PT-2025-29873

Name of the Vulnerable Software and Affected Versions BIND versions 9.20.0 through 9.20.10 BIND versions 9.21.0 through 9.21.9 BIND versions 9.20.9-S1 through 9.20.10-S1 Description If a named caching resolver is configured with serve-stale-enable set to yes, and with stale-answer-client-timeout...

PT-2025-29757 · Tribulant · Tribulant Software Newsletters

Name of the Vulnerable Software and Affected Versions: Tribulant Software Newsletters versions n/a through 4.10 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Tribulant Software Newsletters, allowing attackers to perform actions on behalf of authenticated users. This issue...

File Download - Moderately critical - Access bypass - SA-CONTRIB-2025-089

The File Download enables you to allow users to download file and image entities directly using a custom field formatter. It also provides an optional submodule to count and display file downloads in Views, similar to how the core statistics module tracks content views. The File Download module...

CVE-2025-30761

CVE-2025-30761 is reported in Oracle Java SE and GraalVM family (component: Scripting) with affected Oracle Java SE versions 8u451, 8u451-perf, 11.0.27 and Oracle GraalVM Enterprise Edition 21.3.14; and is echoed across various Linux advisories (ALAS2, ALAS2CORRETTO8, etc.). Connected documents p...

CVE-2025-49841 GHSL-2025-053: GPT-SoVITS Deserialization of Untrusted Data vulnerability

GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. In versions 20250228v3 and prior, there is an unsafe deserialization vulnerability in processckpt.py. The SoVITSdropdown variable takes user input and passes it to the loadsovitsnew function in processckpt.py. In loadsovitsnew, the...

CVE-2025-50088

...

CVE-2025-50082

CVE-2025-50082 is a MySQL Server (Oracle) vulnerability affecting the Server: Optimizer component. Affected versions are 8.0.0–8.0.42, 8.4.0–8.4.5, 9.0.0–9.3.0 . The flaw allows a low-privilege remote attacker (network access via multiple protocols) to cause a hang or a frequent crash (complete D...

CVE-2025-50069

CVE-2025-50069 affects the Java VM component of Oracle Database Server. Affected versions are 19.3–19.27 and 21.3–21.18. An attacker with Create Session and Create Procedure privileges and network access via Oracle Net can exploit the Java VM to gain unauthorized access to data or data across all...

CVE-2025-50062

The CVE-2025-50062 entry concerns Oracle PeopleSoft Enterprise HCM Global Payroll Core (Global Payroll for Core) with affected versions 9.2.51–9.2.52. Multiple connected sources describe a vulnerability where a low-privileged attacker with network access over HTTP can compromise the system, enabl...

CVE-2025-30753

CVE-2025-30753 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affects WebLogic versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to cause a hang or frequent crashes (complete DOS). No pu...

RHSA-2025:11045 Red Hat Security Advisory: kernel security update

Bulletin has no description...

BELL-CVE-2024-43204

Bulletin has no description...

BELL-CVE-2024-47252

Bulletin has no description...

BELL-CVE-2025-45582

Bulletin has no description...

PT-2025-29540 · Protns · Actadur

Name of the Vulnerable Software and Affected Versions: ActADUR versions 2.0.1.9 through 2.0.1.9 Description: The ActADUR local server product, developed and maintained by ProTNS, allows for Remote Code Inclusion on host systems. The vulnerability has been rated as critical and includes issues suc...

PT-2025-29673

Name of the Vulnerable Software and Affected Versions CyberArk Secrets Manager, Self-Hosted versions prior to 13.5.1 and 13.6.1 Conjur OSS versions prior to 1.22.1 Description An attacker with access to a misconfigured network device routing traffic from Secrets Manager to AWS can redirect...

Tuesday, July 15, 2025 Security Releases

Tuesday, July 15, 2025 Security Releases Security releases available Updates are now available for the 24.x, 22.x, 20.x Node.js release lines for the following issues. Windows Device Names CON, PRN, AUX Bypass Path Traversal Protection in path.normalize CVE-2025-27210 - high An incomplete fix has...

PT-2025-29571 · Dassault Systèmes · Solidworks Desktop +1

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description: A Use After Free issue exists in the CATPRODUCT file reading procedure. This could allow an attacker to execute arbitrary code when opening a specially crafted...

PT-2025-30150 · Tenda · Tenda Fh451

Name of the Vulnerable Software and Affected Versions: Tenda FH451 version 1.0.0.9 Description: A critical issue exists in Tenda FH451 version 1.0.0.9 related to a stack-based buffer overflow. The vulnerability is located in the fromSetIpBind function within the /goform/SetIpBind file. The page...

PT-2025-29580

Name of the Vulnerable Software and Affected Versions JetBrains YouTrack versions prior to 2025.2.86069 JetBrains YouTrack versions prior to 2024.3.85077 JetBrains YouTrack versions prior to 2025.1.86199 Description An issue exists in JetBrains YouTrack that allows for email spoofing through an...