PT-2025-29682 · Unknown · Gpt-Sovits-Webui

Name of the Vulnerable Software and Affected Versions: GPT-SoVITS-WebUI versions 20250228v3 and prior Description: GPT-SoVITS-WebUI is a voice conversion and text-to-speech webUI. An unsafe deserialization issue exists in the inference webui.py file. The application takes user input via the gpt...

PT-2025-29568 · Unknown · Beiyuouo Arxiv-Daily

Name of the Vulnerable Software and Affected Versions: beiyuouo arxiv-daily versions through 2025-05-06 commit fad168770b0e68aef3e5acfa16bb2e7a7765d687 Description: A directory traversal vulnerability exists when parsing the topic.yml file in the generation logic within daily arxiv.py...

PT-2025-29627 · Oracle · Oracle Weblogic Server

Name of the Vulnerable Software and Affected Versions: Oracle WebLogic Server versions 12.2.1.4.0 Oracle WebLogic Server versions 14.1.1.0.0 Oracle WebLogic Server versions 14.1.2.0.0 Description: An easily exploitable issue exists in the Oracle WebLogic Server Core component, allowing an...

PT-2025-29610 · Oracle · Oracle Jd Edwards +1

Name of the Vulnerable Software and Affected Versions: Oracle JD Edwards versions 9.2.0.0 through 9.2.9.3 Description: This issue affects the Web Runtime SEC component of Oracle JD Edwards EnterpriseOne Tools. A low-privileged attacker with network access via HTTP can compromise the system,...

PT-2025-29551 · Panda Security · Panda Internet Security 2016 +3

Name of the Vulnerable Software and Affected Versions: Panda Global Protection 2016 versions prior to 16.1.2 Panda Antivirus Pro 2016 versions prior to 16.1.2 Panda Small Business Protection versions prior to 16.1.2 Panda Internet Security 2016 versions prior to 16.1.2 Description: PSEvents.exe i...

PT-2025-29621 · Oracle · Oracle Database 23.4 +8

Name of the Vulnerable Software and Affected Versions: Oracle Database versions 19.3 through 19.27 Oracle Database versions 21.3 through 21.18 Oracle Database versions 23.4 through 23.8 Description: This issue affects the Oracle Database Materialized View component. A highly privileged attacker...

PT-2025-29541 · Unknown · Crosseditor4

Name of the Vulnerable Software and Affected Versions: CrossEditor4 versions 4.0.0.01 through 4.6.0.23 Description: The improper default setting in the API modules of CrossEditor4 potentially allows Stored Cross-Site Scripting XSS. Stored XSS is a type of security issue where malicious scripts ar...

PT-2025-29456 · Phpgurukul · Phpgurukul Online Library Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Library Management System version 3.0 Description: A critical issue exists in PHPGurukul Online Library Management System 3.0, specifically within the /admin/student-history.php file. Manipulation of the stdid argument can...

PT-2025-29425 · Unknown · Zavy86 Wikidocs

Name of the Vulnerable Software and Affected Versions: Zavy86 WikiDocs versions through 1.0.77 Description: A critical issue exists in Zavy86 WikiDocs that allows for path traversal. The vulnerability is located in the image drop upload ajax/image delete ajax function within the submit.php file...

PT-2025-29404 · Softwarex · Softwarex

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU hardware to write to arbitrary physical memory pages. This could potentially corrup...

PT-2025-29402 · Code Projects · Voting System

Name of the Vulnerable Software and Affected Versions: code-projects Voting System version 1.0 Description: A critical issue exists in an unknown functionality of the file /admin/voters row.php. The manipulation of the ID argument leads to SQL injection. The attack can be launched remotely. The...

PT-2025-29488 · Yijiusmile · Kkfileviewofficeedit

Name of the Vulnerable Software and Affected Versions: YiJiuSmile kkFileViewOfficeEdit affected versions not specified Description: A critical issue exists in the Download function of the /download API endpoint in YiJiuSmile kkFileViewOfficeEdit. Manipulation of the url argument can lead to a pat...

PT-2025-29359 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical vulnerability exists in code-projects Online Appointment Booking System. The vulnerability is due to a SQL injection flaw within the /cancelbookingpatient.php...

PT-2025-29386 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System. The vulnerability is located in the /get town.php file and involves SQL injection through...

PT-2025-29324 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Oracle Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.21 Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0 through 21.12.21 Oracle Primavera P6 Enterprise Project Portfolio...

PT-2025-29290 · Apache · Apache Sentry

Name of the Vulnerable Software and Affected Versions: Apache Sentry affected versions not specified Description: An authenticated user enrolled device may access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. This does not...

PT-2025-29333 · Phpgurukul · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue exists in PHPGurukul Vehicle Parking Management System version 1.13. The vulnerability is located in an unknown part of the /users/profile.php file...

PT-2025-29207 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-29322 · Ibm · Ibm Storage Scale

Name of the Vulnerable Software and Affected Versions: IBM Storage Scale versions 5.2.3.0 and 5.2.3.1 Description: IBM Storage Scale versions 5.2.3.0 and 5.2.3.1 may allow an authenticated user to obtain sensitive information from files due to insecure permissions inherited through the SMB...

PT-2025-29270 · Unknown · Hax Cms Php +1

Name of the Vulnerable Software and Affected Versions: haxcms-nodejs versions prior to 11.0.6 haxcms-php versions prior to 11.0.6 Description: The logout function does not properly terminate user sessions or clear cookies. A refresh token is issued during logout, potentially allowing continued...