CVE-2023-45233 affecting package hvloader for versions less than 1.0.1-9

CVE-2023-45233 affecting package hvloader for versions less than 1.0.1-9. A patched version of the package is available...

PT-2025-15577 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to a use after free condition in Microsoft Office, which can be exploited by an authorized attacker to elevate privileges locally. Recommendations: At the...

PT-2025-15368 · Sap · Sap S/4Hana

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA affected versions not specified Description: The issue allows an attacker with user privileges to exploit a flaw in the function module exposed via RFC, enabling the injection of arbitrary ABAP code into the system and bypassing...

PT-2025-28638 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a stack-buffer-overflow write issue. The crash state involves the functions snap usedef, lj snap purge, and lj record ins...

PT-2025-15557 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is an out-of-bounds read in Windows NTFS that allows an unauthorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a...

PT-2025-15548

Name of the Vulnerable Software and Affected Versions: Windows Bluetooth Service affected versions not specified Description: A heap-based buffer overflow issue in the Windows Bluetooth Service allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is n...

PT-2025-15639 · Adobe · Xmp Toolkit

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2023.12 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-15641 · Adobe · Xmp Toolkit

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2023.12 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-15553 · Microsoft · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: Windows Shell affected versions not specified Description: The issue is related to a use after free condition in the Windows Shell, which allows an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

PT-2025-28637 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: luajit affected versions not specified Description: The software contains a heap-buffer-overflow read issue. The crash state involves lj buf ruleb128, lj bcread, and cpparser. Recommendations: At the moment, there is no information about a...

PT-2025-15335 · Nothings +1 · Stb +1

Name of the Vulnerable Software and Affected Versions: Nothings stb up to f056911 Description: A critical issue was found in Nothings stb, affecting the stb dupreplace function. The manipulation leads to integer overflow, and the attack may be launched remotely. The product uses continuous delive...

PT-2025-15506 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer over-read that allows an unauthorized attacker to disclose information over a network. It enables attackers to obtain...

PT-2025-15638 · Adobe · Xmp Toolkit

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2023.12 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-15542 · Microsoft · Windows Ntfs +1

Name of the Vulnerable Software and Affected Versions: Windows NTFS affected versions not specified Description: The issue is an out-of-bounds read in Windows NTFS that allows an unauthorized attacker to elevate privileges locally. Recommendations: At the moment, there is no information about a...

PT-2025-15585 · Microsoft · Windows Cryptographic Services +1

Name of the Vulnerable Software and Affected Versions: Windows Cryptographic Services affected versions not specified Description: The issue is related to the use of a cryptographic primitive with a risky implementation in Windows Cryptographic Services, allowing an authorized attacker to disclos...

PT-2025-15520 · Microsoft · Windows Rpc Endpoint Mapper Service +1

Name of the Vulnerable Software and Affected Versions: Windows RPC Endpoint Mapper Service affected versions not specified Description: The issue is related to a use after free vulnerability in the RPC Endpoint Mapper Service, which allows an authorized attacker to elevate privileges locally. Thi...

PT-2025-15594 · Microsoft · Office Onenote

Name of the Vulnerable Software and Affected Versions: Microsoft Office OneNote affected versions not specified Description: The issue concerns an incomplete list of disallowed inputs in Microsoft Office OneNote, which allows an unauthorized attacker to bypass a security feature locally...

PT-2025-15640 · Adobe · Xmp Toolkit

Name of the Vulnerable Software and Affected Versions: XMP Toolkit versions 2023.12 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

PT-2025-15615

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A logical bug exists in handling lazy-loaded values during unparceling. This issue is being actively exploited. Recommendations: At the moment, there is no information about a newer version...

PT-2025-15907 · Git +1 · Joni

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a security exception during the parsing of character classes within the org.joni.Parser.parseCharClass and...