PT-2025-20328 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A cross-site request forgery issue was reported, but the candidate was issued in error. All references and descriptions have been removed to prevent accidental usage. Recommendations: At the...

CVE-2025-46573

passport-wsfed-saml2 provides passport strategy for both WS-fed and SAML2 protocol. A vulnerability present starting in version 3.0.5 up to and including version 4.6.3 allows an attacker to impersonate any user during SAML authentication by tampering with a valid SAML response. This can be done b...

PT-2025-19998 · Milesight · Milesight Ug65-868M-Ea

Name of the Vulnerable Software and Affected Versions: Milesight UG65-868M-EA gateway affected versions not specified Description: A new issue in the Milesight industrial gateway could potentially impact critical infrastructure. The estimated number of potentially affected devices worldwide is no...

PT-2025-19844 · Qualcomm · Snapdragon +14

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption that occurs while handling a schedule request in the Camera Request Manager CRM due to an invalid link count in the corresponding session. This...

PT-2025-19862

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue involves memory corruption during memory assignment to a headless peripheral virtual machine due to incorrect error code handling. This can lead to potential security risks...

PT-2025-19849 · Qualcomm · Snapdragon +13

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption caused by improper bounds checking during command handling in a camera kernel driver. This can lead to unspecified consequences. Recommendations: At...

PT-2025-19880 · Qualcomm · Snapdragon +131

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when reading a response from the firmware FW. This happens when the buffer size is modified by the FW while the driver is using this size to...

PT-2025-19861 · Qualcomm · Snapdragon +184

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when reading a secure file. This corruption can happen due to improper handling of file data, leading to potential security risks...

PT-2025-19866 · Qualcomm · Snapdragon +28

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs during the decoding of Over-The-Air OTA messages from T3448 IE. This corruption happens due to a problem in the decoding process of these...

PT-2025-20000 · Openvas · Openvas

Name of the Vulnerable Software and Affected Versions: OpenVAS affected versions not specified Description: The issue concerns an information disclosure vulnerability. No specific details about the vulnerability, affected devices, or real-world incidents are provided. Recommendations: At the...

PT-2025-23988

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue arises when calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny, which unintentionally disables policy validation. This affects certificate chains containing...

PT-2025-20003 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Request Forgery CSRF in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-19974 · Huawei · Harmonyos

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A permission control issue exists in the media library module. Successful exploitation of this issue may affect service confidentiality. Recommendations: At the moment, there is no informati...

PT-2025-19955

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified Description A flaw was found in GLib, which is vulnerable to an integer overflow in the g string insert unichar function. When the position at which to insert the character is large, the position will...

PT-2025-20441 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an authentication bypass in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices or real-world incidents are...

PT-2025-19860 · Qualcomm · Snapdragon +12

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when processing an IOCTL call to set mixer controls. This can be described in Spanish as corrupción de memoria al procesar una llamada IOCTL...

PT-2025-19846 · Qualcomm · Snapdragon +4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves memory corruption that occurs when a blob structure is modified by user-space after kernel verification. This can lead to unspecified consequences. Recommendations: At the...

PT-2025-19876 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a transient Denial of Service DOS that occurs while parsing per Station STA profile in Machine Learning ML Internet Explorer IE. No additional details are provided...

PT-2025-20004 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. No details about real-world incidents or technical aspects of the issue are provided. Recommendations: At the moment, there is no...

PT-2025-20002 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issu...