PT-2025-21025 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Bridge versions 15.0.3, 14.1.6 and earlier Description: The issue is an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-21123 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or...

PT-2025-21018 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 29.3, 28.7.5 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction,...

PT-2025-21076 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: The issue is related to improper input validation, which may allow a privileged user to potentially enable denial of service via local access...

Important: nvidia-fabric-manager

Issue Overview: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

PT-2025-21110 · Intel · Intel Simics Package Manager

Name of the Vulnerable Software and Affected Versions: IntelR SimicsR Package Manager versions prior to 1.12.0 Description: Insecure inherited permissions for some IntelR SimicsR Package Manager software may allow an authenticated user to potentially enable denial of service via local access...

PT-2025-21096 · Intel · Intel Network Adapters

Name of the Vulnerable Software and Affected Versions: IntelR Network Adapters package versions prior to 29.4 Description: A race condition in some Administrative Tools for IntelR Network Adapters may allow an authenticated user to potentially enable escalation of privilege via local access...

Medium: javapackages-bootstrap

Issue Overview: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are...

PT-2025-23247 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The issue allows an attacker with an unactivated email invitation containing the invite hash to self-activate their account, even if it is blocked or deleted. This is achieved by leveraging the...

PT-2025-21070 · Intel · Intel Ethernet Connection

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Connection software versions prior to 29.4 Description: The issue is related to an uncontrolled search path element in some IntelR Ethernet Connection software. This may allow an authenticated user to potentially enable...

PT-2025-20917

Name of the Vulnerable Software and Affected Versions: OXID eShop versions prior to 7 Description: An issue in OXID eShop allows CMS pages, when used in combination with Smarty, to potentially display user information if a CMS page contains a Smarty syntax error. Recommendations: For versions pri...

PT-2025-21060 · Intel · Intel Oneapi Dpc++/C++ Compiler

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler versions prior to 2025.0.0 Description: The issue concerns an uncontrolled search path in some IntelR oneAPI DPC++/C++ Compiler software. This may allow an authenticated user to potentially enable escalation o...

PT-2025-23265 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.181 Description: FreeScout is a free self-hosted help desk and shared mailbox. A race condition could occur when an administrative account is deleting a user. This issue has been patched in version 1.8.181...

PT-2025-23244 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The issue is related to insufficient input validation during user creation, resulting in a mass assignment vulnerability. This vulnerability allows an attacker to manipulate all fields of the...

PT-2025-23174 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.179 Description: The issue concerns the lack of a check to ensure users can only disable notifications for mailboxes they already have access to. The code allows users to gain access to a mailbox by disabling o...

PT-2025-20844 · Siemens · Polarion

Name of the Vulnerable Software and Affected Versions: Polarion V2310 All versions Polarion V2404 versions prior to V2404.4 Description: The application insufficiently validates user input for database read queries, which could allow an authenticated remote attacker to conduct an SQL injection...

PT-2025-21033 · Dimension · Dimension

Name of the Vulnerable Software and Affected Versions: Dimension versions 4.1.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. To exploit this problem, it is necessary for the victim to...

Siemens Polarion

SUMMARY Polarion before V2410 contains multiple vulnerabilities that could allow attackers to extract data, conduct cross-site scripting attacks or find out valid usernames. Siemens strongly recommends to update Polarion to V2410 or later versions, not only to fix the documented vulnerabilities,...

PT-2025-20690 · Espocrm · Espocrm

Name of the Vulnerable Software and Affected Versions: EspoCRM versions prior to 9.0.8 Description: The issue allows for HTML Injection in Knowledge Base KB articles, leading to complete page defacement that can imitate the login page. Authenticated users with the read knowledge article privilege...

PT-2025-20736 · Unknown · Thingsboard

Name of the Vulnerable Software and Affected Versions: ThingsBoard versions 3.8.1 and below Description: An arbitrary file upload vulnerability in the Image Gallery of ThingsBoard allows attackers to execute arbitrary code via uploading a crafted file. Recommendations: For versions 3.8.1 and belo...