PT-2025-46993

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description Sensitive Information is exposed to an Unauthorized Actor in the Application Server. Recommendations Update to a newer version of Desktop Alert PingAlert to address this iss...

PT-2025-46985

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2 Description An issue exists in the Application Server of the software that allows remote Path Traversal for loading arbitrary external content. The vulnerability allows an attacker to...

PT-2025-46811

Name of the Vulnerable Software and Affected Versions YOP Poll versions through 6.5.38 Description An authorization issue exists in YOP Poll, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update YOP Poll to a version later than 6.5.38...

PT-2025-46780

Name of the Vulnerable Software and Affected Versions WP All Import versions up to and including 3.9.6 Description The Import any XML, CSV or Excel File to WordPress WP All Import plugin for WordPress is susceptible to Remote Code Execution. This is caused by the use of eval on unsanitized...

PT-2025-46687

Name of the Vulnerable Software and Affected Versions CUPS-Filters versions up to and including 1.28.17 libcupsfilters versions 2.0.0 through 2.1.1 Description CUPS is a standards-based, open-source printing system, and libcupsfilters contains the code of the filters of the former cups-filters...

PT-2025-46733

Name of the Vulnerable Software and Affected Versions Ozeki SMS Gateway versions up to and including 10.3.208 Description Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal issue. A successful exploit allows an unauthenticated attacker to read arbitrary files from th...

Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2025-2399)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-46430

Name of the Vulnerable Software and Affected Versions Intel QuickAssist Technology versions prior to 2.6.0 Description An issue exists in Intel QuickAssist Technology software that may allow an escalation of privilege. A local attacker with an authenticated user account and low complexity attack...

PT-2025-46492

Name of the Vulnerable Software and Affected Versions Illustrator on iPad versions 3.0.9 and earlier Description Illustrator on iPad versions 3.0.9 and earlier are susceptible to a Heap-based Buffer Overflow. Successful exploitation of this issue could lead to arbitrary code execution with the...

PT-2025-46385

Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description A flaw exists in privilege management within some IntelR CIP software. This issue, present in Ring 3 User Applications, could allow an unprivileged software adversary with a...

PT-2025-46441

Name of the Vulnerable Software and Affected Versions InDesign Desktop versions 20.5, 19.5.5 and earlier Description InDesign Desktop versions 20.5, 19.5.5 and earlier are susceptible to a Use After Free issue. Successful exploitation of this issue could lead to arbitrary code execution with the...

PT-2025-46264

Name of the Vulnerable Software and Affected Versions Shelf Planner versions 2.7.0 and earlier Description The Shelf Planner plugin for WordPress has a flaw that could expose sensitive information. This is due to publicly exposed log files, potentially allowing unauthenticated attackers to view...

PT-2025-46315

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools for Mac BEST versions prior to 7.20.52.200087 Description A configuration issue in Bitdefender Endpoint Security Tools for Mac BEST allows local users with administrative privileges to bypass the uninstall...

PT-2025-46431

Name of the Vulnerable Software and Affected Versions PRI Driver software versions prior to 03.03.1002 Description An unquoted search path in some PRI Driver software before version 03.03.1002 within Ring 3: User Applications may allow an escalation of privilege. An unprivileged software adversar...

Zoom Workplace < 6.5.10 Vulnerability (ZSB-25040)

The version of Zoom Workplace installed on the remote host is prior to 6.5.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25040 advisory. - External control of file name or path in Zoom Workplace for macOS before version 6.5.10 may allow an authenticated user to conduc...

PT-2025-46196

Name of the Vulnerable Software and Affected Versions Combodo iTop versions prior to 2.7.13 Combodo iTop versions prior to 3.2.2 Description Combodo iTop is a web-based IT service management tool. A user with sufficient privileges to create webhooks typically administrators can drop the database...

PT-2025-45429

Name of the Vulnerable Software and Affected Versions File Station 5 versions prior to 5.5.6.5018 Description A flaw exists in File Station 5 that allows a remote attacker, having obtained a user account, to trigger a denial-of-service DoS attack due to a NULL pointer dereference. The issue...

PT-2025-46211

Name of the Vulnerable Software and Affected Versions Pdfminer.six versions prior to 20251107 Description Pdfminer.six is a tool for extracting information from PDF documents. Prior to version 20251107, the software could execute arbitrary code from a malicious pickle file when processing a...

CVE-2024-25621 containerd affected by a local privilege escalation via wide permissions on CRI directory

containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.2.0-beta.0 through 2.2.0-rc.1 have an overly broad default permission vulnerability. Directory paths /var/lib/containerd,...

PT-2025-45175

Name of the Vulnerable Software and Affected Versions Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress versions up to and including 8.6.0 Description The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress has a flaw related to file uploads. An incorrect...