PT-2025-32753 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: An uncontrolled resource consumption issue in some Edge Orchestrator software may allow an unauthenticated user to potentially cause a denial of service via local access. Recommendation...

PT-2025-32653 · Siemens · Simatic Rtls Locating Manager

Name of the Vulnerable Software and Affected Versions: SIMATIC RTLS Locating Manager versions prior to V3.2 Description: A vulnerability exists in SIMATIC RTLS Locating Manager that allows an authenticated remote attacker with high privileges to execute arbitrary code with 'NT Authority/SYSTEM'...

PT-2025-32728 · Intel · Intel 800 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet driver versions prior to 1.17.2 Description: An integer overflow or wraparound issue exists in the Linux kernel-mode driver for some IntelR 800 Series Ethernet. This may allow an authenticated user to potentially...

PT-2025-32754 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: Exposure of sensitive information to an unauthorized actor in some Edge Orchestrator software may allow an authenticated user to potentially enable a denial of service via adjacent...

PT-2025-32747 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: An uncontrolled resource consumption issue in some Edge Orchestrator software may allow an authenticated user to potentially enable a denial of service via adjacent access...

PT-2025-32874 · Fortinet · Fortipam +2

Name of the Vulnerable Software and Affected Versions: FortiOS versions prior to 7.6.3 FortiProxy versions prior to 7.6.3 FortiPAM versions prior to 1.5.1 Description: An Integer Overflow or Wraparound vulnerability CWE-190 may allow an authenticated user to affect the device’s SSL-VPN availabili...

PT-2025-32732 · Intel · Intel I350 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR I350 Series Ethernet versions prior to 5.19.2 Description: Improper initialization in the Linux kernel-mode driver for some IntelR I350 Series Ethernet may allow an authenticated user to potentially enable information disclosure via da...

PT-2025-32648 · Siemens · Simatic Rtls Locating Manager

Name of the Vulnerable Software and Affected Versions: SIMATIC RTLS Locating Manager versions prior to 3.3 Description: A vulnerability exists in SIMATIC RTLS Locating Manager that allows an unauthenticated local attacker to cause a denial of service condition. The vulnerability is due to imprope...

PT-2025-32876 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWeb versions 7.6.0 through 7.6.3 Fortinet FortiWeb versions 7.4.0 through 7.4.7 Fortinet FortiWeb versions 7.2.0 through 7.2.10 Fortinet FortiWeb versions prior to 7.0.10 Description: A flaw exists in the improper neutralization...

PT-2025-32715 · Intel · Intel Realsense Dynamic Calibration

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM Dynamic Calibrator versions prior to 2.14.2.0 Description: An uncontrolled search path issue exists in some IntelR RealSenseTM Dynamic Calibrator software. An authenticated user may be able to escalate privileges via local...

Linux Distros Unpatched Vulnerability : CVE-2020-14828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the MySQL Server product of Oracle MySQL component: Server: DML. Supported versions that are affected are 8.0.21 and prior. Easily exploitable...

GHSA-QJRX-J8WM-XF83 Mattermost Confluence Plugin has Missing Authorization vulnerability

Mattermost Confluence Plugin versions 1.5.0 fail to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API call to the create channel subscription endpoint...

CVE-2025-27536

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion...

CVE-2025-24298

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-27562

CVE-2025-27562 affects OpenHarmony v5.0.3 and earlier. The vulnerability is a local DoS caused by a missing release of memory (memory leak) in the communication_dsoftbus component, enabling a local attacker to exhaust memory. Impact is described as availability loss (DoS); CVSS metrics indicate L...

CVE-2025-26690 communication dsoftbus has a NULL pointer vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference...

CVE-2025-24298 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-27577

CVE-2025-27577 affects OpenHarmony v5.0.3 and earlier where a local attacker can achieve arbitrary code execution via a race condition in the tcb component. The root cause is a race condition that could be exploited locally; no remote vector is described in the provided documents. A remediation i...

PT-2025-32512 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.4 Description: OpenHarmony versions prior to 5.0.4 are susceptible to a denial-of-service DoS condition due to a type confusion issue. A local attacker can exploit this to cause a DoS. Recommendations: Update...

PT-2025-32592

Name of the Vulnerable Software and Affected Versions: pyLoad versions prior to 0.5.0b3.dev91 Description: pyLoad, a free and open-source Download Manager written in pure Python, contains a SQL Injection issue in the add links parameter of the /json/add package API endpoint. This allows attackers...