PT-2025-41876

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This could allow for remote proximal/adjacent escalation of privilege without...

PT-2025-42171

Name of the Vulnerable Software and Affected Versions Substance3D - Viewer versions 0.25.2 and earlier Description An out-of-bounds write vulnerability exists in Substance3D - Viewer versions 0.25.2 and earlier. Successful exploitation of this issue could allow an attacker to execute arbitrary co...

PT-2025-41872

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw related to an incorrect bounds check, potentially leading to an out-of-bounds write. Successful exploitation of this issue could allow a malicious...

PT-2025-42188

Name of the Vulnerable Software and Affected Versions Dimension versions 4.1.4 and earlier Description The software is susceptible to an out-of-bounds read issue when processing a specially crafted file. This could allow a read past the end of an allocated memory structure. An attacker could...

PT-2025-41865

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This condition could allow for remote proximal/adjacent escalation of privilege...

PT-2025-42201

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization vulnerability. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to elevated privileg...

PT-2025-42192

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.4 and earlier Description An Integer Overflow or Wraparound issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User...

PT-2025-42204

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description The software is susceptible to a DOM-based Cross-Site Scripting XSS issue. Successful exploitation could allow an attacker to execute malicious scripts in a victim’s browser, potentially...

PT-2025-42200

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...

PT-2025-42207

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...

PT-2025-41867

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This could allow for remote proximal/adjacent escalation of privilege without...

PT-2025-41875

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw involving an incorrect bounds check, potentially leading to an out-of-bounds write. Successful exploitation of this issue could allow for remote...

PT-2025-42187

Name of the Vulnerable Software and Affected Versions Dimension versions 4.1.4 and earlier Description Dimension versions 4.1.4 and earlier are susceptible to an out-of-bounds read issue when processing a specially crafted file. This can lead to reading beyond the boundaries of allocated memory. ...

CVE-2025-9713

Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

CVE-2025-9713

Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

CVE-2025-9713

Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

EUVD-2025-34088

Path traversal in Ivanti Endpoint Manager allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

CVE-2025-9713

Ivanti Endpoint Manager CVE-2025-9713 is a path traversal issue that enables remote code execution on affected systems. The vulnerability affects versions prior to 2024 SU4 and requires user interaction for exploitation. Public documentation in the connected sources confirms the root cause is a p...

CVE-2025-21062

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...

CVE-2025-21061

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability...