PT-2025-29330 · Phpgurukul · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical vulnerability exists in PHPGurukul Vehicle Parking Management System 1.13. The vulnerability is due to a SQL injection flaw within the /users/view--detail.php...

PT-2025-29841 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.5 Description: WeGIA is an open-source web manager designed for the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability exists in the adicionar raca.php endpoint. This...

PT-2025-29231 · Unknown · Egroupware

Name of the Vulnerable Software and Affected Versions: eGroupWare version 17.1.20190111 Description: A user enumeration issue exists in eGroupWare. An unauthenticated remote attacker can enumerate users of web applications based on server response via the /calendar/freebusy.php API endpoint...

PT-2025-29840 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.5 Description: WeGIA is an open source web manager designed for the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability exists in the adicionar especie.php endpoint. Thi...

CVE-2025-2522 Lack of buffer clearing before reuse may result in incorrect system behavior.

The Honeywell Experion PKS and OneWireless WDM contains Sensitive Information in Resource vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to a Communication Channel Manipulation, which could result in buffer reuse which may...

PT-2025-29167 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.4.0a Description: Brocade SANnav versions prior to 2.4.0a could log database passwords in clear text within audit logs when the daily data dump collector executes docker exec commands. These audit logs are...

Important: sudo

Issue Overview: Sudo before 1.9.17p1, when used with a sudoers file that specifies a host that is neither the current host nor ALL, allows listed users to execute commands on unintended machines. CVE-2025-32462 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.co...

PT-2025-28928 · Jenkins · Jenkins Xooa Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Xooa Plugin versions 0.0.7 and earlier Description: The Jenkins Xooa Plugin stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller. This allows users with access to the Jenkins controll...

PT-2025-28960 · Rockwell Automation · Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena versions prior to 16.20.09 Description: A remote code execution issue exists in Rockwell Automation Arena. A crafted DOE file can force Arena Simulation to write beyond the boundaries of an allocated object...

PT-2025-28930 · Jenkins · Jenkins User1St Utester Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins User1st uTester Plugin versions 1.1 and earlier Description: The Jenkins User1st uTester Plugin stores the uTester JWT JSON Web Token token unencrypted in its global configuration file on the Jenkins controller. This allows users with...

Debian dla-4238 : sslh - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4238 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4238-1 [email protected] https://www.debian.org/lts/security/...

PT-2025-28957 · Dell · Dell Powerflex Manager

Name of the Vulnerable Software and Affected Versions: Dell PowerFlex Manager VM versions prior to 4.6.2.1 Description: Dell PowerFlex Manager VM is affected by an issue allowing the insertion of sensitive information into log files. A low-privileged attacker with remote access could exploit this...

PT-2025-28742 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is related to an Improper Restriction of XML External Entity Reference 'XXE' that could result in a security feature bypass. An attacker could exploit this to...

PT-2025-28783 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

Siemens SIMATIC CN 4100

SUMMARY A vulnerability in SIMATIC CN 4100 could allow an attacker to cause a denial of service condition. Siemens has released a new version for SIMATIC CN 4100 and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends...

PT-2025-28412 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the "pagina.filter.categoria mensaje" in the "/QuiterGatewayWeb/api/v1/sucesospagina" endpoint. This...

PT-2025-28766 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 11.4 and earlier Description: Adobe Experience Manager versions 11.4 and earlier are susceptible to a stored Cross-Site Scripting XSS issue. A low-privileged attacker can exploit this to inject malicious...

PT-2025-28640 · Dimension · Dimension

Name of the Vulnerable Software and Affected Versions: Dimension versions 4.1.2 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitati...

PT-2025-28249 · Mediawiki · Mediasearch Extension

Name of the Vulnerable Software and Affected Versions: Mediawiki - MediaSearch Extension versions 1.39.X through 1.39.12 Mediawiki - MediaSearch Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as...

PT-2025-27877 · Ownerrez · Ownerrez

Name of the Vulnerable Software and Affected Versions: OwnerRez versions 1.2.1 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored Cross-site Scripting XSS. This means that an attacker can inject malicious scripts...