PT-2024-31395 · Bareos · Bareos

Name of the Vulnerable Software and Affected Versions: Bareos versions prior to 21.1.11 Bareos versions prior to 22.1.6 Bareos versions prior to 23.0.4 Description: The issue concerns the command ACL in Bareos, where command restrictions can be bypassed using abbreviations. When a command ACL is ...

PT-2024-31614

Name of the Vulnerable Software and Affected Versions: Twig versions prior to 1.44.8 Twig versions prior to 2.16.1 Twig versions prior to 3.14.0 Description: Under some circumstances, the sandbox security checks are not run, which allows user-contributed templates to bypass the sandbox...

PT-2024-12793 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.0.2737 build 20240417 QNAP QuTS hero versions prior to h5.2.0.2782 build 20240601 Description: A missing authorization issue has been reported, affecting several QNAP operating system versions. If exploited, it...

PT-2025-18291 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions 13.5-rc-1 through 15.10.12 XWiki versions 16.0.0-rc-1 through 16.4.3 XWiki versions 16.5.0-rc-1 through 16.7.x Description: The issue is related to an open redirect vulnerability in the HTML conversion request filter. This allo...

PT-2024-31442 · Mbed Tls · Mbed Tls

Name of the Vulnerable Software and Affected Versions: Mbed TLS versions 3.6 through 3.6.0 Description: A stack buffer overflow can occur in mbedtls ecdsa der to raw and mbedtls ecdsa raw to der when the bits parameter is larger than the largest supported curve. In some configurations with PSA...

PT-2024-5937

Name of the Vulnerable Software and Affected Versions: HAProxy versions 2.9.x through 2.9.9 HAProxy versions 3.0.x through 3.0.3 HAProxy versions 3.1.x through 3.1-dev6 Description: The issue is related to a remote denial of service vulnerability in HAProxy, which can be exploited under certain...

PT-2025-11274 · Ibm · Ibm Security Qradar Edr

Name of the Vulnerable Software and Affected Versions: IBM Security QRadar version 3.12 EDR Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt sensitive credential information. Recommendations: For IBM Security...

PT-2025-25437 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions before 15.10.16 XWiki versions 16.0.0-rc-1 through 16.4.6 XWiki versions 16.5.0-rc-1 through 16.10.1 Description: The issue concerns XWiki, a generic wiki platform. In affected versions, an attacker without script or programmin...

PT-2024-6112 · Google +10 · Go +10

Name of the Vulnerable Software and Affected Versions: Go versions prior to 1.23.1 Go versions prior to 1.22.7 Description: The issue is related to the Parse function in the Go programming language, which can cause a panic due to stack exhaustion when dealing with deeply nested expressions in a "...

PT-2024-12486 · Mobotix · Mx6 Cameras +1

Name of the Vulnerable Software and Affected Versions: MOBOTIX P3 cameras versions prior to MX-V4.7.2.18 MOBOTIX Mx6 cameras versions prior to MX-V5.2.0.61 Description: The issue concerns the tcpdump feature, which does not properly validate input. This allows authenticated users to execute code...

PT-2024-5547

Name of the Vulnerable Software and Affected Versions Microsoft Edge versions prior to the fixed version Microsoft Windows 10 version 1507 prior to 10.0.10240.20751 Description The vulnerability is related to a memory corruption issue in the Windows Scripting Engine, which can be exploited by...

AMD µPROF Security Notice

Bulletin ID: AMD-SB-9001 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary AMD μProf “MICRO-prof” is a software profiling analysis tool for x86 applications running on Windows®, Linux® and FreeBSD® operating systems and is designed to...

PT-2024-6342 · Google +5 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.119 Description: The issue is related to an out of bounds write in the V8 JavaScript engine of Google Chrome and Microsoft Edge browsers. This can allow a remote attacker to potentially exploit heap...

PT-2024-5503

Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to the fixed version Microsoft Office 2016 Microsoft Office 2019 Microsoft Office LTSC 2021 Microsoft 365 Apps for Enterprise Description A spoofing vulnerability in Microsoft Office allows attackers to affect t...

PT-2024-38206 · Grpc +2 · Grpc +2

Name of the Vulnerable Software and Affected Versions: gRPC versions prior to 1.58.3 gRPC versions prior to 1.59.5 gRPC versions prior to 1.60.2 gRPC versions prior to 1.61.3 gRPC versions prior to 1.62.3 gRPC versions prior to 1.63.2 gRPC versions prior to 1.64.3 gRPC versions prior to 1.65.4...

PT-2024-28222 · Openai · Chatgpt Chatbot

Name of the Vulnerable Software and Affected Versions: AI Engine: ChatGPT Chatbot versions n/a through 2.4.7 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. This allows for Server Side Request Forgery in the ChatGPT Chatbot. Recommendations: For versions n/a...

PT-2025-12383

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 10.6 tvOS versions prior to 17.6 Safari versions prior to 17.6 macOS Sonoma versions prior to 14.6 visionOS versions prior to 1.3 iOS versions prior to 17.6 iPadOS versions prior to 17.6 Description The issue was...

PT-2024-5598

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u411, 8u411-perf, 11.0.23 Oracle GraalVM Enterprise Edition versions 20.3.14, 21.3.10 IBM SDK, Java Technology Edition versions 7.1.0.0 through 7.1.5.18 IBM SDK, Java Technology Edition versions 8.0.0.0 through 8.0.8.2...

PT-2024-5086 · Oracle · Oracle Reports Developer

Name of the Vulnerable Software and Affected Versions: Oracle Reports Developer versions 12.2.1.4.0 through 12.2.1.19.0 Description: The issue is related to insufficient input validation in the Servlet component of Oracle Reports Developer. This can be exploited by a remote attacker to gain read,...

PT-2024-28665 · Mattermost +1 · Mattermost Mobile Apps +1

Name of the Vulnerable Software and Affected Versions: Mattermost Mobile Apps versions =2.16.0 Description: The issue allows a malicious server to send push notifications with another server's diagnostic ID or server URL, making them appear as legitimate push notifications from the actual server ...