PT-2025-30452 · Alertenterprise · Alertenterprise Guardian

Name of the Vulnerable Software and Affected Versions: AlertEnterprise Guardian version 4.1.14.2.2.1 Description: An issue allows bypassing manager approval via the isAddedByApprover parameter in a Request Building Access requestSubmit API call. Recommendations: Apply a fix to address the bypass ...

PT-2025-30408 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The issue was rejected due to it not being used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-30283 · Commscope · Ruckus Unleashed

Name of the Vulnerable Software and Affected Versions: CommScope Ruckus Unleashed versions prior to 200.15.6.212.14 CommScope Ruckus Unleashed versions prior to 200.17.7.0.139 Description: An issue exists where the functions stamgr cfg adpt addStaFavourite and stamgr cfg adpt addStaIot improperly...

CVE-2025-7884

CVE-2025-7884 affects Eluktronics Control Center 5.23.51.41, specifically the REG File Handler. The underlying issue is insufficient verification of data authenticity, allowing a local-host attack. Public disclosure exists, and vendor response is noted as lacking. NVD reports a HIGH impact across...

PT-2025-30027 · Joomla +1 · Joomla! +1

Name of the Vulnerable Software and Affected Versions: RSBlog! versions 1.11.6 through 1.14.5 Description: A stored cross-site scripting XSS issue exists in the RSBlog! component for Joomla. The issue allows remote authenticated users to inject arbitrary web script or HTML code via the jformtags...

PT-2025-30102

Name of the Vulnerable Software and Affected Versions wolfSSL affected versions not specified Description The OpenSSL compatibility layer implementation had an issue with the RAND poll function, potentially leading to predictable values returned from RAND bytes after a fork call. This could resul...

PT-2025-29935 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: A critical issue exists where remote social engineering via a memetic payload results in operator-assisted application of a viscous substance, causing a denia...

PT-2025-29937 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is a rejected vulnerability reason, identified as a 3rd party vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

GHSA-R38F-C4H4-HQQ2

creationtimestamp| type| source ---|---|--- 2025-07-16 16:29:40+00:00| seen| https://gist.github.com/safer-bot/06ba3e736cb2a22693a2da2a15674353...

GHSA-CJ7V-27PG-WF7Q

creationtimestamp| type| source ---|---|--- 2025-07-16 07:18:05+00:00| seen| https://gist.github.com/safer-bot/3c43a302c33a551aa633dcedbb152fe3...

GHSA-4P5M-GVPF-F3X5

creationtimestamp| type| source ---|---|--- 2025-07-16 05:32:18+00:00| seen| https://gist.github.com/safer-bot/ac258bea45025717f0ed3e9461a069c2...

PT-2025-29883 · Unknown · Limesurvey

Name of the Vulnerable Software and Affected Versions: LimeSurvey versions 2.0 through 2.06+ Build 151014 Description: An unauthenticated file download issue exists in the application. The application does not validate serialized input to the admin backup endpoint index.php/admin/update/sa/backup...

PT-2025-29697 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-29789 · Unknown · Coschool Lms

Name of the Vulnerable Software and Affected Versions: CoSchool LMS versions n/a through 1.4.3 Description: A deserialization of untrusted data issue exists in CoSchool LMS, allowing for object injection. Recommendations: Update CoSchool LMS to a version later than 1.4.3...

PT-2025-29657

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 Description This issue affects the Server: DDL component of Oracle MySQL Server. A high-privileged attacker with...

CVE-2025-50819

CVE-2025-50819 affects beiyuouo arxiv-daily prior to 2025-05-06. The vulnerability is a directory traversal in the parsing of topic.yml in daily_arxiv.py (commit fad168770b0e68aef3e5acfa16bb2e7a7765d687). Impact is described as HIGH with local exploitation and high integrity/availability impact. ...

Apache Commons Lang is vulnerable to Uncontrolled Recursion when processing long inputs

Uncontrolled Recursion vulnerability in Apache Commons Lang. This issue affects Apache Commons Lang: Starting with commons-lang:commons-lang 2.0 to 2.6, and, from org.apache.commons:commons-lang3 3.0 before 3.18.0. The methods ClassUtils.getClass... can throw StackOverflowError on very long input...

PT-2025-29204 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The Apache HTTP Server is susceptible to a Cross-Site Request Forgery CSRF issue. Recommendations: At the moment, there is no information about a newer version that contains a fi...

PT-2025-29222 · Schneider Electric · Ecostruxure Data Center Expert

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An improper restriction of XML external entity reference issue exists, potentially allowing manipulation of SOAP API calls and XML external entities injection...

PT-2025-29205 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The reported issue has been rejected as not being used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...