PT-2025-9097 · Git +1 · Net-Snmp

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A heap buffer overflow issue was identified, which can cause a crash. The crash occurs during the setup engineID, init snmpv3 post premib config, and snmp call callbacks functions...

PT-2025-7695 · Eventer · Eventer

Name of the Vulnerable Software and Affected Versions: Eventer affected versions not specified Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: At the moment, there is...

PT-2025-7678 · Fiberhome · Fiberhome An5506-01A Onu Gpon Rp2511

Name of the Vulnerable Software and Affected Versions: FiberHome AN5506-01A ONU GPON RP2511 affected versions not specified Description: The issue concerns a cross-site scripting problem related to the portForwardingCfg pf Description in the Port Forwarding Submenu. Recommendations: At the moment...

PT-2025-7637 · Unknown · Application

Name of the Vulnerable Software and Affected Versions: Application affected versions not specified Description: The issue concerns the lack of authorization checks for the Host parameter, allowing unauthorized access to view profile information of other users. An attacker can exploit this by...

PT-2025-16262

Name of the Vulnerable Software and Affected Versions HylaFAX Enterprise Web Interface and AvantFAX affected versions not specified Description The language form element in HylaFAX Enterprise Web Interface and AvantFAX is not properly sanitized before being used, allowing an attacker to include a...

PT-2025-7641 · Packagist · Leantime/Leantime

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A cross-site request forgery issue allows a remote actor to create an account with Owner privileges by luring an Owner or Administrator into clicking a button on an...

PT-2025-7272 · Apple · Device

Name of the Vulnerable Software and Affected Versions: Apple devices affected versions not specified Description: A security issue in the SecureROM of certain Apple devices allows an unauthenticated local attacker to execute arbitrary code on the device upon booting. This requires physical access...

PT-2025-28666 · Irfanview · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage plugin contains a memory buffer overflow issue during CGM file parsing. Successful exploitation of this issue could allow an attacker to execute...

PT-2025-7496 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for rejection is mentioned, but no further details are provided about the issue. Recommendations: At the moment, there is no...

PT-2025-28702 · Irfanview · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage plugin contains a memory buffer overflow issue during DXF file parsing. Successful exploitation of this issue could allow an attacker to execute...

PT-2025-14482 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the Linux kernel, specifically in the drm/amdgpu component. It involves the initialization of the return value in the amdgpu ttm clear buffer function. If amdgp...

PT-2025-7652 · Ring · Ring

Name of the Vulnerable Software and Affected Versions: ring affected versions not specified Description: The development of the ring software has been put on indefinite hiatus, which may result in reported security issues going unaddressed for extended periods. However, the rustls team has agreed...

PT-2025-7453 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of a rejected reason, but no further explanation is given...

PT-2025-28696 · Irfanview · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage plugin contains a memory buffer overflow issue during DXF file parsing. Successful exploitation of this issue could allow an attacker to execute...

PT-2025-7533 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue seems to be related to a confusion or mix-up regarding vulnerability identifiers. There is a mention of an advisory about a different...

PT-2025-16661

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved by adding a read-only check before calling txBeginAnon in extAlloc and extRecord. This prevents modification attempts on a read-only...

PT-2025-7535 · Cisco · Cisco Secure Email Gateway

Name of the Vulnerable Software and Affected Versions: Cisco Secure Email Gateway affected versions not specified Description: A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow...

PT-2025-20492

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL dereference issue has been resolved in the Linux kernel. The problem occurs when malloc returns NULL due to low memory, causing the config pointer to be NULL. A check has been add...

PT-2025-7787 · Moodle +5 · Moodle +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Additional checks are required to ensure that trusttext is applied to glossary entries being restored when it is enabled. Recommendations: At the moment, there is no information about a newe...

PT-2025-6761 · Unknown · Usb-Convertercable Driver

Name of the Vulnerable Software and Affected Versions: USB-CONVERTERCABLE DRIVER affected versions not specified Description: A security issue has been discovered in USB-CONVERTERCABLE DRIVER, related to the insecure loading of dynamic link libraries, which could allow local attackers to...