PT-2025-20610 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns unvalidated user input in the Apache HTTP Server. No further details are available regarding the estimated number of potentially affected devices or real-world incidents...

PT-2025-20464

Name of the Vulnerable Software and Affected Versions LCD KVM over IP Switch CL5708IM affected versions not specified Description The issue is a Heap-based Buffer Overflow vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to perform a denial-of-service attack...

CVE-2025-46572

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by crafting a SAMLResponse. This can be done by using a val...

PT-2025-20430 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to Server-Side Request Forgery SSRF in Azure, which allows an authorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...

PT-2025-20408 · Arista · Arista Cloudvision

Name of the Vulnerable Software and Affected Versions: Arista CloudVision affected versions not specified Description: The issue allows an attacker to gain admin privileges on the CloudVision system using Zero Touch Provisioning, with more permissions than necessary. This can be used to query or...

PT-2025-20407 · Arista · Arista Cloudvision Portal

Name of the Vulnerable Software and Affected Versions: Arista CloudVision Portal CVP on-prem affected versions not specified Description: The issue allows an attacker to gain admin privileges on CloudVision using a time-bound device onboarding token. Recommendations: At the moment, there is no...

PT-2025-25781

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel's MCTP implementation has been resolved. The issue occurs in the mctp dump addrinfo function when ifa index is accessed without proper initialization,...

PT-2025-31080

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the industrial I/O IIO backend that can lead to an out-of-bounds write. Specifically, when writing to a buffer, a string terminator is written without...

PT-2025-20415 · My Company · Test

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue allows a bad person to break into the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-20372 · Netis Systems · Wf2220

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The endpoint /cgi-bin-igd/netcore set.cgi is used for changing device configuration and is accessible without authentication, posing a significant security threat. This could allow for...

PT-2025-20432 · Microsoft · Dataverse

Name of the Vulnerable Software and Affected Versions: Microsoft Dataverse affected versions not specified Description: A remote code execution issue has been identified. Information about this issue has been published. Recommendations: At the moment, there is no information about a newer version...

PT-2025-20138 · Unknown · Scott Paterson Time Clock

Name of the Vulnerable Software and Affected Versions: Scott Paterson Time Clock versions 1.2.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Stored XSS. This enables an attacker to inject...

PT-2025-20311 · F5 · F5Os

Name of the Vulnerable Software and Affected Versions: F5OS affected versions not specified Description: An improper authorization issue exists where remotely authenticated users, such as those using LDAP, RADIUS, or TACACS+, may be granted higher privilege F5OS roles than intended...

PT-2025-20307 · F5 · Big-Ip +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: When HTTP/2 client and server profile is configured on a virtual server, undisclosed requests can cause TMM to terminate. Recommendations: At the moment, there is no information about a newe...

PT-2025-20306 · F5 · Big-Ip +3

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: When a Stream Control Transmission Protocol SCTP profile is configured on a virtual server, undisclosed requests can cause an increase in memory resource utilization. Recommendations: At the...

PT-2025-23157

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns unsafe attribute parsing in the output userspace function of the openvswitch module in the Linux kernel. A patch has been applied to replace manual Netlink attribute...

PT-2025-20296 · Tenda · Tenda Fh451

Name of the Vulnerable Software and Affected Versions: Tenda FH451 version 1.0.0.9 Description: The issue is a stack overflow vulnerability located in the function.frmL7ImForm. Recommendations: For Tenda FH451 version 1.0.0.9, at the moment, there is no information about a newer version that...

PT-2025-20303 · F5 · Big-Ip Apm

Name of the Vulnerable Software and Affected Versions: BIG-IP APM affected versions not specified Description: The issue occurs when a BIG-IP APM virtual server is configured to use a PingAccess profile, allowing undisclosed requests to cause TMM to terminate. No information is provided about the...

PT-2025-20071 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved, related to the net sched component. The issue arises from the cp-alloc hash not being updated after hash allocation in tcindex...

PT-2025-20049 · Unknown · Libsavsac.So

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an out-of-bounds write in parsing media files. This allows local attackers to write out-of-bounds memory. The problem is associated with the libsavsvc.so component...