Archive

28 June 2025

Vulnerabilities first published on this day (UTC), newest first.

← May 2025 2025 / June /28 July 2025 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 9.8

CVE-2025-32897

Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server

Deserialization of Untrusted Data vulnerability in Apache Seata (incubating). This security vulnerability is the same as CVE-2024-47552, but the version range described in the CVE-2024-47552 definition is too narrow. This issue affects Apache Seata (incubatin…

Apache Software Foundation Apache Seata (incubating) org.apache.seata:seata-config-core Maven

Jun 28, 2025
Critical 9.8

CVE-2025-5304 Public exploit

PT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function

The PT Project Notebooks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the wpnb_pto_new_users_add() function in versions 1.0.0 through 1.1.3. This makes it possible for unauthenticated attackers to elevate their pr…

blafoley PT Project Notebooks – Take Meeting minutes, create budgets, track task management, and more Web / CMS

Jun 28, 2025
Critical 9.3

CVE-2025-53391

The Debian zuluPolkit/CMakeLists.txt file for zuluCrypt through the zulucrypt_6.2.0-1 package has insecure PolicyKit al…

Debian zulucrypt zulucrypt zulucrypt Debian Ubuntu

Jun 28, 2025