PT-2025-1115

Name of the Vulnerable Software and Affected Versions Moxa EDS-508A Series versions 3.11 and earlier Description The Moxa EDS-508A Series Ethernet switch is vulnerable to an authentication bypass due to flaws in its authorization mechanism. Although both client-side and back-end server verificati...

PT-2025-5641 · Silverstripe · Silverstripe

Name of the Vulnerable Software and Affected Versions: Silverstripe affected versions not specified Description: The issue affects sites in the "dev" environment mode, allowing an XSS payload to be executed in the resulting error message when a specifically crafted URL is provided. This is a...

PT-2025-1114

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A critical elevation-of-privilege vulnerability in Active Directory Domain Services allows attackers to gain SYSTEM-level access. The vulnerability is related to erro...

PT-2025-4202 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services versions prior to the fixed version Description: The issue is related to a use-after-free vulnerability in Windows Remote Desktop Services, allowing remote attackers to execute arbitrary code and affect the...

PT-2025-3450

Name of the Vulnerable Software and Affected Versions H3C N12 version V100R005 Description The issue is due to a lack of length verification in the 2.4G wireless network processing function, leading to a buffer overflow. Attackers who successfully exploit this can cause the remote target device t...

PT-2025-2453 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS SSLVPN web portal versions 6.4 through 7.0, versions 7.2.0 through 7.2.8, and versions 7.4.0 through 7.4.4 Description: The issue is related to an out-of-bounds read vulnerability that may allow an authenticated attacker to perform a...

PT-2025-3482 · Monetdb · Monetdb Server

Name of the Vulnerable Software and Affected Versions: MonetDB Server version 11.47.11 Description: An issue in the BATcalcbetween intern component allows attackers to cause a Denial of Service DoS via crafted SQL statements. Recommendations: For MonetDB Server version 11.47.11, consider disablin...

PT-2025-2939 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 LTS through 9.4 CD Description: The web console of IBM MQ could allow a local user to obtain sensitive information when a detailed technical error message is returned. Recommendations: For IBM MQ versions 9.3 LTS through 9...

PT-2025-1436 · Fortinet · Fortivoiceentreprise

Name of the Vulnerable Software and Affected Versions: FortiVoice Entreprise versions 7.0.0 through 7.0.1 FortiVoice Entreprise versions prior to 6.4.8 Description: The issue is related to an improper neutralization of special elements used in an SQL command, also known as a 'sql injection'...

PT-2025-1204 · Sap · Sap Businessobjects Business Intelligence Platform +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server ABAP affected versions not specified SAP BusinessObjects Business Intelligence Platform affected versions not specified Description: The issue is related to an information disclosure vulnerability that allows ...

PT-2025-1128 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update Description: The issue is related to a lack of protection against SQL query structure exploitation, allowing a remote attacker with...

PT-2025-1459 · Pat Infinite Solutions · Helpdeskadvanced

Name of the Vulnerable Software and Affected Versions: Pat Infinite Solutions HelpdeskAdvanced versions = 11.0.33 Description: The issue is related to a Cross Site Scripting XSS vulnerability via the Filter/FilterEditor function. This allows for potential malicious script execution. No informatio...

PT-2025-1130 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to an out-of-bounds write in Ivanti EPM, allowing a remote unauthenticated...

PT-2025-1137 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to deserialization of untrusted data, which can allow a remote unauthenticated...

PT-2025-4776 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.2.6 Description: A Reflected Cross-Site Scripting XSS vulnerability was identified in the cadastro funcionario.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts in...

PT-2025-1898 · Icegram Express · Email Subscribers By Icegram Express

Name of the Vulnerable Software and Affected Versions: Email Subscribers by Icegram Express versions prior to 5.7.45 Description: The issue concerns the Email Subscribers by Icegram Express WordPress plugin, which does not properly sanitize and escape some of its Workflow settings. This could all...

PT-2025-3879 · Unknown · Liujianview Gymxmjpa

Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical issue has been found in the function LoosDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/LoosController.java. The manipulation of the argument loosName leads to SQL...

PT-2025-3878 · Unknown · Liujianview Gymxmjpa

Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical vulnerability has been found in the function EquipmentDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/EquipmentController.java. The manipulation of the argument hyname...

CISA: Reducing the Threat of Improvised Explosive Device Attacks by Restricting Access to Explosive Precursor Chemicals

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

PT-2025-3876 · Unknown · Liujianview Gymxmjpa

Name of the Vulnerable Software and Affected Versions: liujianview gymxmjpa version 1.0 Description: A critical issue affects the function GoodsDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/GoodsController.java. The manipulation of the argument goodsName leads to SQL injection...