PT-2025-16318 · Jettricks · Jettricks

Name of the Vulnerable Software and Affected Versions: JetTricks versions 1.5.1 and earlier Description: The issue is related to a Missing Authorization vulnerability in JetTricks, which allows accessing functionality not properly constrained by ACLs. Recommendations: For JetTricks versions 1.5.1...

PT-2025-16376 · Hcl · Hcl Bigfix Web Reports

Name of the Vulnerable Software and Affected Versions: HCL BigFix Web Reports affected versions not specified Description: The issue is related to a potentially weak validation of user input, which might make HCL BigFix Web Reports subject to a Stored Cross-Site Scripting XSS attack...

PT-2025-16297 · Citrix · Citrix Web Interface

Name of the Vulnerable Software and Affected Versions: Citrix Web Interface affected versions not specified Description: The issue concerns a Cross-Site Scripting problem. No specific details about affected devices, real-world incidents, or technical exploitation details are provided...

PT-2025-16335 · Yauzl +1 · Yauzl +1

Name of the Vulnerable Software and Affected Versions: PeerTube affected versions not specified Description: The issue allows any authenticated user to cause the PeerTube server to stop functioning in a persistent manner. If user import is enabled, which is the default setting, any registered use...

PT-2025-16301 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns an unvalidated redirect in a meeting center application. No further details are available about the issue, including the number of potentially affected devices or real-wor...

PT-2025-16329 · WordPress · Wpjobboard

Name of the Vulnerable Software and Affected Versions: WPJobBoard affected versions not specified Description: A Cross-Site Request Forgery CSRF issue affects NotFound WPJobBoard, allowing unauthorized actions to be performed on behalf of a user without their knowledge. This is a type of attack...

PT-2025-16302 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-16485

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An unauthenticated attacker can delete any user's "rooms" by knowing the user's and room IDs. Recommendations At the moment, there is no information about a newer version that contains a fix f...

PT-2025-16339 · Totolink · Totolink A800R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A800R version V4.1.2cu.5137 B20200730 Description: A buffer overflow vulnerability was found in the downloadFile.cgi of TOTOLINK A800R. The issue allows for a potential buffer overflow. Recommendations: For TOTOLINK A800R version...

PT-2025-16390

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while adding or editing a plant. Recommendations At the moment, there is no...

PT-2025-16300 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an authentication bypass in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or real-wor...

PT-2025-16296 · Apache · Apache Web Server

Name of the Vulnerable Software and Affected Versions: Apache Web Server affected versions not specified Description: The issue concerns a denial of service. No further details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At the moment,...

PT-2025-16493 · Growatt · Cloud Portal

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An attacker can obtain information about the groups of smart home devices for arbitrary users, referred to as "rooms". Recommendations: At the moment, there is no information about a newer...

PT-2025-18469

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the openvswitch component. The issue concerns the validation of nested key length in the set action, where it is no...

PT-2025-16219

Name of the Vulnerable Software and Affected Versions: db-hospital-drug version 1.0 Description: A critical issue was found, affecting some unknown functionality of the file ShiroConfig.java, leading to improper authorization. The attack can be launched remotely. Recommendations: For version 1.0,...

Joomla! Authentication Bypass Vulnerability (20250402)

Joomla! is prone to an authentication bypass vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla";...

CVE-2025-3512 Buffer overflow in QTextMarkdownImporter

There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow. This issue affects Qt from 6.8.0 to 6.8.4. Versions up to 6.6.0 are known to be unaffected, and the fix...

PT-2025-16031 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross-Site Request Forgery in the Apache HTTP Server. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-16105 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an XML External Entity XXE Injection. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents...

PT-2025-16107 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns a Cross Site Request Forgery in the Apache HTTP Server. No specific details about affected devices, real-world incidents, or technical exploitation details are...