PT-2025-32753 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: An uncontrolled resource consumption issue in some Edge Orchestrator software may allow an unauthenticated user to potentially cause a denial of service via local access. Recommendation...

PT-2025-32728 · Intel · Intel 800 Series Ethernet

Name of the Vulnerable Software and Affected Versions: IntelR 800 Series Ethernet driver versions prior to 1.17.2 Description: An integer overflow or wraparound issue exists in the Linux kernel-mode driver for some IntelR 800 Series Ethernet. This may allow an authenticated user to potentially...

PT-2025-32876 · Fortinet · Fortiweb

Name of the Vulnerable Software and Affected Versions: Fortinet FortiWeb versions 7.6.0 through 7.6.3 Fortinet FortiWeb versions 7.4.0 through 7.4.7 Fortinet FortiWeb versions 7.2.0 through 7.2.10 Fortinet FortiWeb versions prior to 7.0.10 Description: A flaw exists in the improper neutralization...

Intel TDX Module software buffer error vulnerability

Intel TDX Module software is a collection of software modules from Intel Corporation USA. A buffer error vulnerability exists in versions of Intel TDX module software prior to TDX1.5.07.00.774, which originates from an out-of-bounds read and could lead to information disclosure...

PT-2025-32747 · Unknown · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator versions prior to 24.11.1 Description: An uncontrolled resource consumption issue in some Edge Orchestrator software may allow an authenticated user to potentially enable a denial of service via adjacent access...

Google Chrome < 139.0.7258.127 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 139.0.7258.127. It is, therefore, affected by multiple vulnerabilities as referenced in the 202508stable-channel-update-for-desktop12 advisory. - Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a...

GHSA-QJRX-J8WM-XF83 Mattermost Confluence Plugin has Missing Authorization vulnerability

Mattermost Confluence Plugin versions 1.5.0 fail to check the access of the user to the channel which allows attackers to create channel subscription without proper access to the channel via API call to the create channel subscription endpoint...

CVE-2025-27536

in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through type confusion...

CVE-2025-24298

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-27562

CVE-2025-27562 affects OpenHarmony v5.0.3 and earlier. The vulnerability is a local DoS caused by a missing release of memory (memory leak) in the communication_dsoftbus component, enabling a local attacker to exhaust memory. Impact is described as availability loss (DoS); CVSS metrics indicate L...

CVE-2025-26690 communication dsoftbus has a NULL pointer vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker case DOS through NULL pointer dereference...

CVE-2025-24298 liteos_a has an UAF vulnerability

in OpenHarmony v5.0.3 and prior versions allow a local attacker arbitrary code execution in tcb through use after free...

CVE-2025-27577

CVE-2025-27577 affects OpenHarmony v5.0.3 and earlier where a local attacker can achieve arbitrary code execution via a race condition in the tcb component. The root cause is a race condition that could be exploited locally; no remote vector is described in the provided documents. A remediation i...

PT-2025-32591 · Unknown +1 · Stirling-Pdf +1

Name of the Vulnerable Software and Affected Versions: Stirling-PDF versions prior to 1.1.0 Description: Stirling-PDF is a locally hosted web application used for PDF file operations. The “convert file to pdf” functionality, accessible via the /api/v1/convert/file/pdf API endpoint, is susceptible...

PT-2025-32508 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.4 Description: OpenHarmony versions prior to 5.0.4 are susceptible to a denial-of-service DoS condition due to improper input handling. A local attacker can exploit this issue to cause a DoS. Recommendations:...

PT-2025-32565 · Abb · Abb Aspect

Name of the Vulnerable Software and Affected Versions: ABB Aspect versions prior to 3.08.04-s01 Description: An authorization bypass exists due to a user-controlled key. Recommendations: Update ABB Aspect to version 3.08.04-s01 or later...

PT-2025-32592

Name of the Vulnerable Software and Affected Versions: pyLoad versions prior to 0.5.0b3.dev91 Description: pyLoad, a free and open-source Download Manager written in pure Python, contains a SQL Injection issue in the add links parameter of the /json/add package API endpoint. This allows attackers...

PT-2025-32587 · Omnissa · Omnissa Secure Email Gateway +1

Name of the Vulnerable Software and Affected Versions: Omnissa Secure Email Gateway SEG versions prior to 2.32 Windows Omnissa Secure Email Gateway SEG versions prior to 2503 UAG Description: This issue is a Server-Side Request Forgery SSRF that allows routing of network traffic, such as HTTP...

Linksys’ various products have security vulnerabilities

Linksys RE6250 and others are a wireless extender from Linksys USA. A security vulnerability exists in various Linksys products, which stems from improper manipulation of the Hostname parameter in the sub3517C function, which may lead to os command injection. The following products and versions a...

PT-2025-32512 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.4 Description: OpenHarmony versions prior to 5.0.4 are susceptible to a denial-of-service DoS condition due to a type confusion issue. A local attacker can exploit this to cause a DoS. Recommendations: Update...