1706 matches found
PT-2025-34731
Name of the Vulnerable Software and Affected Versions: Tenda CH22 version 1.0.0.1 Description: A buffer overflow issue exists in the formeditUserName function within the /goform/editUserName file. Manipulation of the new account argument can trigger the flaw, allowing for remote exploitation...
PT-2025-34596 · Opentext · Opentext Enterprise Security Manager
Name of the Vulnerable Software and Affected Versions: OpenText Enterprise Security Manager affected versions not specified Description: An information exposure issue exists in OpenText Enterprise Security Manager. The issue is remotely exploitable. Recommendations: At the moment, there is no...
PT-2025-34451
Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: A cross-site scripting XSS issue exists in the valuateJavascript function, potentially allowing attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations: Update t...
PT-2025-34351 · Unknown · Accessibility Checker By Equalize Digital
Name of the Vulnerable Software and Affected Versions: Equalize Digital Accessibility Checker versions through 1.30.0 Description: An authorization bypass issue exists in Equalize Digital Accessibility Checker due to incorrectly configured access control security levels. The issue allows...
PT-2025-34453
Name of the Vulnerable Software and Affected Versions: Reolink version 4.54.0.4.20250526 Description: The software contains a task hijacking issue due to inappropriate taskAffinity settings. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
PT-2025-34278 · Mitsubishi · Smartrtu
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric smartRTU affected versions not specified Description: A remote, unauthenticated attacker who has bypassed authentication can execute arbitrary OS commands. This could lead to the disclosure, modification, destruction, or...
PT-2025-34329 · Undefined · Undefined
CVE-2025-57742 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-57742 Published : Aug. 20, 2025, 4:16 a.m. | 3 hours, 59 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2025-33956 · Unknown · Simple-Login-Log
Name of the Vulnerable Software and Affected Versions: Simple Login Log versions through 1.1.3 Description: Deserialization of untrusted data in Simple Login Log allows object injection. Recommendations: Update Simple Login Log to a version later than 1.1.3...
PT-2025-34181
Name of the Vulnerable Software and Affected Versions: Oxford Instruments Imaris Viewer affected versions not specified Description: The software contains a remote code execution issue due to an uninitialized pointer during IMS file parsing. Recommendations: At the moment, there is no information...
PT-2025-34025 · WordPress · Themeisle Otter - Gutenberg Block
Name of the Vulnerable Software and Affected Versions: Themeisle Otter - Gutenberg Block versions through 3.1.0 Description: Themeisle Otter - Gutenberg Block contains a flaw that allows the retrieval of embedded sensitive data due to insertion of sensitive information into sent data...
PT-2025-34165
Name of the Vulnerable Software and Affected Versions sha.js versions through 2.4.11 Description An improper input validation vulnerability exists in sha.js, allowing for input data manipulation. This flaw can lead to hash collisions and potentially private key extraction, threatening web...
PT-2025-33716 · Unknown · Fluke Process Instruments Devices
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: An unauthenticated remote attacker can grant access without password protection to the affected device, enabling unprotected read-only access to stored measurement data. Recommendations: At the...
PT-2025-33822 · Undefined · Undefined
🟠 Astro, Server-Side Request Forgery SSRF, CVE-2024-56870 Medium https://t.co/rxOf3RNWtb...
PT-2025-33629 · Zhenfeng13 · Myblog
Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog version 1.0.0 Description: A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0. This vulnerability affects unknown code of the file /blog/comment of the component Frontend Blog Article Comment Handler. The...
PT-2025-33640 · Unknown · Diaenergie
Name of the Vulnerable Software and Affected Versions: DIAEnergie affected versions not specified Description: The software contains a reflected cross-site scripting issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2025-33503 · Backstage · @Backstage/Plugin-Scaffolder-Backend
Name of the Vulnerable Software and Affected Versions: @backstage/plugin-scaffolder-backend versions prior to 2.1.1 Description: The backend for the default Backstage software templates exhibited duplicate logging of input values in the fetch:template action within the Scaffolder. This resulted i...
Malicious code in @zalastax/nolb-pt (npm)
The package @zalastax/nolb-pt was found to contain malicious code...
Malicious code in @zalastax/nolb-react-pt (npm)
The package @zalastax/nolb-react-pt was found to contain malicious code...