WordPress Youtube Vimeo Video Player and Slider <= 3.8 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Youtube Vimeo Video Player and Slider versions = 3.8...

PT-2025-29748 · Unknown · Kyle Gilman Videopack

Name of the Vulnerable Software and Affected Versions: Kyle Gilman Videopack versions through 4.10.3 Description: The software contains a DOM-Based Cross-site Scripting issue due to improper neutralization of input during web page generation. Recommendations: Update to a version later than 4.10.3...

Ubuntu: Security Advisory (USN-7635-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle MySQL Server 9.0.0 - 9.1.0 Security Update (cpujul2025) - Windows

Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...

PT-2025-29759 · Blazethemes · News Kit Elementor Addons

Name of the Vulnerable Software and Affected Versions: blazethemes News Kit Elementor Addons versions through 1.3.4 Description: The software contains a missing authorization issue, allowing exploitation of incorrectly configured access control security levels. Recommendations: Update blazethemes...

PT-2025-29812 · Unknown · Cmsminds Pay With Contact Form 7

Name of the Vulnerable Software and Affected Versions: cmsMinds Pay with Contact Form 7 versions through 1.0.4 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. This allows for the injection of malicio...

PT-2025-29796 · WordPress · Valvepress Wordpress Auto Spinner

Name of the Vulnerable Software and Affected Versions: ValvePress Wordpress Auto Spinner versions through 3.25.0 Description: The software contains a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update ValvePress...

Oracle MySQL Server 8.0.0 - 8.0.41, 8.4.0 - 8.4.4, 9.0.0 - 9.2.0 Security Update (cpujul2025) - Windows

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Oracle MySQL Server 8.0.0 - 8.0.42 Security Update (cpujul2025) - Linux

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-29711 · Zyxel · Zyxel Vmg8825-T50K

Name of the Vulnerable Software and Affected Versions: Zyxel VMG8825-T50K firmware versions prior to V5.50ABOM.5C0 Description: A buffer overflow exists in the URL parser of the zhttpd web server. This issue could allow an unauthenticated attacker to cause denial-of-service DoS conditions and...

PT-2025-29560 · Dell · Dell Ecs +1

Name of the Vulnerable Software and Affected Versions: Dell ECS versions prior to 3.8.1.5 ObjectScale version 4.0.0.0 Description: Dell ECS versions prior to 3.8.1.5 and ObjectScale version 4.0.0.0 contain a flaw that allows the insertion of sensitive information into log files. A low-privileged...

PT-2025-30903 · Rubygems · Measured

Impact A path traversal vulnerability exists where an attacker with access to manipulate inputs when initializing the Measured::Cache::Json class would be able to instruct the library to read arbitrary files. Patches Users should update to the latest version...

PT-2025-29574 · Dassault Systèmes · Solidworks Desktop +1

Name of the Vulnerable Software and Affected Versions: SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025 Description: A use-after-free issue exists in the IPT file reading procedure. This could allow an attacker to execute arbitrary code when opening a specially crafted IPT file...

PT-2025-29658 · Oracle · Oracle Universal Work Queue +1

Name of the Vulnerable Software and Affected Versions: Oracle Universal Work Queue versions 12.2.3 through 12.2.14 Description: An easily exploitable issue exists in the Oracle Universal Work Queue component of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can...

PT-2025-29626

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description A vulnerability exists in the Oracle Applications Framework component Web Utilities of Oracle E-Business Suite. A low-privileged attacker with network access via HTTP can...

PT-2025-29542 · WordPress · Restrict File Access

Name of the Vulnerable Software and Affected Versions: Restrict File Access plugin for WordPress versions up to and including 1.1.2 Description: The Restrict File Access plugin for WordPress is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation on the...

PT-2025-29662

Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.42 Description A flaw exists in the Oracle MySQL Server Replication component that allows a high-privileged attacker with network access to cause a denial-of-service DoS condition, resulting in a hang or...

Fedora: Security Advisory (FEDORA-2025-e286662e59)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-29537

Name of the Vulnerable Software and Affected Versions HT Contact Form Widget for Elementor Page Builder & Gutenberg Blocks & Form Builder versions up to and including 2.2.1 Description The HT Contact Form Widget plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient fil...

Fedora: Security Advisory (FEDORA-2025-5ea2b69c03)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...