PT-2025-20769 · Apple · Macos Ventura +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...

PT-2025-20715 · Schweitzer Engineering Laboratories · Sel Blueframe Os

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An issue allows an authenticated user's token to be used by another source after the user has logged out, prior to the token expiring. Recommendations: At the moment, there is no information...

PT-2025-20778 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: A logic issue was addressed with improved checks, which may have allowed a sandboxed app to access sensitive user...

PT-2025-20693 · Github · Ozi Action

Name of the Vulnerable Software and Affected Versions: OZI action versions 1.13.2 through 1.13.5 Description: The OZI action, a GitHub Action for publishing releases to PyPI, has a flaw where potentially untrusted data flows into PR creation logic. This allows a malicious actor to construct a...

PT-2025-20700 · Wpeverest · Everest Forms

Name of the Vulnerable Software and Affected Versions: WPEVEREST Everest Forms versions prior to 3.0.9 Description: The issue allows an attacker to execute arbitrary code via a file upload, exploiting a Cross Site Scripting vulnerability. Recommendations: For versions prior to 3.0.9, update to...

PT-2025-20691 · Invelos +1 · Dvdprofiler +1

Name of the Vulnerable Software and Affected Versions: julmud/phpDVDProfiler versions v 20230807 through v 20250510 Description: The issue concerns cross-site scripting in the search function of the software. This allows for potential malicious script execution when a user interacts with the sear...

PT-2025-20797

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18.5 Description The issue is...

PT-2025-20670 · Unknown · Campcodes Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Food Ordering System version 1.0 Description: A critical vulnerability has been found in the Campcodes Online Food Ordering System. This issue affects an unknown part of the file /routers/router.php and allows for SQL injecti...

PT-2025-20673 · Unknown · Continew Admin

Name of the Vulnerable Software and Affected Versions: ContiNew Admin versions up to 3.6.0 Description: A problematic issue was found in ContiNew Admin, affecting an unknown function of the file /dev-api/common/file. The manipulation of the File argument leads to cross-site scripting. It is...

PT-2025-20645 · Bluewave · Bluewave Checkmate

Name of the Vulnerable Software and Affected Versions: BlueWave Checkmate versions 2.0.2 and earlier, before b387eba Description: The issue allows a profile edit request to include a role parameter. This is related to the external control of assumed-immutable web parameters. Recommendations: For...

PT-2025-20627 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue has been discovered, affecting the /pages/creditor add.php file, which can lead to sql injection. This issue can be exploited remotely. Recommendations: For...

PT-2025-20628 · Unknown · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical issue affects the processing of the file "/pages/customer update.php". The manipulation of the ID argument leads to SQL injection. The attack can be initiated remotely...

PT-2025-20471 · Unknown · Libsql-Sqlite3-Parser

Name of the Vulnerable Software and Affected Versions: libsql-sqlite3-parser versions 0.13.0 and earlier Description: The issue is related to the dialect/mod.rs file in the libsql-sqlite3-parser crate for Rust, which can crash if the input is not valid UTF-8. Recommendations: For versions 0.13.0...

PT-2025-20463

Name of the Vulnerable Software and Affected Versions CL5708IM affected versions not specified Description The issue is a Stack-based Buffer Overflow, allowing unauthenticated remote attackers to execute arbitrary code on the device. This can be exploited by remote attackers without authenticatio...

PT-2025-20586

Name of the Vulnerable Software and Affected Versions itsourcecode Gym Management System version 1.0 Description A critical issue has been found in the itsourcecode Gym Management System, affecting some unknown functionality of the file /view pdetails.php. The manipulation of the ID argument lead...

PT-2025-20542

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description A problematic issue has been found in the system, where the manipulation of the Username argument leads to cross-site scripting. This can be launched remotely. The issue...

PT-2025-20595

Name of the Vulnerable Software and Affected Versions Eclipse OpenJ9 versions up to 0.51 Description A stack-based buffer overflow can occur when Eclipse OpenJ9 is used with OpenJDK version 8, by modifying a file on disk that is read when the JVM starts. Recommendations For Eclipse OpenJ9 version...

PT-2025-20569

Name of the Vulnerable Software and Affected Versions Victure RX1800 version EN V1.0.0 r12 110933 Description A command injection issue was discovered. Recommendations For version EN V1.0.0 r12 110933, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2025-20585 · Unknown · Project Worlds Student Project Allocation System

Name of the Vulnerable Software and Affected Versions: Project Worlds Student Project Allocation System version 1.0 Description: A critical vulnerability was found in the system, affecting an unknown functionality of the file /change pass/forgot password sql.php. The manipulation of the argument...

PT-2025-20372 · Netis Systems · Wf2220

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The endpoint /cgi-bin-igd/netcore set.cgi is used for changing device configuration and is accessible without authentication, posing a significant security threat. This could allow for...