PT-2025-33153 · Stefanoai · Advanced Google Universal Analytics

Name of the Vulnerable Software and Affected Versions: stefanoai Advanced Google Universal Analytics versions through 1.0.3 Description: A missing authorization flaw in stefanoai Advanced Google Universal Analytics allows exploitation of incorrectly configured access control security levels...

PT-2025-33259 · Unknown · Realmag777 Mdtf

Name of the Vulnerable Software and Affected Versions: RealMag777 MDTF versions through 1.3.3.7 Description: RealMag777 MDTF is susceptible to a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows for potential SQL Injection attacks...

PT-2025-33180 · Digitalocean · Digitalocean Spaces Sync

Name of the Vulnerable Software and Affected Versions: DigitalOcean Spaces Sync versions through 2.2.1 Description: The software contains an improper neutralization of input during web page generation, leading to a stored cross-site scripting issue. Recommendations: Update to a version later than...

PT-2025-33251 · Unknown · Masteriyo - Lms

Name of the Vulnerable Software and Affected Versions: Masteriyo - LMS versions through 1.18.3 Description: The software contains a Stored Cross-Site Scripting XSS flaw due to improper neutralization of input during web page generation. This allows for the injection of malicious scripts into web...

SUSE: Security Advisory (SUSE-SU-2025:02758-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-33229

Name of the Vulnerable Software and Affected Versions: vcita Online Booking & Scheduling Calendar for WordPress versions through 4.5.3 Description: The software contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue that allows Stored XSS...

PT-2025-33189 · Unknown · Cleverreach® Wp

Name of the Vulnerable Software and Affected Versions: CleverReach® WP versions through 1.5.20 Description: CleverReach® WP is susceptible to a SQL injection flaw due to improper neutralization of special elements within SQL commands. This allows for potential SQL injection attacks...

PT-2025-33197 · WordPress · Gravitywp - Merge Tags

Name of the Vulnerable Software and Affected Versions: GravityWP - Merge Tags versions through 1.4.4 Description: A flaw exists in the handling of filenames within the Include/Require statement in PHP programs, specifically in GravityWP - Merge Tags. This issue allows for PHP Local File Inclusion...

PT-2025-33221 · Mycred · Mycred

Name of the Vulnerable Software and Affected Versions: myCred versions through 2.9.4.3 Description: A Time-of-check Time-of-use TOCTOU race condition exists in myCred. This issue allows leveraging Time-of-Check and Time-of-Use TOCTOU Race Conditions. Recommendations: Update myCred to a version...

Ubuntu: Security Advisory (USN-6885-6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7681-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-7688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-32965

Name of the Vulnerable Software and Affected Versions: Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress versions up to and including 1.4.3 Description: The plugin is susceptible to a PHP Object Injection due to the deserialization of untrusted input within the get lead...

Ubuntu: Security Advisory (USN-7689-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-32925 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions 20.4 and earlier InDesign Desktop version 19.5.4 and earlier Description: InDesign Desktop versions 20.4 and earlier, and version 19.5.4 and earlier are affected by an out-of-bounds write issue that may lead to...

PT-2025-32762 · Adobe · Illustrator 29.6.1 +1

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.8 and earlier Illustrator version 29.6.1 and earlier Description: Illustrator versions 28.7.8 and earlier, and version 29.6.1 and earlier are affected by a Stack-based Buffer Overflow that could lead to arbitrary cod...

PT-2025-32900 · Adobe · Substance3D - Modeler

Name of the Vulnerable Software and Affected Versions: Substance3D - Modeler versions 1.22.0 and earlier Description: Substance3D - Modeler is affected by an uncontrolled search path element issue that may lead to arbitrary code execution with current user privileges. An attacker could manipulate...

Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2025-1973)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libxml2 (EulerOS-SA-2025-1995)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for coreutils (EulerOS-SA-2025-1922)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...