PT-2025-50777

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description An issue in Google Chrome can be exploited by attackers to impact the system. The problem stems from an inappropriate implementation within the Toolbar component. Microsoft Edge, being...

PT-2025-40972

Name of the Vulnerable Software and Affected Versions Ruby versions prior to 3.4.7 Description The URI gem contained a flaw that allowed for credential leakage, bypassing previous fixes. This issue impacts systems utilizing the URI gem and could potentially expose sensitive information...

PT-2025-36310

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the get user function related to user read access. Due to the implementation of read access support, read access interruptions are not triggered at...

PT-2025-2345 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

PT-2025-42559

Name of the Vulnerable Software and Affected Versions mediawiki affected versions not specified Description The software contains a flaw where messages are parsed instead of being inserted as HTML. This could potentially lead to unexpected behavior or security issues. Recommendations At the momen...

PT-2025-50776

Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description A flaw exists in Chromium’s Password Manager that could allow attackers to impact the system. The issue is a use-after-free condition. Microsoft Edge, being Chromium-based, is also affected ...

PT-2025-42553

Name of the Vulnerable Software and Affected Versions mediawiki affected versions not specified Description The software has a potential issue related to setting the cache-control value of max-age=60 for redirects. This could potentially lead to unintended caching behavior. Recommendations At the...

PT-2025-37968

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an issue where guest-controlled indices, min and dest id, could potentially lead to speculative execution side-channels. The array index nospec function is used...

PT-2025-54588

Name of the Vulnerable Software and Affected Versions fastdds affected versions not specified Description The description does not provide details about the nature of the issue. It only indicates the presence of package vulnerabilities in fastdds within Debian Linux. Recommendations At the moment...

PT-2025-34389

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF vulnerability within the f2fs file system compression functionality, specifically in the f2fs free dic function. The issue occurs when th...

PT-2024-37062 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the Linux kernel, specifically with the erofs file system. It has been resolved by adjusting sb-s blocksize, bits directly for file-backed mounts when the file syste...

PT-2024-35730 · Unknown · Invoice Ninja

Name of the Vulnerable Software and Affected Versions: Invoice Ninja affected versions not specified Description: A Server-Side Request Forgery SSRF issue has been discovered in Invoice Ninja, an open-source invoicing platform. This flaw could allow attackers to access sensitive files, posing...

PT-2024-32438 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak. Successful exploitation of this issue could cause information to be leaked. Recommendations: At the moment, there is no information about...

PT-2024-40974 · Crates.Io · Xous

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned, so the information cannot be determined. Description: The issue concerns the as slice and as slice mut functions, which are considered unsound. This is because any pointer, regardless of its bit...

PT-2024-10472

Name of the Vulnerable Software and Affected Versions Koji affected versions not specified Description The issue is related to improper neutralization of input during web page generation, allowing for a reflected XSS attack. An unsanitized input can lead to an XSS attack, where harmful JavaScript...

PT-2024-39669 · Horner Automation · Horner Automation Cscape

Name of the Vulnerable Software and Affected Versions: Horner Automation Cscape affected versions not specified Description: The issue is related to a memory corruption vulnerability. This could allow an attacker to disclose information and execute arbitrary code. Recommendations: At the moment,...

PT-2024-17488 · Horner Automation · Cscape

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue occurs in the parsing of CSP files due to the lack of proper validation of user-supplied data. This could allow reading past the end of...

CVE-2024-47613

A flaw was found in the gdk-pixbuf decoder in the GStreamer library. Processing a specially crafted input file can cause a NULL pointer dereference due to an unchecked return value, resulting in an application crash and a denial of service. Mitigation Do not process untrusted files with the...

CVE-2024-47596

GStreamer is a library for constructing graphs of media-handling components. An OOB-read has been discovered in the qtdemuxparsesvq3stsddata function within qtdemux.c. In the FOURCCSMI case, seqhsize is read from the input file without proper validation. If seqhsize is greater than the remaining...

CVE-2024-47545

GStreamer is a library for constructing graphs of media-handling components. An integer underflow has been detected in qtdemuxparsetrak function within qtdemux.c. During the strf parsing case, the subtraction size -= 40 can lead to a negative integer overflow if it is less than 40. If this happen...