PT-2025-15750 · Chandan Garg · Cg Scroll To Top

Name of the Vulnerable Software and Affected Versions: Chandan Garg CG Scroll To Top versions n/a through 3.5 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web...

PT-2025-15815 · Unknown · Nepali Date Utilities

Name of the Vulnerable Software and Affected Versions: Nepali Date Utilities versions 1.0.13 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web applicatio...

PT-2025-15827 · WordPress · Aristo Rinjuang Wp Inquiries

Name of the Vulnerable Software and Affected Versions: Aristo Rinjuang WP Inquiries versions 0.2.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

PT-2025-15696 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium versions 11.4 through 12.1 Description: The issue allows a privileged user to read any file on the system due to incorrect privilege assignment. Recommendations: For versions 11.4 through 12.1, update to a version that...

PT-2025-15447 · Unknown · Bep/Imagemeta

Name of the Vulnerable Software and Affected Versions: bep/imagemeta versions prior to 0.11.0 Description: The issue concerns a Go library for reading image metadata from various file formats, including JPEG, TIFF, PNG, and WebP. A buffer created for parsing metadata in PNG and WebP images had no...

PT-2025-15349

Name of the Vulnerable Software and Affected Versions: SMR versions prior to Apr-2025 Release 1 Description: The issue is related to an out-of-bounds read in enrollment with the cdsp frame secfr trustlet. This allows local privileged attackers to read out-of-bounds memory. Recommendations: For...

PT-2025-15431 · Fortinet · Fortiisolator Cli

Name of the Vulnerable Software and Affected Versions: Fortinet FortiIsolator CLI versions prior to 2.4.6 Description: The issue is related to an improper neutralization of special elements used in an OS command, which allows a privileged attacker to execute unauthorized code or commands via...

PT-2025-15429 · Fortinet · Fortianalyzer +1

Name of the Vulnerable Software and Affected Versions: FortiAnalyzer versions 7.6.1 and below FortiAnalyzer versions 7.4.5 and below FortiAnalyzer versions 7.2.8 and below FortiAnalyzer versions 7.0.13 and below FortiManager versions 7.6.1 and below FortiManager versions 7.4.5 and below...

PT-2025-15473

Name of the Vulnerable Software and Affected Versions: AOS-10 GW affected versions not specified AOS-8 Controller/Mobility Conductor affected versions not specified Description: Multiple vulnerabilities exist in the web-based management interface of the affected devices. Successful exploitation o...

PT-2025-15440 · Ivanti · Ivanti Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2024 SU1 Ivanti Endpoint Manager versions prior to 2022 SU7 Description: The issue allows a remote unauthenticated attacker to obtain admin privileges through Reflected XSS. User interaction is requir...

PT-2025-15615

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A logical bug exists in handling lazy-loaded values during unparceling. This issue is being actively exploited. Recommendations: At the moment, there is no information about a newer version...

PT-2025-15255 · Philips · Intellispace Portal

Name of the Vulnerable Software and Affected Versions: IntelliSpace Portal versions 12 and prior Description: The issue arises from the exploitation of port 755 through the "Object Marshalling" technique, allowing an attacker to read internal files without authentication. This is possible by...

PT-2025-15128 · Iteaj · Iteaj Iboot

Name of the Vulnerable Software and Affected Versions: iteaj iboot 物联网网关 version 1.1.3 Description: A issue was found in the File Upload component, affecting the processing of the file /common/upload/batch. The manipulation of the File argument leads to cross-site scripting. The attack may be...

PT-2025-15168

Name of the Vulnerable Software and Affected Versions DA affected versions not specified Description The component DA within MediaTek firmware has a potential out-of-bounds write issue due to a missing bounds check. Successful exploitation of this issue could allow an attacker to gain local...

PT-2025-28134 · Git +1 · Liblouis

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from an unknown write issue discovered through OSS-Fuzz. The crash state indicates involvement of the lou handlePassVariableAction...

PT-2025-15308 · Unknown · Hailey888 Oa System

Name of the Vulnerable Software and Affected Versions: hailey888 oa system versions up to 2025.01.01 Description: A problem has been found in the function testMess of the file cn/gson/oasys/controller/inform/InformManageController.java of the component Backend. The manipulation of the argument me...

PT-2025-15170

Name of the Vulnerable Software and Affected Versions DA affected versions not specified Description The issue is related to a possible permission bypass due to a logic error. This could lead to local escalation of privilege if an attacker has physical access to the device, with no additional...

PT-2025-15105 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue was found in the codeprojects Online Restaurant Management System, affecting some unknown functionality of the file /admin/category save.php. The...

PT-2025-15088 · Kentico · Kentico Xperience

Name of the Vulnerable Software and Affected Versions: Kentico Xperience versions prior to 13.0.181 Description: The issue allows authenticated users to distribute malicious content via certain interactions with the media library file upload feature, potentially leading to stored cross-site...

PT-2025-15057 · WordPress · Multivendorx

Name of the Vulnerable Software and Affected Versions: The MultiVendorX plugin for WordPress versions up to, and including, 4.2.19 Description: The issue is related to a missing capability check on the delete table rate shipping row function, which allows unauthorized loss of data. This makes it...