PT-2025-23342 · Unknown · Campcodes Online Hospital Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting the /book-appointment.php file. The manipulation of the doctor argument leads to SQL injection. This issue can be initiat...

PT-2025-23301 · Dsm · Multidisciplinary Optimization Engineer

Name of the Vulnerable Software and Affected Versions: Multidisciplinary Optimization Engineer versions 3DEXPERIENCE R2022x through 3DEXPERIENCE R2024x Description: A stored Cross-site Scripting XSS vulnerability affects Results Analytics in Multidisciplinary Optimization Engineer, allowing an...

PT-2025-23240 · Cvat · Cvat

Name of the Vulnerable Software and Affected Versions: Computer Vision Annotation Tool CVAT versions 2.4.0 through 2.37.x Description: The issue allows an authenticated user to retrieve sensitive information, including IDs and names of tasks, projects, labels, and IDs of jobs and quality reports,...

PT-2025-23168 · Devolutions · Devolutions Remote Desktop Manager

Name of the Vulnerable Software and Affected Versions: Devolutions Remote Desktop Manager versions 2025.1.34.0 and earlier Description: The issue allows an authenticated user to gain unauthorized access to private personal information in the user vaults component. Under specific circumstances,...

PT-2025-23133 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a Cross-Site Scripting problem in an unspecified product. The reason for rejection is that the CVE ID has been rejected or withdrawn by its CVE Numbering Authority because...

PT-2025-23059 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly mentioned. No details are provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

PT-2025-23128 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a rejected CVE ID, which has been unused. No further details are provided about the nature of the issue or its potential impact. Recommendations: At the moment, there is n...

PT-2025-23126 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a Cross-Site Scripting problem. No further details are available about the issue, including the number of potentially affected devices or real-world incidents...

PT-2025-23105

Name of the Vulnerable Software and Affected Versions Kea versions 2.4.0 through 2.4.1 Kea versions 2.6.0 through 2.6.2 Kea versions 2.7.0 through 2.7.8 Description Kea configuration and API directives can be used to overwrite arbitrary files, subject to permissions granted to Kea. Many common...

PT-2025-22984 · Viscosity · Viscosity

Name of the Vulnerable Software and Affected Versions: Viscosity versions prior to 1.11.5 Description: The issue allows loading a dynamic library with Viscosity's TCC identity on macOS systems by utilizing a Launch Agent and loading the viscosity openvpn process from the application bundle. The...

PT-2025-23023 · Unknown · Code-Projects Online Exam Mastering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Exam Mastering System version 1.0 Description: The issue concerns a Cross Site Scripting XSS vulnerability via the name field in the feedback form. This allows for potential malicious script execution. No information is...

PT-2025-23009 · Google · Android

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a possible bypass of carrier restrictions due to an unusual root cause, which could lead to local escalation of privilege. No additional execution privileges are need...

PT-2025-22910 · Sigb Pmb · Sigb Pmb

Name of the Vulnerable Software and Affected Versions: SIGB PMB versions prior to 8.0.1.2 Description: The issue allows SQL injection. Recommendations: For versions prior to 8.0.1.2, update to version 8.0.1.2 or later to resolve the issue...

PT-2025-22982 · Weidmueller · Ie-Sw-Pl10M-3Gt-7Tx +12

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The devices are vulnerable to an authentication bypass due to flaws in the authorization mechanism. An unauthenticated remote attacker could exploit this weakness by performing brute-force...

PT-2025-23041 · Netalertx · Netalertx

Name of the Vulnerable Software and Affected Versions: NetAlertX version 25.4.13 and earlier Description: NetAlertX is a network, presence scanner and alert framework. Prior to version 25.4.14, it is possible to bypass the authentication mechanism of NetAlertX to update settings without...

PT-2025-23010 · Google · Android

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A null pointer dereference issue exists in the function process crypto cmd. The values of ptrsi can be potentially equal to NULL, which is a valid value after calling slice map array. Later,...

PT-2025-23018 · Unknown · Phpgurukul News Portal Project

Name of the Vulnerable Software and Affected Versions: PHPGurukul News Portal Project version 4.1 Description: A critical issue has been found in the PHPGurukul News Portal Project. The problem affects the /admin/edit-subcategory.php file, where the manipulation of the Category argument leads to...

PT-2025-22928 · Thinkgem · Thinkgem Jeesite

Name of the Vulnerable Software and Affected Versions: thinkgem JeeSite versions up to 5.11.1 Description: A critical issue affects the function ResourceLoader.getResource of the file /cms/fileTemplate/form in the component URI Scheme Handler. The manipulation of the argument Name leads to...

PT-2025-22865 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.21 Description: A problematic issue has been found in the Design Manager Module of CMS Made Simple, affecting some unknown processing. The manipulation of the Description argument leads to cross-site scripting. Thi...

PT-2025-22860 · Wcms · Wcms

Name of the Vulnerable Software and Affected Versions: WCMS versions up to 8.3.11 Description: A critical issue has been found in the Login component, specifically affecting the getMemberByUid function. The manipulation of the uid argument leads to improper authentication, allowing for remote...