PT-2025-45186

Name of the Vulnerable Software and Affected Versions IDIS ICM VIEWER affected versions not specified Description An argument injection issue exists that may allow an attacker to execute arbitrary code on the host machine. This could lead to remote code execution. Recommendations At the moment,...

PT-2025-45177

Name of the Vulnerable Software and Affected Versions AsIO3.sys affected versions not specified Description An improper restriction of operations within the bounds of a memory buffer exists in the AsIO3.sys driver. This can be triggered by manually executing a specially crafted process, potential...

PT-2025-45391

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Insufficient sanitization allows an attacker to upload a specially crafted configuration file, leading to directory traversal and remote code execution with system-level permissions. Recommendations ...

PT-2025-44925

Name of the Vulnerable Software and Affected Versions Automotive Software platform based on QNX affected versions not specified Description A memory corruption issue exists when processing requests originating from GVM. The issue involves a dangerous method or function within the software platfor...

PT-2025-44931

Name of the Vulnerable Software and Affected Versions WinBlast Driver affected versions not specified Description A memory corruption issue exists when accessing a buffer during IOCTL processing. This can lead to an out-of-bounds write condition. Recommendations At the moment, there is no...

PT-2025-44767

Name of the Vulnerable Software and Affected Versions HP Client Management Script Library affected versions not specified Description A security issue has been reported in HP Client Management Script Library that could lead to privilege escalation during installation. The issue is being addressed...

PT-2025-44629

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The web application is susceptible to a clickjacking attack. This involves embedding a vulnerable page within a page controlled by an attacker to mislead users...

PT-2025-44380

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s ksmbd component contains a flaw related to recursive locking within RPC handle list access. Specifically, the ksmbd session rpc method function attempts to lock sess-r...

PT-2025-43918

Name of the Vulnerable Software and Affected Versions ZTE MC889A Pro affected versions not specified Description A Denial of Service DoS issue exists in the ZTE MC889A Pro product. The root cause is inadequate validation of input parameters within the Short Message Service interface, which could...

PT-2025-43545

Name of the Vulnerable Software and Affected Versions Arista NG Firewall affected versions not specified Description This issue is a diagnostics command injection that could lead to arbitrary command execution with root privileges. Successful exploitation allows an attacker to execute commands...

PT-2025-43449

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment. Recommendations At the...

PT-2025-43546

Name of the Vulnerable Software and Affected Versions Captive Portal affected versions not specified Description The Captive Portal system contains a flaw that permits authentication bypass. The issue allows bypassing the normal authentication mechanisms of the Captive Portal. No information is...

PT-2025-45463

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the Google Chrome Omnibox component related to improper control flow management. Successful exploitation could allow a remote attacker to disclose protected information...

PT-2025-42329

Name of the Vulnerable Software and Affected Versions TMUI affected versions not specified Description A directory traversal issue exists in TMUI that permits an authenticated attacker to access files beyond those intended. The vulnerability allows access to files that are not limited to the...

PT-2025-44390

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the btrfs subsystem related to the free space tree. Specifically, an assertion failure can occur during the construction of a free space tree when...

PT-2025-41339

Name of the Vulnerable Software and Affected Versions Video driver affected versions not specified Description An information disclosure issue exists while processing batch command execution in the Video driver. Recommendations At the moment, there is no information about a newer version that...

PT-2025-41354

Name of the Vulnerable Software and Affected Versions Affected versions not specified Description A memory corruption issue exists when invoking remote procedure IOCTL calls. This can lead to system instability or potential code execution. Recommendations At the moment, there is no information...

PT-2025-42746

Name of the Vulnerable Software and Affected Versions GitLab affected versions not specified Description A security issue exists in the GitLab code collaboration platform due to a missing authorization procedure. Remote attackers may be able to gain unauthorized access to protected information by...

PT-2025-39445

Name of the Vulnerable Software and Affected Versions Zenitel ICX500 and ICX510 Gateway affected versions not specified Description This issue allows attackers to execute arbitrary commands on the underlying system, potentially gaining shell access. Successful exploitation can compromise the...

PT-2025-43617

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has an issue where the dynamic events interface on tracefs does not check the lockdown status, potentially allowing unauthorized access. This interface is compatible wit...