12582 matches found
PT-2025-18117 · Unknown · Goanywhere
Name of the Vulnerable Software and Affected Versions: GoAnywhere versions prior to 7.8.0 Description: The issue occurs when a web user without create permission on subfolders attempts to upload a file to a non-existent directory. In this scenario, the error message includes the absolute server...
PT-2025-18091 · Onevision · Onevision Workspace
Name of the Vulnerable Software and Affected Versions: OneVision Workspace versions prior to WS23.1 SR1 build w31.040 Description: The issue allows for arbitrary Java EL execution. This means that an attacker could potentially execute malicious Java Expression Language code, leading to unauthoriz...
DLA-4140-1 libsoup2.4 - security update
Bulletin has no description...
PT-2025-18010 · Document Foundation +4 · Libreoffice +4
Name of the Vulnerable Software and Affected Versions: LibreOffice versions 24.8 through 24.8.5 LibreOffice versions 25.2 through 25.2.1 Description: The issue is related to an Improper Verification of Cryptographic Signature, allowing PDF Signature Spoofing by Improper Validation. A flaw in the...
PT-2025-18013 · Unknown +1 · Quickjs-Ng +1
Name of the Vulnerable Software and Affected Versions: quickjs-ng versions 0.9.0 and earlier QuickJS versions prior to 2025-04-26 Description: The issue is related to a missing length check in JS ReadString for a string, which can lead to a heap-based buffer overflow. Recommendations: For...
PT-2025-18014 · Unknown +1 · Quickjs-Ng +1
Name of the Vulnerable Software and Affected Versions: quickjs-ng versions 0.9.0 and earlier QuickJS versions prior to 2025-04-26 Description: The issue is related to an incorrect size calculation in JS ReadBigInt for a BigInt, leading to a heap-based buffer overflow. Recommendations: For...
PT-2025-17945 · WordPress · Smart Form Plugin
Name of the Vulnerable Software and Affected Versions: Create custom forms for WordPress with a smart form plugin for smart businesses versions 1.2.4 and earlier Description: The issue allows unauthenticated attackers to execute arbitrary shortcodes due to the software not properly validating a...
PT-2025-17960
Name of the Vulnerable Software and Affected Versions Artifex Ghostscript versions prior to 10.05.0 Description The issue is related to the mishandling of overlong UTF-8 encoding in the decode utf8 function in base/gp utf8.c. This problem exists due to an incomplete fix for a previous issue...
PT-2025-17961 · Izarc · Izarc
Name of the Vulnerable Software and Affected Versions: IZArc versions through 4.5 Description: The issue concerns a Mark-of-the-Web Bypass Vulnerability in IZArc. When a user extracts files from an archive that has a Mark-of-the-Web attribute, this attribute is not propagated to the extracted...
SUSE-SU-2025:1370-1 Security update for govulncheck-vulndb
This update for govulncheck-vulndb fixes the following issues: - Update to version 0.0.20250422T181640 2025-04-22T18:16:40Z jscPED-11136 GO-2025-3603 GO-2025-3604 GO-2025-3607 GO-2025-3608 GO-2025-3609 GO-2025-3610 GO-2025-3611 GO-2025-3612 GO-2025-3615 GO-2025-3618 GO-2025-3619 GO-2025-3620...
WordPress SEUR Oficial plugin <= 2.2.23 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Aiden Thái An in WordPress Plugin SEUR Oficial versions = 2.2.23...
PT-2025-17887 · WordPress · Upsell Funnel Builder For Woocommerce
Name of the Vulnerable Software and Affected Versions: The Upsell Funnel Builder for WooCommerce plugin for WordPress versions up to, and including, 3.0.0 Description: The issue allows unauthenticated attackers to manipulate orders by updating the product associated with any order bump and the...
PT-2025-28380 · Unknown · Audio Service
Name of the Vulnerable Software and Affected Versions: LeAudioService versions prior to SMR Jul-2025 Release 1 Description: The issue is related to improper access control in LeAudioService, allowing local attackers to stop broadcasting Auracast. Recommendations: For versions prior to SMR Jul-202...
PT-2025-17937 · Netscout · Ngeniusone
Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue allows for Arbitrary File Creation by authenticated users. Recommendations: For versions prior to 6.4.0 b2350, update to version 6.4.0 b2350 or later to resolve the issu...
PT-2025-28379 · Bluetooth · Bluetooth
Name of the Vulnerable Software and Affected Versions: Bluetooth versions prior to SMR Jul-2025 Release 1 Description: The issue concerns improper privilege management in Bluetooth, allowing local attackers to enable Bluetooth. This could potentially lead to unauthorized access or control. There ...
PT-2025-17941 · Netscout · Ngeniusone
Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue allows technical information disclosure via a stack trace. Recommendations: For versions prior to 6.4.0 b2350, update to version 6.4.0 b2350 or later to resolve the issu...
PT-2025-17926
Name of the Vulnerable Software and Affected Versions Halo versions prior to 2.20.13 Description The issue allows attackers to bypass file type validation controls, enabling the upload of malicious files, including executables and HTML files. This can lead to stored cross-site scripting attacks a...
OPENSUSE-SU-2025:15029-1 kyverno-1.14.0-1.1 on GA media
These are all security issues fixed in the kyverno-1.14.0-1.1 package on the GA media of openSUSE Tumbleweed...