PT-2025-38235

Name of the Vulnerable Software and Affected Versions CISA Thorium affected versions not specified Description CISA Thorium uses the .unwrap function to handle errors related to account verification email messages. An unauthenticated remote attacker could cause a crash by providing a specially...

PT-2025-38158

Name of the Vulnerable Software and Affected Versions: ABB FLXEON versions through 9.3.5 and newer versions Description: The product contains hard-coded credentials. Recommendations: Versions through 9.3.5 and newer versions: At the moment, there is no information about a newer version that...

PT-2025-38126

Name of the Vulnerable Software and Affected Versions N-Reporter affected versions not specified N-Cloud affected versions not specified N-Probe affected versions not specified Description The N-Reporter, N-Cloud, and N-Probe developed by N-Partner are susceptible to an OS Command Injection issue...

PT-2025-38165

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the vt6655 driver related to memory cleanup loops during initialization. Specifically, the driver allocates memory using an index variable that...

PT-2025-42269

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw related to the handling of timers and work items within the tc358743 device driver. Specifically, the use of timer delete and cancel delayed work does no...

PT-2025-38081

Name of the Vulnerable Software and Affected Versions: Campcodes Grocery Sales and Inventory System version 1.0 Description: A vulnerability exists in Campcodes Grocery Sales and Inventory System 1.0. The issue is related to SQL injection within an unknown function of the file...

PT-2025-38094

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking SD-WAN Gateways affected versions not specified Description: A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitati...

PT-2025-38090

Name of the Vulnerable Software and Affected Versions: EdgeConnect SD-WAN affected versions not specified Description: A vulnerability in the command-line interface of EdgeConnect SD-WAN could allow an authenticated attacker to read arbitrary files within the system. Successful exploitation could...

PT-2025-38087

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect SD-WAN Gateways affected versions not specified Description: A flaw exists in the cryptographic logic of the software that may allow an authenticated remote attacker to gain shell access. Successful exploitati...

PT-2025-38095

Name of the Vulnerable Software and Affected Versions: HPE Aruba Networking EdgeConnect OS ECOS affected versions not specified Description: A broken access control issue exists in HPE Aruba Networking EdgeConnect OS ECOS. Successful exploitation may allow an attacker to bypass firewall...

PT-2025-38705

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 A1FW110 affected versions not specified Description A security issue has been identified in D-Link DIR-513 A1FW110. Manipulation of the webpage argument in the file /goform/formWPS can lead to a buffer overflow. This issue may b...

PT-2025-54576

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the Split View component of the Google Chrome browser related to errors in how information is presented in the user interface. Remote exploitation of this issue could...

CVE-2025-58755 MONAI has path traversal issue that may lead to arbitrary file writes

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. The extractall function zipfile.extractalloutputdir is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.0, when the Zip file containing malicious...

Buffer Over-read

Overview Affected versions of this package are vulnerable to Buffer Over-read via the DiaSymReader.dll process. An attacker can execute arbitrary code by exploiting a buffer over-read condition when the application processes specially crafted input. This issue affects EOL ASP.NET 6.0.0 = 6.0.36 a...

PT-2025-36526

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information Management System version 1.0 Description: A security flaw exists in itsourcecode Student Information Management System 1.0. The issue involves SQL injection stemming from the manipulation of the ID argument...

PT-2025-36381

Name of the Vulnerable Software and Affected Versions: ASP affected versions not specified Description: An out-of-bounds read issue exists in the ASP bootloader. A privileged attacker with access to a malicious bootloader could potentially read sensitive memory, leading to a loss of...

PT-2025-36384

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: Improper input validation in the system management mode SMM could allow a privileged attacker to overwrite arbitrary memory, potentially resulting in arbitrar...

PT-2025-36386

Name of the Vulnerable Software and Affected Versions: AMD RomArmor affected versions not specified Description: A missing authorization check in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from a standby state, potentially leading to a loss of...

Security Bulletin: IBM Stering B2B Integrator and IBM Sterling File Gateway are Vulnerable to Denial of Service Due to Netty (CVE-2024-47535)

Summary IBM Stering B2B Integrator and IBM Sterling File Gateway have addressed the denial of service vulnerability Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance...

PT-2025-44677

Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description An issue exists in Chromium that could allow attackers to affect the system. The problem is related to an object lifecycle issue within the Media component. Recommendations At the moment,...