Cisco Catalyst SD-WAN Manager Reflected HTML Injection Vulnerability

A vulnerability in the web interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an unauthenticated, remote attacker to inject HTML into the browser of an authenticated user. This vulnerability is due to improper sanitization of input to the web interface. An...

Cisco IOS XE Software DHCP Snooping Denial of Service Vulnerability

A vulnerability in the DHCP snooping security feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a full interface queue wedge, which could result in a denial of service DoS condition. This vulnerability is due to improper handling of DHCP request packets. An...

Cisco IOS XE Wireless Controller Software Unauthorized User Deletion Vulnerability

A vulnerability in the lobby ambassador web interface of Cisco IOS XE Wireless Controller Software could allow an authenticated, remote attacker to remove arbitrary users that are defined on an affected device. This vulnerability is due to insufficient access control of actions executed by lobby...

RHSA-2025:4617 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

RHSA-2025:4597 Red Hat Security Advisory: mod_auth_openidc:2.3 security update

Bulletin has no description...

RHSA-2025:4560 Red Hat Security Advisory: libsoup security update

Bulletin has no description...

RHSA-2025:4532 Red Hat Security Advisory: yelp security update

Bulletin has no description...

USN-7499-1 linux-azure, linux-azure-6.11 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Microsoft Azure Network Adapter MANA driver; - Timer subsystem; CVE-2025-21813, CVE-2025-21953...

PT-2025-20172 · Unknown · Color Your Bar

Name of the Vulnerable Software and Affected Versions: Color Your Bar versions n/a through 2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-20083 · Unknown · Hossni Mubarak Cool Author Box

Name of the Vulnerable Software and Affected Versions: Hossni Mubarak Cool Author Box versions prior to 3.0.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows for Cross Site Request Forgery. Recommendations: For versions prior to 3.0.0, update to version 3.0...

PT-2025-20174 · Maulik Vora · Wp Podcasts Manager

Name of the Vulnerable Software and Affected Versions: Maulik Vora WP Podcasts Manager versions 1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where a...

PT-2025-20041 · Samsung · Galaxy Watch

Name of the Vulnerable Software and Affected Versions: Galaxy Watch versions prior to SMR May-2025 Release 1 Description: The issue concerns the improper export of Android application components in the Settings of the Galaxy Watch, allowing physical attackers to access developer settings...

PT-2025-20573 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.0 through 17.9.7 GitLab CE/EE versions 17.10 through 17.10.5 GitLab CE/EE versions 17.11 through 17.11.1 Description: An issue has been discovered in GitLab CE/EE that allows users to bypass IP access restrictions and...

PT-2025-20200 · WordPress · Wp Discord Invite

Name of the Vulnerable Software and Affected Versions: WP Discord Invite versions n/a through 2.5.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject...

PT-2025-20059 · Unknown · Package Installer

Name of the Vulnerable Software and Affected Versions: PackageInstallerCN versions prior to 15.0.11.0 Description: The issue is related to the improper handling of insufficient permission in PackageInstallerCN, allowing a local attacker to bypass user interaction for requested installations...

HP Universal Scan - Potential Information Disclosure

HP Universal Scan is vulnerable to potential information disclosure due to code vulnerability within the product's solution open-source library libssh2. Update your printer software...

PT-2025-20075 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress version 1.3.1 Description: The issue is related to Cross Site Scripting XSS in the Administration area, specifically via the Manage categories section. This allows for potential malicious script execution. Recommendations: For...

PT-2025-20218 · Unknown · Cbx Map For Google Map & Openstreetmap

Name of the Vulnerable Software and Affected Versions: CBX Map for Google Map & OpenStreetMap versions 1.1.12 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means th...

PT-2025-20063 · Penup · Penup

Name of the Vulnerable Software and Affected Versions: PENUP versions prior to 3.9.19.32 Description: The issue is related to improper access control, allowing local attackers to access files with PENUP privilege. Recommendations: For versions prior to 3.9.19.32, update to version 3.9.19.32 or...

PT-2025-20251 · Cisco · Cisco Ios Xr +2

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software affected versions not specified Cisco IOS XE Software affected versions not specified Cisco IOS XR Software affected versions not specified Description: A vulnerability in the Two-Way Active Measurement Protocol TWAMP serve...