CVE-2025-48366

Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.119 and 25.0.20, a stored and blind XSS vulnerability exists in the Phone Number field of the user profile within the GroupOffice application. This allows a malicious actor to inject persisten...

CVE-2020-7131

This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...

CVE-2018-1000809

privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user== to /validate/check url. This vulnerability appears to have been fixed in 2.23.2...

CVE-2018-1000856

DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting XSS vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. This attack appear t...

PT-2025-27714

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to Bluetooth MGMT. The issue involves rejecting malformed HCI CMD SYNC commands. In the mgmt hci cmd sync function, a che...

CVE-2025-1421 Formula injection in a CSV file in Proget MDM

Data provided in a request performed to the server while activating a new device are put in a database. Other high privileged users might download this data as a CSV file and corrupt their PC by opening it in a tool such as Microsoft Excel. The attacker could gain remote access to the user's PC...

PT-2025-22409

Name of the Vulnerable Software and Affected Versions jq versions up to and including 1.7.1 Description The issue is a heap-buffer-overflow present in the function jv string vfmt in the jq fuzz execute harness from oss-fuzz. This crash occurs in the file jv.c. No information is provided about the...

PT-2025-22433 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the BINARY Command Handler component. This issue leads to a buffer overflow and can be exploited remotely. Recommendations: F...

PT-2025-22414 · Denodo · Denodo Scheduler

Name of the Vulnerable Software and Affected Versions: Denodo Scheduler affected versions not specified Description: The issue concerns an authenticated remote code execution RCE in Denodo Scheduler. No information is provided about the estimated number of potentially affected devices worldwide o...

PT-2025-22324 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a remote code execution problem. However, the provided information does not specify the details of the issue, such as the estimated number of potentially affected devices...

PT-2025-22421 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue affects the BELL Command Handler component, leading to a buffer overflow. This can be exploited remotely. The issue has been publicly disclosed. Recommendations: For FreeFloat FTP...

PT-2025-22393 · Cisco · Cisco Webex

Name of the Vulnerable Software and Affected Versions: Cisco Webex affected versions not specified Description: A vulnerability in Cisco Webex could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The issue is due to improper filtering of user-supplied inpu...

PT-2025-22160 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the powerpc64/ftrace module loading without patchable function entries. The get stubs size function assumes that there...

PT-2025-22147 · Vmware · Vmware Esxi +2

Name of the Vulnerable Software and Affected Versions: VMware ESXi affected versions not specified Description: The issue is a denial-of-service vulnerability that occurs when performing a guest operation. A malicious actor with guest operation privileges on a VM, who is already authenticated...

PT-2025-22275

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The affected products could allow an unauthenticated attacker to access system information that could enable further access to sensitive files and obtain administrative credentials...

PT-2025-22145 · Ibm · Ibm Security Reaqta

Name of the Vulnerable Software and Affected Versions: IBM Security ReaQta EDR version 3.12 Description: The issue allows an attacker to spoof a trusted entity by interfering with the communication path between the host and client. Recommendations: For IBM Security ReaQta EDR version 3.12, at the...

PT-2025-22154 · Schweitzer Engineering Laboratories · Sel-5030 Acselerator Quickset

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An authenticated user can modify application state data. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-22424

Name of the Vulnerable Software and Affected Versions Vertiv affected versions not specified Description The issue is a stack-based buffer overflow that could allow an attacker to gain code execution on the device. This can be exploited by an attacker to execute malicious code. Recommendations At...

PT-2025-22164 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the dm module. The issue occurred when the dm split args function copied data from the old argv array to the argv arra...

PT-2025-29035

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A stack buffer overflow issue was identified in the Bluetooth btintel driver. The vulnerability occurs when the EFI variable size exceeds the size of the btintel dsbr structure. The fi...