Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21454)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

PT-2025-33512 · Hcl · Hcl Bigfix Saas

Name of the Vulnerable Software and Affected Versions: HCL BigFix SaaS affected versions not specified Description: HCL BigFix SaaS Authentication Service is susceptible to cache poisoning. The HTTP responses from BigFix SaaS include the Origin header, and its presence, combined with an unvalidat...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21447)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause an editorial subscription...

PT-2025-33440 · Hcl · Hcl Connections

Name of the Vulnerable Software and Affected Versions: HCL Connections affected versions not specified Description: HCL Connections contains a broken access control vulnerability that may allow an unauthorized user to update data in certain scenarios. Recommendations: At the moment, there is no...

Unspecified Vulnerability in Mattermost Confluence Plugin (CNVD-2025-21452)

Mattermost Confluence Plugin is a plugin from Mattermost USA. Mattermost Confluence Plugin contains a security vulnerability that can be exploited by attackers to cause the plugin to crash...

PT-2025-33510 · Hcl · Hcl Bigfix Saas Authentication Service

Name of the Vulnerable Software and Affected Versions: HCL BigFix SaaS Authentication Service affected versions not specified Description: The HCL BigFix SaaS Authentication Service is susceptible to a sensitive information disclosure. Error messages, under specific circumstances, reveal sensitiv...

PT-2025-33143

Name of the Vulnerable Software and Affected Versions: Flowise JS affected versions not specified Description: User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host by...

PT-2025-33106 · Ibm · Ibm Websphere Application Server Liberty

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server Liberty affected versions not specified Description: IBM WebSphere Application Server Liberty is susceptible to a denial of service condition. Recommendations: At the moment, there is no information about a...

PT-2025-32958

Name of the Vulnerable Software and Affected Versions: Tcg2Smm affected versions not specified Description: Tcg2Smm contains a flaw that allows writing arbitrary memory inside SMRAM and executing arbitrary code at the SMM level. Recommendations: At the moment, there is no information about a newe...

PT-2025-32647 · Siemens · Automation License Manager V6.0 +134

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when a legitimate user installs an...

PT-2025-32821 · Unknown +1 · Storage Port Driver +1

Name of the Vulnerable Software and Affected Versions: Storage Port Driver affected versions not specified Description: The Storage Port Driver is susceptible to a flaw that permits an authorized attacker to locally disclose sensitive information to an unauthorized actor. Recommendations: At the...

PT-2025-32799 · Microsoft · Windows Media +1

Name of the Vulnerable Software and Affected Versions: Windows Media affected versions not specified Description: A heap-based buffer overflow exists in Windows Media, potentially allowing an unauthorized attacker to execute code over a network. Recommendations: At the moment, there is no...

PT-2025-32733 · Intel · Intel Graphics Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers affected versions not specified Description: A NULL pointer dereference in some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At the...

PT-2025-32706 · Intel · Intel Tdx Firmware

Name of the Vulnerable Software and Affected Versions: IntelR TDX firmware affected versions not specified Description: A predictable seed in the Pseudo-Random Number Generator PRNG within the firmware may allow an authenticated user to potentially enable information disclosure via local access...

PT-2025-32815

Name of the Vulnerable Software and Affected Versions Windows Kernel Streaming WOW Thunk Service Driver versions prior to a patch released in September 2025 Description A heap-based buffer overflow exists in the Windows Kernel Streaming WOW Thunk Service Driver ksthunk.sys. This issue allows an...

PT-2025-32809 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: A use after free issue exists in Microsoft Brokering File System that could allow an authorized attacker to elevate privileges locally. Recommendations: At the momen...

PT-2025-32838

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: An incorrect conversion between numeric types in Microsoft Office Word can allow an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

PT-2025-32742

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: Improper validation of syntactic correctness of input allows an unauthorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...

PT-2025-32828 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: A numeric truncation error exists in Windows Hyper-V that may allow an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information abo...

PT-2025-32767 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions affected versions not specified Description: A race condition exists in the Microsoft Graphics Component due to improper synchronization during concurrent execution using a shared resource. This allows an authorized...