PT-2025-11592

Name of the Vulnerable Software and Affected Versions cifs-utils affected versions not specified Description The issue concerns cifs-utils, specifically the cifs.upcall component, which makes an upcall to the wrong namespace in containerized environments. Recommendations At the moment, there is n...

PT-2025-54482

Name of the Vulnerable Software and Affected Versions GNU Wget2 affected versions not specified Description GNU Wget2 contains a path traversal flaw when processing Metalink documents. The application does not properly validate file paths within the elements of Metalink v3/v4 documents. This allo...

PT-2025-38317

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.185 Microsoft Edge versions prior to 140.0.7339.185 Description A use-after-free issue exists in the WebRTC component of Google Chrome and Microsoft Edge. This flaw could allow a remote attacker to...

PT-2025-38318

Name of the Vulnerable Software and Affected Versions Chromium versions prior to 140.0.7339.185 Microsoft Edge Chromium-based versions prior to 140.0.7339.185 Description A heap buffer overflow exists in the ANGLE component of Google Chrome and Microsoft Edge. This issue could allow a remote...

PT-2025-34184

Name of the Vulnerable Software and Affected Versions: glib2.0 affected versions not specified Description: The software contains a buffer underrun issue within the get tmp file function. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

PT-2024-32897 · Unknown · Smadar Sps

Name of the Vulnerable Software and Affected Versions: Smadar SPS affected versions not specified Description: The issue is related to the use of a broken or risky cryptographic algorithm, as identified by CWE-327. This could potentially lead to security risks due to the weakness in the...

PT-2024-32898 · Priority · Pri Web

Name of the Vulnerable Software and Affected Versions: Priority affected versions not specified Description: The issue involves exposure of sensitive information to unauthorized actors, classified as CWE-200. This means that sensitive data may be accessible to individuals who are not supposed to...

PT-2024-32899 · Mashov · Mashov

Name of the Vulnerable Software and Affected Versions: Mashov affected versions not specified Description: The issue involves the exposure of sensitive information to an unauthorized actor, labeled as CWE-200. This concerns the potential for unauthorized access to sensitive data. Recommendations:...

PT-2024-11760

Name of the Vulnerable Software and Affected Versions Huawei HiLink AI Life product affected versions not specified Description The Huawei HiLink AI Life product has an identity authentication bypass issue. This could allow attackers to access restricted functions if the issue is successfully...

PT-2024-10978 · Huawei · Huawei Wearables

Name of the Vulnerable Software and Affected Versions: Huawei wearables affected versions not specified Description: The issue is related to a permission management vulnerability in some Huawei wearables. There is no information provided about the estimated number of potentially affected devices...

PT-2024-39358 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak. Successful exploitation of this issue could cause information to leak. Recommendations: At the moment, there is no information about a...

PT-2024-32440 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak. Successful exploitation could cause the leak of information. There is no information provided about the estimated number of potentially...

PT-2024-32441 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak. Successful exploitation of this issue could cause information to leak. Recommendations: At the moment, there is no information about a...

PT-2024-32444 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an incorrect privilege assignment, which could lead to device service exceptions if successfully exploited. Recommendations: At the moment, there is no...

PT-2024-32443 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak. Successful exploitation of this issue could cause information to leak. Recommendations: At the moment, there is no information about a...

PT-2024-39357 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak. Successful exploitation of this issue could cause information to leak. Recommendations: At the moment, there is no information about a...

CGA-2X95-FMJG-Q2CG

Bulletin has no description...

PT-2024-27877 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue concerns automated Windows patching with PowerShell. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2024-9963 · Unknown · Express Web Client

Name of the Vulnerable Software and Affected Versions: eXpress web client affected versions not specified Description: The issue is caused by insufficient protection of the web page structure in the document viewer library of the eXpress web client. This allows a remote attacker to execute...

kernel: xfrm: validate new SA's prefixlen using SA family when sel.family is unset

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a "xfrm: Validate address prefix lengths in the xfrm selector." syzbot created an SA with...