform targeted searches with sensitive keywords to get the count of issues containing the searched term."...

CVE-2025-30660

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine pfe of Juniper Networks Junos OS on MX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS.When processing a high rate of specific GRE traffic destined to th...

CVE-2025-3131

Cross-Site Request Forgery CSRF vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forgery.This issue affects ECA: Event - Condition - Action: from 0.0.0 before 1.1.12, from 2.0.0 before 2.0.16, from 2.1.0 before 2.1.7, from 0.0.0 before 1.2...

CVE-2025-23388 Unauthenticated stack overflow in /v3-public/authproviders API

A Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3...

CVE-2025-32697

Improper Preservation of Permissions vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/editpage/IntroMessageBuilder.Php, includes/Permissions/PermissionManager.Php, includes/Permissions/RestrictionStore.Php. This issue affects MediaWiki:...

CVE-2025-32698

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/logging/LogPager.Php. This issue affects MediaWiki: before 1.39.12, 1.42.6, 1.43.1...

CVE-2025-32259

Missing Authorization vulnerability in Alimir WP ULike wp-ulike.This issue affects WP ULike: from n/a through = 4.7.9.1...

PT-2025-15960 · Detheme · Dethemekit For Elementor

Name of the Vulnerable Software and Affected Versions: DethemeKit for Elementor versions n/d through 2.1.10 Description: The issue is related to a lack of authorization in Detheme DethemeKit for Elementor. This problem affects DethemeKit for Elementor from an unspecified start version up to versi...

PT-2025-15927 · Unknown · 5Sterrenspecialist

Name of the Vulnerable Software and Affected Versions: 5sterrenspecialist versions n/a through 1.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Reflected XSS. Recommendations: For versions n/a...

CVE-2025-3131

Cross-Site Request Forgery CSRF vulnerability in Drupal ECA: Event - Condition - Action allows Cross Site Request Forgery.This issue affects ECA: Event - Condition - Action: from 0.0.0 before 1.1.12, from 2.0.0 before 2.0.16, from 2.1.0 before 2.1.7, from 0.0.0 before 1.2...

CVE-2025-32494

Cross-Site Request Forgery CSRF vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Jetpack: from n/a through = 0.2.2...

openSUSE 15 Security Update : chromium, gn (openSUSE-SU-2025:0115-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025:0115-1 advisory. Changes in chromium: - Chromium 135.0.7049.52 stable release 2025-04-01 boo1240555 CVE-2025-3066: Use after free in Navigations CVE-2025-3067:...

PT-2025-15133 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.2 Description: The issue allows a local attacker to execute arbitrary code in pre-installed apps through an integer overflow. Recommendations: For versions prior to 5.0.2, update to a version that contains a...

CVE-2025-32173

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through = 2.0.0...

CVE-2025-32280

Cross-Site Request Forgery CSRF vulnerability in weDevs WP Project Manager wedevs-project-manager allows Cross Site Request Forgery.This issue affects WP Project Manager: from n/a through 2.6.25...

CVE-2025-32112

Cross-Site Request Forgery CSRF vulnerability in OTWthemes Sidebar Manager Light sidebar-manager-light allows Cross Site Request Forgery.This issue affects Sidebar Manager Light: from n/a through = 1.18...

PT-2025-14993 · Bookingor · Bookingor

Name of the Vulnerable Software and Affected Versions: Bookingor versions 1.0.0 through 1.0.6 Description: The issue is related to Missing Authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations: For versions 1.0.0 through 1.0.6, consider...