PT-2025-5676 · Unknown +1 · Virt-Exportserver-Container +9

Name of the Vulnerable Software and Affected Versions: kubevirt affected versions not specified virt-api-container affected versions not specified virt-controller-container affected versions not specified virt-exportproxy-container affected versions not specified virt-exportserver-container...

PT-2025-4906 · Unknown · Translation.Pro

Name of the Vulnerable Software and Affected Versions: Translation.Pro versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an attacker can inject malicious...

CVE-2025-23220 WeGIA has a SQL Injection endpoint 'adicionar_raca.php' parameter 'raca'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarraca.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in...

CVE-2025-23219 WeGIA has a SQL Injection endpoint 'adicionar_cor.php' parameter 'cor'

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarcor.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands in t...

PT-2025-3978 · Transsion · Com.Transsion.Carlcare

Name of the Vulnerable Software and Affected Versions: com.transsion.carlcare affected versions not specified Description: The issue is related to improper permission settings for mobile applications, which may lead to information leakage risk. Recommendations: At the moment, there is no...

PT-2025-19369 · Git +1 · Radare2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a heap-double-free issue. The crash state involves r crbtree free, r bin object free, and r bin file free. Recommendations: At the momen...

PT-2025-25818

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue is related to the firmware for arm ffa devices, where the dma mask was not set, leading to a warning during DMA allocatio...

PT-2025-1173 · Microsoft · Windows Digital Media +1

Name of the Vulnerable Software and Affected Versions: Windows Digital Media affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Windows Digital Media. It involves a memory reading issue beyond the allowed range. Exploitation of this iss...

PT-2025-1218 · Microsoft · Power Automate

Name of the Vulnerable Software and Affected Versions: Microsoft Power Automate affected versions not specified Description: The issue is related to incorrect code generation management in the Power Automate platform. Exploitation of this issue may allow an attacker to execute arbitrary code...

PT-2025-1063 · Unknown · Websoft Hcm

Name of the Vulnerable Software and Affected Versions: Websoft HCM affected versions not specified Description: The issue is related to the Websoft HCM software, which has a vulnerability associated with arbitrary file upload. This could allow a remote attacker to execute arbitrary code by creati...

PT-2025-4806 · Mediawiki · Mediawiki Globalblocking Extension

Name of the Vulnerable Software and Affected Versions: MediaWiki GlobalBlocking Extension affected versions not specified Description: The issue concerns an Exposure of Sensitive Information to an Unauthorized Actor, allowing the retrieval of embedded sensitive data. It briefly impacted the maste...

PT-2025-2769

Name of the Vulnerable Software and Affected Versions: ETM affected versions not specified Description: Specially constructed queries targeting ETM could discover active remote access sessions. Recommendations: At the moment, there is no information about a newer version that contains a fix for...

PT-2025-3707

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description A user with administrator privileges can perform command injection. This issue allows an administrator to carry out command injection, potentially leading...

CVE-2025-22151

Strawberry GraphQL has a type confusion vulnerability in its relay integration that affects multiple ORM integrations (Django, SQLAlchemy, Pydantic). From version 0.182.0 up to, but not including, 0.257.0, the global node field may resolve to a different type mapped to the same model, causing inf...

PT-2025-1577 · Silabs.Com · Ember Znet Sdk

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A buffer overflow issue in the packet handoff plugin allows an attacker to overwrite memory outside the plugin's buffer. This could potentially lead to...

PT-2025-2937 · Suse +1 · Suse Linux Enterprise Server +1

Name of the Vulnerable Software and Affected Versions: Teradata versions prior to 2024-11-04 Description: The issue concerns the mismanagement of groups by certain Teradata account-handling code when used with SUSE Enterprise Linux Server. Specifically, during an operating system change from SUSE...

PT-2025-3107 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions are specified. Description: The issue was initially considered but later rejected as it was determined not to be a security issue. Further investigation confirmed this assessment. Recommendations: A...

PT-2025-3018 · Unknown · Ability Module

Name of the Vulnerable Software and Affected Versions: Ability module affected versions not specified Description: The issue is related to a startup control vulnerability in the ability module. Successful exploitation of this vulnerability may cause features to perform abnormally. There is no...

PT-2025-2693 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A request was rejected because it was reserved but not necessary, leading to an unused vulnerability patch. Recommendations: At the moment, there is no information about a newer...

PT-2025-4579 · Unknown · Lenderd 1003 Mortgage Application

Name of the Vulnerable Software and Affected Versions: Lenderd 1003 Mortgage Application versions n/a through 1.87 Description: The issue is related to a missing authorization vulnerability in the Lenderd 1003 Mortgage Application, which allows the exploitation of incorrectly configured access...