PT-2025-13861 · Drupal · Drupal Material Admin

Name of the Vulnerable Software and Affected Versions: Drupal Material Admin versions . Description: The issue affects Drupal Material Admin, with all versions being potentially impacted. No specific details about the nature of the issue or its exploitation are provided. Recommendations: At the...

PT-2025-13554 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: This issue is an information disclosure problem that leaks sensitive details, such as API keys and system configurations, which could provide attackers with the necessary information to laun...

PT-2025-26903 · Tracker Software Products · Pdf-Xchange Editor

Name of the Vulnerable Software and Affected Versions: PDF-XChange Editor affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a...

PT-2025-13590 · Shopxo · Shopxo

Name of the Vulnerable Software and Affected Versions: shopxo version 6.4.0 Description: The issue is related to a SSRF/XSS vulnerability in multiple places. Recommendations: For shopxo version 6.4.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2025-13437 · Unknown · Choco Tei Watcher Mini

Name of the Vulnerable Software and Affected Versions: CHOCO TEI WATCHER mini IB-MCT001 all versions Description: A use of client-side authentication issue exists, allowing a remote attacker to obtain the product login password without authentication if exploited. Recommendations: For CHOCO TEI...

PT-2025-25691

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A flaw was found in the RandR extension, where the RRChangeProviderProperty function does not properly validate input. This issue leads to an integer overflow when computing the total size to...

PT-2025-13300 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereference issue has been identified in the Linux kernel, specifically in the uniphier-glue component. This issue occurs when the resource sizeres function is invoked a...

PT-2025-13260

Name of the Vulnerable Software and Affected Versions gnuplot affected versions not specified Description A flaw was found in the xstrftime function, which may lead to a segmentation fault, causing a system crash. Recommendations At the moment, there is no information about a newer version that...

PT-2025-13259

Name of the Vulnerable Software and Affected Versions gnuplot affected versions not specified Description A flaw was found in the GetAnnotateString function, which may lead to a segmentation fault and cause a system crash. Recommendations At the moment, there is no information about a newer versi...

PT-2025-25661

Name of the Vulnerable Software and Affected Versions Big Requests extension affected versions not specified Description A flaw was found in the Big Requests extension, where the request length is multiplied by 4 before checking against the maximum allowed size. This can potentially cause an...

PT-2025-13046 · Xiaomi · Xiaomi Phone Framework

Name of the Vulnerable Software and Affected Versions: Xiaomi phone framework affected versions not specified Description: A vulnerability exists due to improper validation, allowing attackers to access sensitive methods. This issue can be exploited to gain unauthorized access. Recommendations: A...

PT-2025-13424 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow a low-privileged attacker with local access to...

PT-2025-25660

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A flaw was found in the handling of animated cursors. If a client provides no cursors, the server assumes at least one is present, leading to an out-of-bounds read and potential crash...

PT-2025-25662

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a client to read unintended memory from previous requests...

PT-2025-25689

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A flaw was found in the X server's request handling. Non-zero 'bytes to ignore' in a client's request can cause the server to skip processing another client's request, potentially leading to a...

Security Bulletin: Multiple Security Vulnerabilities discovered in IBM Security Directory Suite (CVE-2022-32753, CVE-2022-32751, CVE-2022-33165)

Summary Several vulnerabilities were fixed in the IBM Security Verify Directory Suite. Vulnerability Details CVEID:CVE-2022-32753 DESCRIPTION: IBM Security Verify Directory 10.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive...

PT-2025-18448

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue has been identified in the Linux kernel where the user can set any speed value, potentially leading to division by zero if the speed is greater than UINT MAX/8. This issue was...

PT-2025-12843 · Arista · Arista Ng Firewall

Name of the Vulnerable Software and Affected Versions: Arista NG Firewall affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Arista NG Firewall with minimal user interaction required. The flaw exists within the...

PT-2025-12838 · Carlinkit · Carlinkit Cpc200-Ccpa

Name of the Vulnerable Software and Affected Versions: CarlinKit CPC200-CCPA affected versions not specified Description: The issue is related to a Missing Root of Trust Local Privilege Escalation. It allows for local privilege escalation. Recommendations: At the moment, there is no information...

PT-2025-12844 · Bdrive · Bdrive Netdrive

Name of the Vulnerable Software and Affected Versions: Bdrive NetDrive affected versions not specified Description: The issue is related to an uncontrolled search path element, which can lead to local privilege escalation. Recommendations: At the moment, there is no information about a newer...