PT-2026-7466

Name of the Vulnerable Software and Affected Versions GE Vernova Enervista versions prior to 8.6 Description A security issue exists in GE Vernova Enervista UR Setup on Windows. The issue affects versions prior to 8.6. Recommendations Update to a version newer than 8.6...

Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager EPM is a set of endpoint security managers developed by the American company Ivanti. Versions of Ivanti Endpoint Manager prior to EPM 2024 SU5 contained security vulnerabilities. These vulnerabilities were due to authentication bypass vulnerabilities, which could allow...

PT-2026-7285

Name of the Vulnerable Software and Affected Versions Server Firmware Update UtilitySysFwUpdt versions prior to 16.0.12 Description A flaw exists in the input validation process of the Server Firmware Update UtilitySysFwUpdt within Ring 3: User Applications. This issue could allow a system softwa...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 145.0.7632.45 contained a resource management vulnerability. This vulnerability stemmed from a problem with CSS that allowed for the reuse of resources after they were released, potentially...

Google Chrome 安全漏洞

Google Chrome is a web browser developed by the American company Google. Versions of Google Chrome prior to 145.0.7632.45 contained a security vulnerability, which was caused by improper implementation of the WebGPU mechanism. This vulnerability could lead to excessive memory access through...

CVE-2025-22111 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-22111 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-71097 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71097 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-23019 affecting package kernel for versions less than 6.6.121.1-1

CVE-2026-23019 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-22107 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-22107 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-71098 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-71098 affecting package kernel for versions less than 6.6.121.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2025-68789 affecting package kernel for versions less than 6.6.121.1-1

CVE-2025-68789 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-13151 affecting package libtasn1 for versions less than 4.19.0-3

CVE-2025-13151 affecting package libtasn1 for versions less than 4.19.0-3. A patched version of the package is available...

CVE-2024-49968 affecting package kernel for versions less than 6.6.121.1-1

CVE-2024-49968 affecting package kernel for versions less than 6.6.121.1-1. A patched version of the package is available...

CVE-2025-13151 affecting package gnutls for versions less than 3.8.3-8

CVE-2025-13151 affecting package gnutls for versions less than 3.8.3-8. A patched version of the package is available...

CVE-2025-69420 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2025-69420 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

CVE-2026-22796 affecting package edk2 for versions less than 20240524git3e722403cd16-14

CVE-2026-22796 affecting package edk2 for versions less than 20240524git3e722403cd16-14. A patched version of the package is available...

CVE-2026-25958 Cube privilege escalation via a specially crafted request

Cube is a semantic layer for building data applications. From 0.27.19 to before 1.5.13, 1.4.2, and 1.0.14, it is possible to make a specially crafted request with a valid API token that leads to privilege escalation. This vulnerability is fixed in 1.5.13, 1.4.2, and 1.0.14...

CVE-2026-25957 Cube Denial of Service (DoS) - An authenticated attacker can crash the server by sending a specially crafted request

Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. This vulnerability is fixed in 1.5.13 and 1.4.2...

CVE-2026-25957 Cube Denial of Service (DoS) - An authenticated attacker can crash the server by sending a specially crafted request

Cube is a semantic layer for building data applications. From 1.1.17 to before 1.5.13 and 1.4.2, it is possible to make the entire Cube API unavailable by submitting a specially crafted request to a Cube API endpoint. This vulnerability is fixed in 1.5.13 and 1.4.2...

CVE-2026-25925 PowerDocu Affected by Remote Code Execution via Insecure Deserialization

PowerDocu contains a Windows GUI executable to perform technical documentations. Prior to 2.4.0, PowerDocu contains a critical security vulnerability in how it parses JSON files within Flow or App packages. The application blindly trusts the $type property in JSON files, allowing an attacker to...