CVE-2025-24375

The CVE-2025-24375 entry concerns the Charmed MySQL K8s operator (and machine operator) with credential leakage risk. Root cause: the operator calls the mysql-shell/DDL scripts by writing a temporary script file containing full URIs with user credentials, created with read permissions (0644); unp...

Vulnerability fixed in FortiSwitch

Fortinet has fixed a vulnerability in the FortiSwitch GUI. The vulnerability with reference CVE-2024-48887, is located in the FortiSwitch GUI, which allows a remote, unauthenticated malicious person to change admin passwords via specially crafted requests. This security issue can lead to...

MySQL K8s operator security vulnerabilities

MySQL K8s operator is a Canonical open source character operator for running MySQL on Kubernetes. A security vulnerability exists in versions prior to MySQL K8s operator 221, which stems from improperly set permissions on a temporary script file that could lead to the disclosure of database user...

PT-2025-15720 · Squeeze · Squeeze

Name of the Vulnerable Software and Affected Versions: Bogdan Bendziukov Squeeze versions n/a through 1.6 Description: The issue allows for the unrestricted upload of files with dangerous types, enabling the use of malicious files. Recommendations: For versions n/a through 1.6, consider restricti...

PT-2025-15872

Name of the Vulnerable Software and Affected Versions: Helm versions prior to 3.17.3 Description: A specially crafted chart archive file can cause Helm to exhaust its memory, leading to an out-of-memory termination. This occurs when the file expands to be significantly larger uncompressed than...

PT-2025-15871 · Canonical · Charmed Mysql Machine Operator +1

Name of the Vulnerable Software and Affected Versions: Charmed MySQL K8s operator versions prior to revision 221 Charmed MySQL machine operator versions prior to revision 338 Description: The Charmed MySQL K8s operator has a method for calling SQL DDL or python-based mysql-shell scripts that can...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal due to the handling of TemporaryFileOperationStatus in TemporaryFileControllerBase.cs and TemporaryFileService.cs. An attacker can upload files to unintended locations to cause disruption of service to other user...

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal due to the handling of TemporaryFileOperationStatus in TemporaryFileControllerBase.cs and TemporaryFileService.cs. An attacker can upload files to unintended locations to cause disruption of service to other user...

PT-2025-15419 · WordPress · The Vayu Blocks – Gutenberg Blocks For Wordpress & Woocommerce

Name of the Vulnerable Software and Affected Versions: The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin versions 1.0.4 through 1.2.1 Description: The issue allows unauthorized access and modification of data due to missing capability checks on the vayu blocks get toggle switc...

PT-2025-15445 · Unknown +1 · Crud-Query-Parser +1

Name of the Vulnerable Software and Affected Versions: crud-query-parser versions prior to 0.1.0 Description: The crud-query-parser library is affected by an issue where improper neutralization of the order/sort parameter in the TypeORM adapter allows SQL injection. This issue impacts users who a...

PT-2025-15322 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5.6.3.154.205 20250114 Description: A critical issue has been found, affecting some unknown functionality of the file /pubinfo/updateNotice.jsp. The manipulation of the ID argument leads to SQL injection. The attack can b...

PT-2025-15894 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.6.10.3 Shopware versions prior to 6.5.8.17 Description: The Shopware application API contains a search functionality that enables users to search through information stored within their Shopware instance. The...

PT-2025-15183 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was discovered in the codeprojects Online Restaurant Management System. The problem affects the file /admin/member save.php, where the manipulation of...

PT-2025-15220 · Unknown · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the code-projects Patient Record Management System. The problem affects the file /edit dpatient.php and is related to the manipulation of th...

PT-2025-15244 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the editSave method, which does not properly validate whether the requesting user has administrative privileges before allowing modificatio...

PT-2025-15114 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was found in the codeprojects Online Restaurant Management System. The problem affects an unknown function of the file /admin/assign save.php...

PT-2025-15105 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was found in the codeprojects Online Restaurant Management System, affecting some unknown functionality of the file /admin/category save.php. The...

PT-2025-18022 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical vulnerability was found in the TOTOLINK N150RT, affecting an unknown functionality of the file /boafrm/formStaticDHCP. The manipulation of the Hostname argument leads to a buffer...

PT-2025-15106 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue has been found in the codeprojects Online Restaurant Management System. The problem affects the /admin/category update.php file, where the manipulation...

PT-2025-15077 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the Patient Record Management System. This issue affects an unknown part of the file /dental not.php. The manipulation of the itr no argumen...