PT-2025-18615 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, specifically in the btrfs file system. The issue is related to the mishandling of the tree mod log for reallocated nodes, which c...

PT-2025-18559 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free issue has been identified in the Linux kernel, specifically in the ASoC core. The issue arises when snd soc util init fails, but its return value is ignored, leading t...

PT-2025-18315 · Elastic +2 · Elastic +2

Name of the Vulnerable Software and Affected Versions: Volcano versions prior to 1.11.2, 1.10.2, 1.9.1, 1.11.0-network-topology-preview.3, and 1.12.0-alpha.2 Description: The issue is related to a privilege escalation that can cause denial of service of the scheduler. If an attacker compromises...

PT-2025-18293 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions 6.1-milestone-1 through 15.10.12 XWiki versions 16.0.0-rc-1 through 16.4.3 XWiki versions 16.5.0-rc-1 through 16.8.0-rc-1 Description: The script API of the LESS compiler in XWiki is incorrectly checking for rights when calling...

PT-2025-18161

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 138 Thunderbird versions prior to 138 Description Memory safety bugs are present in certain versions of Firefox and Thunderbird, showing evidence of memory corruption. It is presumed that with enough effort, some of...

PT-2025-18043 · WordPress · Wp-Recall

Name of the Vulnerable Software and Affected Versions: WP-Recall WordPress plugin version 16.26.12 and earlier Description: The WP-Recall WordPress plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting...

PT-2025-18099 · Opentext · Openasset Digital Asset Management

Name of the Vulnerable Software and Affected Versions: OpenText Digital Asset Management versions through 24.4 Description: The issue is related to an SQL Injection vulnerability, which could allow an authenticated user to run arbitrary SQL commands on the underlying database. This problem affect...

PT-2025-18010 · Document Foundation +4 · Libreoffice +4

Name of the Vulnerable Software and Affected Versions: LibreOffice versions 24.8 through 24.8.5 LibreOffice versions 25.2 through 25.2.1 Description: The issue is related to an Improper Verification of Cryptographic Signature, allowing PDF Signature Spoofing by Improper Validation. A flaw in the...

PT-2025-17969 · Nasa · Nasa Cryptolib

Name of the Vulnerable Software and Affected Versions: NASA CryptoLib versions prior to 1.3.2 Description: The issue is related to the OTAR crypto function in NASA CryptoLib, where the returned status is not checked, potentially leading to spacecraft hijacking. Recommendations: For NASA CryptoLib...

PT-2025-19347 · Rancher +1 · Rancher +1

Name of the Vulnerable Software and Affected Versions: Steve versions prior to v0.2.1 Steve versions prior to v0.3.3 Steve versions prior to v0.4.4 Steve versions prior to v0.5.13 Description: A vulnerability has been identified in Steve where it uses an insecure option by default, not validating...

PT-2025-29163 · Honeywell · Honeywell Experion Pks

Name of the Vulnerable Software and Affected Versions: Honeywell Experion PKS versions 520.1 through 520.2 TCU9 Honeywell Experion PKS versions 530 through 530 TCU3 Description: The Honeywell Experion PKS contains an integer underflow vulnerability in the Control Data Access CDA component. An...

PT-2025-17722 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon centreon-web versions 22.10.0 through 22.10.27 Centreon centreon-web versions 23.04.0 through 23.04.24 Centreon centreon-web versions 23.10.0 through 23.10.19 Centreon centreon-web versions 24.04.0 through 24.04.9 Centreon centreon-w...

PT-2025-17631 · Insyde · Insydeh2O

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O kernel versions 5.2 through 05.29.49 Insyde InsydeH2O kernel versions 5.3 through 05.38.49 Insyde InsydeH2O kernel versions 5.4 through 05.46.49 Insyde InsydeH2O kernel versions 5.5 through 05.54.49 Insyde InsydeH2O kernel...

PT-2025-17633 · Insyde · Kernel

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O kernel versions 5.2 through 05.29.49 Insyde InsydeH2O kernel versions 5.3 through 05.38.49 Insyde InsydeH2O kernel versions 5.4 through 05.46.49 Insyde InsydeH2O kernel versions 5.5 through 05.54.49 Insyde InsydeH2O kernel...

PT-2025-17706 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 16.6 through 17.9.7 GitLab EE/CE versions 17.10 through 17.10.5 GitLab EE/CE versions 17.11 through 17.11.1 Description: An issue has been discovered in GitLab EE/CE that could allow an attacker to track users' browsing...

PT-2025-17639

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.1-44 Description The issue is related to the mishandling of packet size in multispectral MIFF image processing, which is connected to the rendering of all channels in an arbitrary order. Recommendations For...

PT-2025-17530 · Averta +1 · Master Slider

Name of the Vulnerable Software and Affected Versions: Averta Master Slider versions 3.10.8 and earlier Master Slider Plugin versions 3.10.7 and earlier Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects the Master Slider Plugin on WordPress,...

PT-2025-17523 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions 2.3.0p29 Checkmk versions 2.2.0p41 Checkmk versions =2.1.0p49 Description: The issue involves the insertion of sensitive information into log files in Checkmk, causing remote site authentication secrets to be written to log...

PT-2025-17499 · Sirv · Sirv

Name of the Vulnerable Software and Affected Versions: Sirv versions through 7.5.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. Specifically, it is a Stored XSS vulnerability, which means that an attacker can...

PT-2025-17507 · Watu Quiz · Watu Quiz

Name of the Vulnerable Software and Affected Versions: Watu Quiz versions 3.4.3 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...