PT-2025-19719 · Unknown · Kashipara Online Service Management Portal

Name of the Vulnerable Software and Affected Versions: kashipara Online Service Management Portal version V1.0 Description: The issue is related to SQL Injection in the osms/Requester/CheckStatus.php file via the checkid parameter. This allows for potential exploitation. Recommendations: For...

PT-2025-19765 · Unknown · Retrieval-Based-Voice-Conversion-Webui

Name of the Vulnerable Software and Affected Versions: Retrieval-based-Voice-Conversion-WebUI versions 2.2.231006 and prior Description: Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. The issue arises from unsafe deserialization. The ckpt dir variable takes us...

BELL-CVE-2025-37770

Bulletin has no description...

CVE-2024-52903

IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query...

BELL-CVE-2025-37780

Bulletin has no description...

BELL-CVE-2025-37776

Bulletin has no description...

BELL-CVE-2025-37757

Bulletin has no description...

BELL-CVE-2025-37759

Bulletin has no description...

BELL-CVE-2025-37766

Bulletin has no description...

BELL-CVE-2025-23145

Bulletin has no description...

BELL-CVE-2025-37794

Bulletin has no description...

BELL-CVE-2025-23155

Bulletin has no description...

BELL-CVE-2025-23156

Bulletin has no description...

BELL-CVE-2025-37741

Bulletin has no description...

BELL-CVE-2025-37760

Bulletin has no description...

BELL-CVE-2025-37749

Bulletin has no description...

PT-2025-18953 · Ibm · Ibm Cloud Pak For Business Automation

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Business Automation versions 24.0.0 through 24.0.1 IF001 Description: The issue allows an authenticated user to bypass client-side data validation in the authoring user interface, which could cause a denial of service...

GHSA-H3VP-QWMX-5J25 Grokability Snipe-IT has incorrect authorization for accessing asset information

Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information...

Grokability Snipe-IT has incorrect authorization for accessing asset information

Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information...

WordPress SureForms plugin < 1.4.4 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin SureForms versions 1.4.4...