PT-2025-7922 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit affected versions not specified Description: The issue is related to an out-of-bounds read in the cuobjdump binary of the NVIDIA CUDA toolkit. This can be triggered by passing a malformed ELF file to cuobjdump, potentially...

PT-2025-11204 · Autodesk · Autodesk Autocad

Name of the Vulnerable Software and Affected Versions: Autodesk AutoCAD affected versions not specified Description: A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read issue. This can be leveraged by a malicious actor to cause a crash, read...

PT-2025-15279

Name of the Vulnerable Software and Affected Versions Sqlite version 3.49.0 Description The issue is related to an integer overflow in the concat function. Recommendations For Sqlite version 3.49.0, at the moment, there is no information about a newer version that contains a fix for this...

PT-2025-7789 · Moodle +5 · Moodle +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A risk related to SQL injection was identified in the module list filter within the course search functionality. Recommendations: At the moment, there is no information about a newer version...

PT-2025-6785 · Unknown · Bestinformed Web

Name of the Vulnerable Software and Affected Versions: BestInformed Web affected versions not specified Description: The issue arises from improper sanitization of user input in the BestInformed Web application, leading to multiple authenticated stored cross-site scripting vulnerabilities. An...

PT-2025-7786 · Moodle +5 · Moodle +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Insufficient capability checks allow unauthorized access to disable badges that a user does not have permission to access. Recommendations: At the moment, there is no information about a new...

PT-2025-7116 · Unknown · School Information Management System

Name of the Vulnerable Software and Affected Versions: School Information Management System version 1.0 Description: A critical SQL Injection issue was discovered in the School Information Management System. Recommendations: For School Information Management System version 1.0, update to a versio...

CVE-2024-56180

CWE-502 Deserialization of Untrusted Data at the eventmesh-meta-raft plugin module in Apache EventMesh master branch without release version on windows\linux\mac os e.g. platforms allows attackers to send controlled message and remote code execute via hessian deserialization rpc protocol. Users c...

CVE-2024-32037

GeoNetwork is a catalog application to manage spatially referenced resources. In versions prior to 4.2.10 and 4.4.5, the search end-point response headers contain information about Elasticsearch software in use. This information is valuable from a security point of view because it allows software...

PT-2025-7246 · Unknown · Simplehelp

Name of the Vulnerable Software and Affected Versions: SimpleHelp affected versions not specified Description: A vulnerability has been identified in SimpleHelp. CISA has added this issue to the KEV Catalog. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2025-7258 · Git +1 · Net-Snmp

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue is related to an index-out-of-bounds crash, as reported by OSS-Fuzz. The crash involves the ada fuzz header.h file. No information is available about the estimated number of...

PT-2025-6872

Name of the Vulnerable Software and Affected Versions: h6web versions affected versions not specified Description: The issue is a Reflected Cross-Site Scripting XSS flaw that could allow an attacker to inject malicious JavaScript code into a URL. When a user accesses that URL, the injected code i...

PT-2025-6826

Name of the Vulnerable Software and Affected Versions ASCO 5310 Single-Channel Remote Annunciator versions all Description A Download of Code Without Integrity Check issue exists, which could render the device inoperable when malicious firmware is downloaded. Recommendations For all versions, at...

CVE-2025-25199 BCryptGenerateSymmetricKey memory leak

go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation CNG. Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to cng.TLS1PRF don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41...

PT-2025-6417 · Amd +1 · Amd Crash Defender +1

Name of the Vulnerable Software and Affected Versions: AMD Crash Defender affected versions not specified Description: The issue is related to improper input validation in AMD Crash Defender, which could allow an attacker to provide the Windows system process ID to a kernel-mode driver. This coul...

PT-2025-6491 · Intel · Intel(R) System Security Report/System Resources Defense

Name of the Vulnerable Software and Affected Versions: IntelR System Security Report and System Resources Defense firmware affected versions not specified Description: A race condition in the IntelR System Security Report and System Resources Defense firmware may allow a privileged user to...

PT-2025-6267 · Avaya · Avaya Spaces

Name of the Vulnerable Software and Affected Versions: Avaya Spaces affected versions not specified Description: A Cross-Site Scripting XSS issue may have allowed unauthorized code execution and potential disclosure of sensitive information. Recommendations: At the moment, there is no information...

PT-2025-6224 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The reason for the rejection is mentioned, but no further details are provided about the issue. Recommendations: At the moment, there is no...

PT-2025-28678 · Irfanview · Irfanview +1

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The DWG File Parser component within the CADImage plugin for IrfanView contains a memory buffer out-of-bounds read issue. Successful exploitation of this issue could allow...

PT-2025-6228 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of a rejected reason, but no further explanation is given...