12569 matches found
PT-2025-25400 · Ricoh · Ricoh Streamline Nx V3 Pc Client
Name of the Vulnerable Software and Affected Versions: RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0 Description: An issue exists where an attacker can control file names or paths, allowing arbitrary files in the file system to be overwritten with log data if a specially crafted...
PT-2025-25436 · Unknown · Xwiki Platform
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 10.9 through 16.4.6 XWiki Platform versions 16.5.0-rc-1 through 16.10.2 XWiki Platform versions 17.0.0-rc-1 Description: The issue affects XWiki, a generic wiki platform, where an attacker can access the title of every...
PT-2025-25446 · Dell · Dell Controlvault3 +1
Name of the Vulnerable Software and Affected Versions: Dell ControlVault3 versions prior to 5.15.10.14 Dell ControlVault3 Plus versions prior to 6.2.26.36 Description: A stack-based buffer overflow vulnerability exists in the securebio identify functionality. A specially crafted malicious cv obje...
PT-2025-25429 · Drupal · Drupal Etracker
Name of the Vulnerable Software and Affected Versions: Drupal etracker versions 0.0.0 through 3.0.x Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows an attacker to perform Cross-Site Scripting XSS...
PT-2025-25427 · Drupal · Drupal Simple Klaro
Name of the Vulnerable Software and Affected Versions: Drupal Simple Klaro versions 0.0.0 through 1.10.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Cross-Site Scripting XSS attacks...
PT-2025-25428 · Drupal · Drupal Simple Klaro
Name of the Vulnerable Software and Affected Versions: Drupal Simple Klaro versions 0.0.0 through 1.10.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Cross-Site Scripting XSS attacks...
PT-2025-29175 · Advantech · Advantech Iview
Name of the Vulnerable Software and Affected Versions: Advantech iView versions prior to 5.7.05 build 7057 Description: A reflected cross-site scripting XSS issue exists. By manipulating certain input parameters, an attacker could execute unauthorized scripts in the user's browser, potentially...
PT-2025-25382 · WordPress · Wp Travel Engine
Name of the Vulnerable Software and Affected Versions: The WP Travel Engine – Tour Booking Plugin – Tour Operator Software plugin for WordPress versions up to, and including, 6.5.1 Description: The issue is related to a missing capability check on the delete package function, allowing...
RHSA-2025:8981 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
Bulletin has no description...
RHSA-2025:8982 Red Hat Security Advisory: grafana-pcp security update
Bulletin has no description...
RHSA-2025:8977 Red Hat Security Advisory: gstreamer1-plugins-bad-free security update
Bulletin has no description...
RHSA-2025:8918 Red Hat Security Advisory: grafana-pcp security update
Bulletin has no description...
RHSA-2025:8916 Red Hat Security Advisory: grafana-pcp security update
Bulletin has no description...
RHSA-2025:8844 Red Hat Security Advisory: mod_security security update
Bulletin has no description...
RHSA-2025:8837 Red Hat Security Advisory: mod_security security update
Bulletin has no description...
PT-2025-25358 · Pcsx2 +1 · Pcsx2 +1
Name of the Vulnerable Software and Affected Versions: PCSX2 versions up to 2.3.414 Description: A stack-based buffer overflow exists in the Kprintf HLE function. Opening a disc image that logs a specially crafted message may allow a remote attacker to execute arbitrary code if the user enabled I...
PT-2025-25355 · Dell · Idrac Tools
Name of the Vulnerable Software and Affected Versions: Dell iDRAC Tools versions prior to 11.3.0.0 Description: The issue is related to an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...
PT-2025-25334
Name of the Vulnerable Software and Affected Versions InstallShield versions 2021 R2 through 2023 R2 Description A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. Recommendations For...
PT-2025-25331 · Dell · Dell Smart Dock Firmware
Name of the Vulnerable Software and Affected Versions: Dell Smart Dock Firmware versions prior to 01.00.08.01 Description: The issue concerns an Insertion of Sensitive Information into Log File, which could be exploited by a user with local access, potentially leading to information disclosure...