CVE-2019-13940

A vulnerability has been identified in SIMATIC ET 200pro IM154-8 PN/DP CPU All versions V3.X.17, SIMATIC ET 200pro IM154-8F PN/DP CPU All versions V3.X.17, SIMATIC ET 200pro IM154-8FX PN/DP CPU All versions V3.X.17, SIMATIC ET 200S IM151-8 PN/DP CPU All versions V3.X.17, SIMATIC ET 200S IM151-8F...

CVE-2018-21229

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R7500v2 before 1.0.3.20, R7800 before 1.0.2.38, WN3000RPv3 before 1.0.2.50, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50...

CVE-2018-21190

Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, D7800 before 1.0.1.34, R6100 before 1.0.1.20, R7500 before 1.0.0.122, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before...

Malicious code in grammy-menu (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 877553f9f9497ed8ae9c7207031e84315c467837dceb8b2d9b46eb2d5cc7a6ce Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RICOH Printers XSS Vulnerability (ricoh-2025-000001)

Multiple RICOH printers and multifunction printers are prone to a cross-site scripting XSS vulnerability via the Web Image Monitor. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

PT-2025-22318 · Papin · Companion Auto Update

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is an issue that is being actively exploited. The estimated number of potentially affected devices worldwide is not available. Details about real-world incidents where this issue was...

CVE-2025-24510

A vulnerability has been identified in MS/TP Point Pickup Module All versions. Affected devices improperly handle specific incoming BACnet MSTP messages. This could allow an attacker residing in the same BACnet network to send a specially crafted MSTP message that results in a denial of service...

CVE-2025-40556

The CVE-2025-40556 vulnerability affects Siemens BACnet ATEC devices (550-440, 550-441, 550-445, 550-446). Affected systems improperly handle specific BACnet MSTP messages, enabling an attacker on the same BACnet network to send crafted MSTP traffic that causes a denial of service, recoverable on...

CVE-2025-32469

A vulnerability has been identified in RUGGEDCOM ROX MX5000 All versions V2.16.5, RUGGEDCOM ROX MX5000RE All versions V2.16.5, RUGGEDCOM ROX RX1400 All versions V2.16.5, RUGGEDCOM ROX RX1500 All versions V2.16.5, RUGGEDCOM ROX RX1501 All versions V2.16.5, RUGGEDCOM ROX RX1510 All versions V2.16.5...

PT-2025-21008 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to improper input validation in the Windows Common Log File System Driver, which allows an authorized attacker to elevate privileges...

PT-2025-20615 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA affected versions not specified Description: The issue concerns a bypass of SSL/TLS certificate pinning. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2025-19998 · Milesight · Milesight Ug65-868M-Ea

Name of the Vulnerable Software and Affected Versions: Milesight UG65-868M-EA gateway affected versions not specified Description: A new issue in the Milesight industrial gateway could potentially impact critical infrastructure. The estimated number of potentially affected devices worldwide is no...

PT-2025-20001 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...

PT-2025-18524 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the nvmet auth set key function. This issue occurs when changing dhchap secrets, and it fails to release th...

PT-2025-18183 · Ribbon Communications · Apollo 9608

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves the use of hard-coded credentials, which is a security risk. There is no information available about the estimated number of potentially affected devices worldwide or...

PT-2025-17698 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. No estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited are...

PT-2025-16298 · Cisco · Cisco Webex Meeting Server

Name of the Vulnerable Software and Affected Versions: Cisco WebEx Meeting Server affected versions not specified Description: The issue concerns a Cross-Site Request Forgery CSRF in Cisco WebEx Meeting Server. No information is provided about the estimated number of potentially affected devices...

PT-2025-16106 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote code execution issue has been identified. No further details are available regarding the estimated number of potentially affected devices or real-world incidents. Recommendations: A...

CVE-2025-30644

A Heap-based Buffer Overflow vulnerability in the flexible PIC concentrator FPC of Juniper Networks Junos OS on EX2300, EX3400, EX4100, EX4300, EX4300MP, EX4400, EX4600, EX4650-48Y, and QFX5k Series allows an attacker to send a specific DHCP packet to the device, leading to an FPC crash and...

PT-2025-14812 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a rejected or withdrawn CVE ID due to erroneous association with an open source vulnerability by another vendor. No information is available about the estimated number of...