Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0. This advisory also provides guidance on what developers can do to update their applicatio...

PT-2025-1675 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It mentions a CVE ID, but the description has been removed due to the candidate being issued...

Security Advisory 0109

Security Advisory 0109 . CSAF PDF Date: February 6, 2025 Revision | Date | Changes ---|---|--- 1.0 | January 14, 2025 | Initial release 1.1 | February 6, 2025 | Updated EOS-Based Product Versions The CVE-ID tracking this issue: CVE-2024-8000 CVSSv3.1 Base Score: 5.3...

PT-2025-2052 · Sucms · Sucms

Name of the Vulnerable Software and Affected Versions: Sucms version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/admin members.php?ac=search. The manipulation of the uid argument leads to SQL injection. The attack may be launched remotely. The exploit h...

PT-2025-3107 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions are specified. Description: The issue was initially considered but later rejected as it was determined not to be a security issue. Further investigation confirmed this assessment. Recommendations: A...

PT-2025-25397

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A denial of service issue exists due to a vulnerability in the Master's pub ret method, which is exposed to all minions. The un-sanitized input value jid is used to construct a path that is th...

PT-2025-2335 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

PT-2025-2351 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns an unused record that was rejected to comply with certain rules. No specific details about the issue are provided, such as general information or estimated...

PT-2024-17822 · Code Projects · Code-Projects Travel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Travel Management System version 1.0 Description: A critical issue affects the processing of the file /subcat.php, where the manipulation of the catid argument leads to sql injection. The attack can be initiated remotely. The...

PT-2024-37305 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A vulnerability was reported, but it has been rejected or withdrawn by the authority responsible for assigning identifiers. Recommendations: At the moment, there is no...

CVE-2023-37967

Missing Authorization vulnerability in Designinvento DirectoryPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DirectoryPress: from n/a through 3.6.2...

CVE-2024-45337 vulnerabilities

Vulnerabilities for packages: hugo-extended, kubernetes-event-exporter, ollama, falcoctl, cloudnative-pg, secrets-store-csi-driver-provider-gcp, kubeflow-katib, pulumi-kubernetes-operator, crossplane-provider-aws-cloudfront, octo-sts, grafana-alloy, local-static-provisioner, weaviate,...

Microsoft Office 2016 Multiple Vulnerabilities (KB5002661)

This host is missing an important security update according to Microsoft KB5002661 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-52385

CVE-2024-52385 affects WordPress Plugin Team Member – Multi Language Supported Team Plugin, with a Local File Inclusion vulnerability in PHP Include/Require due to improper filename handling. Affected versions are reported as up to 7.3 (and up to 7.4 in Patchstack context); required privilege is ...

PT-2024-35909 · Unknown · Andy Moyle Church Admin

Name of the Vulnerable Software and Affected Versions: Andy Moyle Church Admin versions 5.0.8 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions 5.0.8 and...

PT-2025-23579

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Information disclosure may occur while processing goodbye RTCP packet from network. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

.NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-43499 | .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0. This advisory also provides guidance on what developers can do to update their applications t...

GHSA-6X36-QXMJ-RV4P .NET Denial of Service Vulnerability

Microsoft Security Advisory CVE-2024-43499 | .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 9.0. This advisory also provides guidance on what developers can do to update their applications t...

PT-2024-39989 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns an input validation bypass. However, it has been stated that the vulnerability has no impact and has been deprecated. No further details are provided about...

PT-2024-28944 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue was initially reported but further investigation showed it was not a security issue. The candidate was withdrawn by its CNA. Recommendations: At the moment, there i...