6721 matches found
PT-2025-32299 · Unknown · Hospital Management System
Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4 Description: The Hospital Management System is susceptible to a SQL injection issue through the app contact parameter in the appsearch.php file. Recommendations: As a temporary workaround, consider...
PT-2025-32219 · Unknown · Vedo Suite
Name of the Vulnerable Software and Affected Versions: Vedo Suite version 2024.17 Description: The application stores credentials in clear-text within the /api vedo/configuration/config.yml file. This file contains sensitive information, including credentials, secret keys, and database informatio...
PT-2025-32134 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A memory corruption issue exists when processing an IOCTL command with an arbitrary address. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...
PT-2025-32135
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: The software suffers from a memory corruption issue when processing DirectDraw Interface DDI command calls. Recommendations: At the moment, there is no information about a newer version that contai...
PT-2025-32198 · Marbella · Marbella Kr8S Dashcam Ff
Name of the Vulnerable Software and Affected Versions: Marbella KR8s Dashcam FF version 2.0.8 Description: An issue exists on Marbella KR8s Dashcam FF 2.0.8 devices where video recordings, containing sensitive data such as routes, conversations, and footage, are accessible for download. This is...
PT-2025-32115 · Unknown · Usmartview
Name of the Vulnerable Software and Affected Versions: Smart View versions prior to Android 16 Description: The use of implicit intents for sensitive communication allows local attackers to access sensitive information. Recommendations: Update Smart View to Android 16 or later...
PT-2025-32082 · WordPress · Zakra
Name of the Vulnerable Software and Affected Versions: Zakra versions prior to 4.1.6 Description: The Zakra theme for WordPress is susceptible to unauthorized data modification due to a missing capability check on the welcome notice import handler function. This allows authenticated attackers wit...
PT-2025-32221 · Unknown · Vedo Suite
Name of the Vulnerable Software and Affected Versions: Vedo Suite version 2024.17 Description: A local file inclusion vulnerability exists in Vedo Suite version 2024.17. This issue allows remote authenticated attackers to read arbitrary filesystem files by exploiting an unsanitized readfile...
PT-2025-31942 · Xwiki · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 4.2-milestone-3 through 16.4.7 XWiki Platform versions 16.5.0-rc-1 through 16.10.5 XWiki Platform versions 17.0.0-rc-1 through 17.2.2 Description: The platform contains reflected cross-site scripting XSS vulnerabilitie...
PT-2025-32005 · Risc Zero · Risc0-Zkvm +2
Name of the Vulnerable Software and Affected Versions: risc0-zkvm versions 2.0.0 through 2.1.0 risc0-circuit-rv32im versions 2.0.0 through 2.0.4 risc0-circuit-rv32im-sys versions 2.0.0 through 2.0.4 Description: RISC Zero is a zero-knowledge verifiable general computing platform based on zk-STARK...
PT-2025-31947 · Firstnum · Firstnum Jc21A-04
Name of the Vulnerable Software and Affected Versions: FIRSTNUM JC21A-04 devices versions through 2.01ME/FN Description: FIRSTNUM JC21A-04 devices enable the SSH service by default with the credentials root/admin. The graphical user interface GUI does not provide a method to disable this account...
PT-2025-31996 · Sscms · Sscms
Name of the Vulnerable Software and Affected Versions: SSCMS version 7.3.1 Description: An issue in the /stl/actions/download?filePath component of SSCMS allows attackers to execute a directory traversal. Recommendations: Apply any available updates to address the directory traversal issue in the...
PT-2025-32043 · Kenwood · Kenwood Dmx958Xr
Name of the Vulnerable Software and Affected Versions: Kenwood DMX958XR affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations. Authentication is not required for exploitation. The flaw resides in the firmwar...
PT-2025-32008 · Unknown +1 · Security-Kit +1
Name of the Vulnerable Software and Affected Versions: Vision UI versions 1.4.0 and below security-kit versions prior to 3.5.0 Description: The getSecureRandomInt function contains a cryptographic weakness due to a silent 32-bit integer overflow in its internal masking logic. This prevents the...
PT-2025-32009 · Unknown +1 · Security-Kit +1
Name of the Vulnerable Software and Affected Versions: Vision UI versions 1.4.0 and below Description: The generateSecureId and getSecureRandomInt functions within the security-kit component versions prior to 3.5.0, packaged in Vision UI 1.4.0 and below are susceptible to Denial of Service DoS...
WordPress Amazon Native Shopping Recommendations Plugin <= 1.3 - SQL Injection Vulnerability
SQL Injection Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Plugin Amazon Native Shopping Recommendations versions = 1.3...
CVE-2025-54656 Apache Struts Extras: Improper Output Neutralization for Logs
UNSUPPORTED WHEN ASSIGNED Improper Output Neutralization for Logs vulnerability in Apache Struts. This issue affects Apache Struts Extras: before 2. When using LookupDispatchAction, in some cases, Struts may print untrusted input to the logs without any filtering. Specially-crafted input may lead...
CGA-P769-WCV6-R8PM
Bulletin has no description...
PT-2025-31457 · Projectworlds · Projectworlds Online Admission System
Name of the Vulnerable Software and Affected Versions: projectworlds Online Admission System version 1.0 Description: A critical issue exists in projectworlds Online Admission System that allows for remote SQL injection. The vulnerability is located in an unknown functionality within the...
