6239 matches found
PT-2025-8795
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A synchronization issue in the Linux kernel's md-bitmap component can cause a general protection fault, leading to a kernel crash. The problem occurs when the bitmap get stats function i...
PT-2025-5449 · Unknown · Elementinvader Addons For Elementor
Name of the Vulnerable Software and Affected Versions: ElementInvader Addons for Elementor versions 1.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations: For...
PT-2025-3718 · Toolstick · Toolstick
Name of the Vulnerable Software and Affected Versions: ToolStick affected versions not specified Description: The issue is caused by an uncontrolled search path in the ToolStick installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code executi...
PT-2025-5487 · WordPress · Ai Chatbot For Wordpress – Hyve Lite
Name of the Vulnerable Software and Affected Versions: AI Chatbot for WordPress – Hyve Lite versions 1.2.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...
PT-2025-2962 · Sharkssl · Sharkssl
Name of the Vulnerable Software and Affected Versions: SharkSSL version from 05/05/24 commit 64808a5e12c83b38f85c943dee0112e428dc2a43 Description: A heap buffer overflow in the server site handshake implementation allows a remote attacker to trigger a Denial-of-Service via a malformed Client-Hell...
CVE-2025-24027
CVE-2025-24027 concerns the PrestaShop module ps_contactinfo . The vulnerability is a cross-site scripting (XSS) flaw affecting versions up to and including 3.3.2, arising when formatted addresses stored in the database are displayed. Exploitation is described as possible only in shops already vu...
PT-2025-6472 · Kaspersky · Kaspersky Security Cloud +11
Name of the Vulnerable Software and Affected Versions: Kaspersky Virus Removal Tool for Windows affected versions not specified Kaspersky Endpoint Security for Windows affected versions not specified Kaspersky Security for Virtualization Light Agent affected versions not specified Kaspersky...
PT-2025-3713 · Traffic Alert Collision Avoidance System (Tcas) Ii · Collision Avoidance Systems
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves utilizing software-defined radios and a custom low-latency processing pipeline to transmit RF signals with spoofed location data to...
CVE-2025-23196
CVE-2025-23196 describes a code injection vulnerability in the Ambari Alert Definition feature. An authenticated user can exploit the vulnerability when defining alert scripts, where the script filename field is executed via sh -c , enabling remote command execution on the server. Multiple connec...
PT-2025-2995
Name of the Vulnerable Software and Affected Versions NVIDIA Unified Memory driver for Linux affected versions not specified Description The issue concerns a vulnerability in the NVIDIA Unified Memory driver for Linux, where an attacker could potentially leak uninitialized memory. This could lead...
PT-2025-3986 · Apache · Apache Httpd
Name of the Vulnerable Software and Affected Versions: Apache HTTPD affected versions not specified Description: The issue concerns a rejected reason related to the Apache HTTPD DNS. No further details are provided about the nature of the issue or its potential impact. There is no information...
PT-2025-1346 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue allows for the potential reading of protected files in various locations due to a lack of permission verification. This could lead to a local privilege escalation without...
PT-2025-5622
Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned. Description: A issue exists in chess game setups and user interfaces that can lead to the misidentification of the King and Queen pieces. This issue arises primarily from ambiguous...
PT-2025-1340 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to incorrect boundary checking, which could allow access to kernel memory in user space. This might lead to a local privilege escalation without requiring...
PT-2025-1341 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A potential out-of-bounds write issue exists in BnDmAgent::onTransact in dm agent.cpp due to a neuter. This could lead to a local privilege escalation with System execution...
PT-2025-1335 · Google · Android
Name of the Vulnerable Software and Affected Versions: WifiServiceImpl.java affected versions not specified Description: The issue is related to a missing permission check in multiple functions of WifiServiceImpl.java, which could allow activating a Wi-Fi access point from a non-owner profile. Th...
PT-2025-1336 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or version is mentioned. Description: A possible out-of-bounds read in the asn1 ber decoder function in asn1 decoder.c could lead to local information disclosure with System execution privileges required. No user...
PT-2025-1343 · Google · Android
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to multiple functions in Parcel.cpp, where it is possible to bypass address space layout randomization. This could lead to a local...
PT-2025-1334 · Unknown · Minithumbfile.Java
Name of the Vulnerable Software and Affected Versions: MiniThumbFile.java affected versions not specified Description: The issue in MiniThumbFile.java allows for the potential disclosure of local information without requiring additional execution privileges. This could lead to the exposure of...
PT-2025-1332 · Unknown · Userdictionaryprovider
Name of the Vulnerable Software and Affected Versions: UserDictionaryProvider affected versions not specified Description: The issue is related to multiple functions in UserDictionaryProvider.java, where a confused subordinate could potentially allow adding and removing words from the user...