PT-2025-17621 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input. No specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

PT-2025-17625 · Dropbox · Dropbox

Name of the Vulnerable Software and Affected Versions: Dropbox affected versions not specified Description: The issue concerns an authentication bypass in Dropbox. No specific details about the technical aspects of the issue, such as API endpoints, vulnerable parameters, or function names, are...

PT-2025-17619 · Microsoft · Azure Ad Authentication

Name of the Vulnerable Software and Affected Versions: Microsoft Azure AD Authentication affected versions not specified Description: The issue concerns Microsoft Azure AD Authentication. No specific details about the nature of the issue are provided, but it is mentioned that more information, su...

PT-2025-17618 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to a Cross-Site Request Forgery in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices worldwide or...

PT-2025-17634 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: IntelR Core Ultra Processors affected versions not specified Description: The issue is related to improper locking in the IntelR Integrated Connectivity I/O interface CNVi for some IntelR Core Ultra Processors. This may allow an unauthenticat...

PT-2025-17622 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an authentication bypass in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or real-wor...

PT-2025-17624 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. There is no mention of the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

PT-2025-17538 · Tecnick · Tcexam

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue involves Multiple XSS CWE-79, which is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized acce...

PT-2025-27032

Name of the Vulnerable Software and Affected Versions: libssh affected versions not specified Description: The issue is related to an integer overflow in the sftp decode channel data to packet function of the libssh library. This could allow a remote attacker to cause a denial of service...

PT-2025-17589 · Sap · Sap Learning Solution

Name of the Vulnerable Software and Affected Versions: SAP Learning Solution affected versions not specified Description: The issue allows an attacker to trick an authenticated user into sending unintended requests to the server through Cross-Site Request Forgery CSRF. A GET-based OData function ...

PT-2025-17727

Name of the Vulnerable Software and Affected Versions Spring Security affected versions not specified Description The issue introduces a username enumeration vector. It affects the BCryptPasswordEncoder's maximum password length, which breaks timing attack mitigation. Recommendations At the momen...

PT-2025-17910

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in Moodle where anonymous assignment submissions can be de-anonymized via search, revealing student identities. Recommendations At the moment, there is no information about a...

PT-2025-31931 · Tracker · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor version 10.5.2.395 Description: An out-of-bounds read vulnerability exists in the EMF functionality. Exploitation involves using a specially crafted EMF file, which could lead to the disclosure of sensitive information...

PT-2025-17594 · Hewlett Packard · Hpe Performance Cluster Manager

Name of the Vulnerable Software and Affected Versions: HPE Performance Cluster Manager HPCM affected versions not specified Description: A vulnerability in the cmdb service could allow an attacker to gain access to an arbitrary file on the server host. Recommendations: At the moment, there is no...

PT-2025-17918

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in the policy tool of Moodle, where the return URL required additional sanitizing to prevent a reflected Cross-site scripting XSS risk. Recommendations At the moment, there is...

PT-2025-17474 · Unknown · Yxj2018 Springboot-Vue-Onlineexam

Name of the Vulnerable Software and Affected Versions: YXJ2018 SpringBoot-Vue-OnlineExam version 1.0 Description: A vulnerability has been found in YXJ2018 SpringBoot-Vue-OnlineExam, affecting some unknown processing of the component API. The manipulation leads to improper authentication. The...

PT-2025-17595 · Cray · Cray Operating System

Name of the Vulnerable Software and Affected Versions: Cray Operating System COS affected versions not specified Description: A vulnerability in the kernel of the Cray Operating System could allow an attacker to perform a local Denial of Service DoS attack. Recommendations: At the moment, there i...

PT-2025-17490 · Unblu · Unblu Spark +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A user can upload a file to a conversation even if the file upload functionality is disabled. The system allows file uploads through direct API requests, despite the functionality being...

PT-2025-17915

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A flaw was found in the software, where insufficient capability checks allowed a user enrolled in a course to access certain details of other users they did not have permission to access, such...

PT-2025-17911

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description A security issue was discovered that allows anyone to duplicate existing tours without needing to log in due to a lack of protection against cross-site request forgery CSRF attacks...