PT-2025-14827 · Eaton · Hmi Viewjet C-More Series

Name of the Vulnerable Software and Affected Versions: HMI ViewJet C-more series affected versions not specified Description: A weak encoding for password issue exists, potentially allowing a local authenticated attacker to obtain authentication information. Recommendations: At the moment, there ...

PT-2025-14561 · Hcl · Hcl Devops Deploy +1

Name of the Vulnerable Software and Affected Versions: HCL DevOps Deploy / HCL Launch affected versions not specified Description: The issue is related to missing authentication in the Agent Relay service, which could allow unauthorized access to other services or potential exposure of sensitive...

PT-2025-23833 · Git +1 · Clamav

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a heap-buffer-overflow read issue. The crash state indicates involvement of the cli bm addpatt, add hash, and load regex matcher...

Security Bulletin: IBM Storage Protect Server is vulnerable due to Eclipse Jetty (CVE-2024-9823)

Summary IBM Storage Protect Server uses Eclipse Jetty and may be vulnerable to deial-of-service attack due to issues with OutofMemory errors related with DosFilter. Vulnerability Details CVEID:CVE-2024-9823 DESCRIPTION: There exists a security vulnerability in Jetty's DosFilter which can be...

PT-2025-14616 · Apache · Apache Openoffice

Name of the Vulnerable Software and Affected Versions: Apache OpenOffice affected versions not specified Description: The issue concerns unvalidated user input in Apache OpenOffice. No specific details about the number of potentially affected devices or real-world incidents are provided...

PT-2025-14461

Name of the Vulnerable Software and Affected Versions Zabbix affected versions not specified Description The issue concerns the Zabbix API, specifically the "user.get" endpoint, which returns all users that share a common group with the calling user. This includes sensitive information such as...

PT-2025-14765 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue is related to unvalidated user input in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices or real-world incidents a...

PT-2025-14383 · Lcms2 · Lcms2

Name of the Vulnerable Software and Affected Versions: lcms2 version 2.16 Description: A heap buffer overflow issue has been identified in the UnrollChunkyBytes function in cmspack.c, which handles color space transformations. This issue is disputed by the supplier, who claims it is a bug in a...

PT-2025-14339 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the openvswitch in the Linux kernel. Specifically, it involves the ovs ct set labels function, which is called for confirmed conntrack entries within ovs ct...

PT-2025-14619 · Citrix · Citrix Netscaler

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler affected versions not specified Description: The issue is related to a denial of service. For more details, such as affected products and timeline, refer to the provided link. Recommendations: At the moment, there is no...

PT-2025-14615 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns unvalidated user input in the Apache HTTP Server. No specific details about the estimated number of potentially affected devices or real-world incidents are...

PT-2025-14620 · Vmware · Vmware Vmfs

Name of the Vulnerable Software and Affected Versions: VMware VMFS affected versions not specified Description: The issue concerns a directory traversal vulnerability in the VMware VMFS file system. No information is provided about the estimated number of potentially affected devices worldwide or...

PT-2025-14419 · Shopper · Shopper

Name of the Vulnerable Software and Affected Versions: Shopper versions n/a through 3.2.5 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This could allow unauthorized database access, potentially...

PT-2025-14618 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Cross-Site Request Forgery issue is present. No further details are available regarding the estimated number of potentially affected devices or real-world incidents. Recommendations: At th...

PT-2025-14463 · Zabbix +3 · Zabbix Server +3

Name of the Vulnerable Software and Affected Versions: Zabbix server affected versions not specified Description: The Zabbix server is susceptible to a denial-of-service DoS issue due to uncontrolled resource exhaustion. An attacker can send specially crafted requests to the server, causing it to...

PT-2025-13859 · Drupal · Drupal Profile Private

Name of the Vulnerable Software and Affected Versions: Drupal Profile Private version . Description: The issue affects the private profile functionality. Recommendations: For version ., consider updating to a newer version that addresses this issue, if available. At the moment, there is no...

PT-2025-13998 · Drupal · Drupal Admin Lte Theme

Name of the Vulnerable Software and Affected Versions: Drupal Admin LTE theme versions . Description: The issue affects the Drupal Admin LTE theme. No specific details about the nature of the issue or its potential impact are provided. Recommendations: At the moment, there is no information about...

PT-2025-13958 · Unknown · Studentservlet-Jsp

Name of the Vulnerable Software and Affected Versions: yzk2356911358 StudentServlet-JSP affected versions not specified Description: A vulnerability has been found in the software, classified as problematic, and it affects unknown code. The manipulation leads to cross-site request forgery. The...

PT-2025-13648 · Piextract · Soop-Clm

Name of the Vulnerable Software and Affected Versions: SOOP-CLM from PiExtract affected versions not specified Description: The issue allows unauthenticated remote attackers to inject arbitrary SQL commands, enabling them to read, modify, and delete database contents. Recommendations: At the...

PT-2025-20496

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A possible use-after-free UAF issue has been identified in the Linux kernel related to tracing and fprobe events. The problem arises when a module is unloaded before try module get is...