PT-2025-46544

Name of the Vulnerable Software and Affected Versions Siemens Software Center versions prior to 3.5 Solid Edge SE2025 versions prior to 225.0 Update 10 Description The software is susceptible to a DLL hijacking issue. An attacker could potentially execute arbitrary code by placing a specially...

PT-2025-46432

Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description A buffer overflow issue exists in some IntelR QAT Windows software. This can potentially allow a denial of service. A system software adversary with an authenticated user and a lo...

Siemens Software Center and Solid Edge

SUMMARY Siemens Software Center and Solid Edge is affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code via placing a crafted DLL file on the system. Siemens has released new versions for the affected products and recommends to update to the latest...

Intel PROSet/Wireless WiFi Software November 2025 Security Update

Intel has informed HP of potential security vulnerabilities for some Intel® PROSet/Wireless WiFi Software, which might allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilities. HP...

PT-2025-46533

Name of the Vulnerable Software and Affected Versions Spectrum Power versions prior to 4.70 SP12 Update 2 Description The application contains a flaw that allows local privilege escalation. An exposed debug interface on localhost enables any local user to gain code execution as an administrative...

PT-2025-46391

Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description A buffer overflow issue exists in some IntelR QAT Windows software. This flaw may allow an attacker with local access to escalate privileges. The attack requires an authenticated...

PT-2025-46397

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw due to unrestricted file upload of a dangerous type within Ring 3 User Applications. This could allow an unprivileged software adversary, combin...

PT-2025-46392

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description A protection mechanism failure exists in some IntelR CIP software. This issue, occurring within Ring 3 User Applications, may allow an information disclosure. An unprivilege...

PT-2025-46428

Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description A flaw exists in some IntelR QAT Windows software that may allow for a denial of service. A system software adversary with an authenticated user and a low complexity attack could...

PT-2025-46381

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw related to external control of file name or path within Ring 3 User Applications, potentially allowing an escalation of privilege. A local...

PT-2025-46390

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description An improper access control issue exists in some IntelR CIP software. This may allow an information disclosure within Ring 3 User Applications. An unprivileged software...

Intel Graphics Software November 2025 Security Update

Intel has informed HP of potential security vulnerabilities for some Intel® Graphics software, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential...

PT-2025-46420

Name of the Vulnerable Software and Affected Versions IntelR Graphics Software versions prior to 25.22.1502.2 Description An uncontrolled search path exists in some IntelR Graphics Software versions prior to 25.22.1502.2 within Ring 3 User Applications. This issue may allow an escalation of...

ITT API Software Advisory

Summary: A potential security vulnerability in some Instrumentation and Tracing Technology API ITT API software may allow escalation of privilage. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-31931 Description: Uncontrolled...

Intel® QAT Software Drivers Advisory 

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT software drivers for Windows may allow escalation of privilege, denial of service, or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Detail...

Intel® Neural Compressor Software Advisory

Summary: A potential security vulnerability for some Intel® Neural Compressor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27712 Description: Improper neutralization for some Intel®...

Intel® Rapid Storage Technology Software Advisory

Summary: A potential security vulnerability for the Intel® Rapid Storage Technology software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24327 Description: Insecure inherited permissions fo...

Intel® DSA Software Advisory

Summary: A potential security vulnerability for some Intel® Driver & Support Assistant Intel® DSA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-30506 Description: Uncontrolled search...

Improper Authentication

Overview Affected versions of this package are vulnerable to Improper Authentication through the Milvus Proxy component, which skips the source ID check. An attacker can gain full administrative access to the cluster, allowing them to read, modify, or delete data and perform privileged operations...

CVE-2025-64529 SpiceDB's WriteRelationships fails silently if payload is too big

SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions prior to 1.45.2, users who use the exclusion operator somewhere in their authorization schema; have configured their SpiceDB server such that...