PT-2025-15165 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A security issue exists in the security verification module, specifically an access control vulnerability. Successful exploitation of this issue will impact the integrity and confidentiality...

PT-2025-15175 · Mediatek · Mt7915 +4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: In the wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional executio...

PT-2025-15455 · Rockwell Automation · Rockwell Automation Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena affected versions not specified Description: A local code execution issue exists due to a threat actor being able to read outside of the allocated memory buffer, resulting from improper validation of user-supplied...

PT-2025-15227

Name of the Vulnerable Software and Affected Versions GLib affected versions not specified openSUSE Leap 15.4 SUSE Micro versions 5.1 through 5.5 Red Hat Enterprise Linux 6 Description An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp. This issue is...

PT-2025-15182 · Dsoftbus · Dsoftbus

Name of the Vulnerable Software and Affected Versions: DSoftBus module affected versions not specified Description: The issue is related to a deserialization mismatch vulnerability in the DSoftBus module. Successful exploitation of this vulnerability may affect service integrity. Recommendations:...

PT-2025-15226

Name of the Vulnerable Software and Affected Versions: GNUPlot affected versions not specified Description: A flaw was found in GNUPlot, where a segmentation fault via IO str init static internal may jeopardize the environment. Recommendations: At the moment, there is no information about a newer...

PT-2025-15190 · Qualcomm · Qualcomm Snapdragon Auto

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Auto affected versions not specified Description: The issue is related to memory corruption that occurs while handling file descriptors during listener registration or de-registration. Recommendations: At the moment, there...

PT-2025-15093

Name of the Vulnerable Software and Affected Versions AnyDesk affected versions not specified Description The issue concerns a remote code execution RCE exploit. Technical details include the use of a vxproj file, conversion to vbs and then to ps1 PowerShell script, and involvement of an asar fil...

PT-2025-15099 · Unknown · Fumiao Opencms

Name of the Vulnerable Software and Affected Versions: fumiao opencms up to a0fafa5cff58719e9b27c2a2eec204cc165ce14f Description: A problematic vulnerability has been found in fumiao opencms. The issue affects an unknown function of the file...

PT-2025-22633 · Git +1 · Archive

Name of the Vulnerable Software and Affected Versions: KArchive affected versions not specified Description: The software suffers from a global-buffer-overflow read issue. The crash occurs during the parseExtraField function, within the KZip::openArchive and KArchive::open functions...

PT-2025-15361

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified rust-openssl crate versions prior to 0.10.71 Description A flaw exists in the handling of the properties argument within certain functions. This issue can lead to a use-after-free condition, which may...

CVE-2025-31115

XZ Utils provide a general-purpose data-compression library plus command-line tools. In XZ Utils 5.3.3alpha to 5.8.0, the multithreaded .xz decoder in liblzma has a bug where invalid input can at least result in a crash. The effects include heap use after free and writing to an address based on t...

PT-2025-19699 · Opensuse +1 · Apparmor +1

Name of the Vulnerable Software and Affected Versions: apparmor affected versions not specified Description: This issue allows dovecot-auth to execute the unix check password function from /sbin, not only from /usr/bin. Recommendations: At the moment, there is no information about a newer version...

PT-2025-14593 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel. The problem occurs when a large folio needs to be dropped due to EOF End Of File and the correct number of references is no...

PT-2025-14816 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a use after free condition in Microsoft Edge Chromium-based, allowing an authorized attacker to execute code over a network. Recommendations: A...

GHSA-M254-F6H4-P93G Jenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration Form

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

Jenkins AsakusaSatellite Plugin Does not Mask API Keys via Job Configuration Form

Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

PT-2025-27561 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: Lua affected versions not specified Description: The Lua interpreter suffers from a heap-use-after-free issue. The crash state indicates the issue occurs within the lj strfmt pushvf, lua pushfstring, and luaL loadfilex functions...

PT-2025-14459 · Assetview +1 · Assetview +1

Name of the Vulnerable Software and Affected Versions: AssetView and AssetView CLOUD affected versions not specified Description: The issue concerns acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated...

PT-2025-27742

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A malicious USB device can send a WMI SWBA EVENTID event from an ath9k htc-managed device before beaconing has been enabled, causing a device-by-zero error in the driver. This can lead...