PT-2025-28538 · Microsoft · Mpeg-2 Video Extension +1

Name of the Vulnerable Software and Affected Versions: Microsoft MPEG-2 Video Extension affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Microsoft MPEG-2 Video Extension, which allows an authorized attacker to execute code locally...

PT-2025-27488 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote code execution issue was reported, but the candidate was issued in error. No further details are available about the issue, including the number of potentially affected devices or...

PT-2025-28877

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains a flaw in the snd usb get audioformat uac3 function within the ALSA subsystem. The function directly uses a length value received from a USB device for memory...

PT-2025-25805

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue was caused by a commit that attempted to keep displays off during the S4 sequence by not resuming display IP, but this le...

PT-2025-25630 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A remote code execution issue is mentioned, but details are scarce due to the rejection of the candidate. No information is provided about the estimated number of potentially affected device...

PT-2025-24837 · Microsoft · Windows Rdp Server +1

Name of the Vulnerable Software and Affected Versions: Windows DHCP Server affected versions not specified Description: A protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network. Recommendations: At the moment, there is no information abo...

PT-2025-23129 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a rejected or withdrawn CVE ID. No specific details about the issue are provided, except that it has been rejected or withdrawn by its CVE Numbering Authority because it i...

PT-2025-22151 · Schweitzer Engineering Laboratories · Sel-5056 Software-Defined Network Flow Controller

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a difference in failed login responses based on whether the username is local or central. This distinction could potentially be exploited. Recommendations: At the...

PT-2025-27738

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been identified, related to the aqc111 driver. The issue arises from incomplete sanitation of USB read calls' results, which can lead to the MAC...

PT-2025-20943 · Microsoft · Windows Hardware Lab Kit

Name of the Vulnerable Software and Affected Versions: Windows Hardware Lab Kit affected versions not specified Description: The issue concerns the use of hard-coded credentials in the software, which allows an authorized attacker to elevate privileges locally. There is no information provided...

RLSA-2024:3043 Moderate: ansible-core bug fix, enhancement, and security update

Ansible is a radically simple model-driven configuration management, multi-node deployment, and remote task execution system. Ansible works over SSH and does not require any software or daemons to be installed on remote nodes. Extension modules can be written in any language and are transferred t...

PT-2025-18783 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue was determined to not be a vulnerability. No further details are available. Recommendations: At the moment, there is no information about a newer version that contains a fix for th...

PT-2025-18640 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential memory leak has been identified in the Linux kernel, specifically in the nxp nci send function. This function calls nxp nci i2c write and only frees the skb when nxp nci i2...

PT-2025-23153

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer access issue has been resolved in the Linux kernel. The patch ensures that the UCSI driver waits for all pending tasks in the ucsi displayport work workqueue to finish...

PT-2025-18338 · Hcl · Hcl Domino Leap

Name of the Vulnerable Software and Affected Versions: HCL Domino Leap affected versions not specified Description: The issue concerns improper access control of an endpoint in HCL Domino Leap, allowing certain admin users to import applications from the server's filesystem. This could potentiall...

PT-2025-17363 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to a SQL injection vulnerability. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this...

PT-2025-16488

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description Unauthenticated attackers can query an API endpoint and get device details. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

PT-2025-16507

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows unauthenticated attackers to add devices of other users to their scenes, or arbitrary scenes of other arbitrary users. Recommendations At the moment, there is no information...

PT-2025-15206 · Qualcomm · Snapdragon +29

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Information disclosure may occur when a guest VM is connected. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-14923 · Unknown · Funnelcockpit

Name of the Vulnerable Software and Affected Versions: FunnelCockpit versions 1.4.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS in FunnelCockpit. Recommendations: For...