6231 matches found
PT-2025-44692
Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue involves an incorrect security user interface in the Omnibox. Recommendations At the moment,...
PT-2025-35561
Name of the Vulnerable Software and Affected Versions: rsbi-pom version 4.7 Description: rsbi-pom version 4.7 is vulnerable to SQL Injection via the /bi/service/model/DatasetService API endpoint. Recommendations: At the moment, there is no information about a newer version that contains a fix for...
PT-2025-37109
Name of the Vulnerable Software and Affected Versions Foreman affected versions not specified Description An authorization issue exists in Foreman’s GraphQL API. Low-privileged users can access metadata that they should not be able to view. The GraphQL endpoint does not enforce access controls...
PT-2025-38556
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s wifi subsystem related to SSID length handling within the cfg80211 connect result function. Specifically, insufficient bounds checking on the...
PT-2025-34892 · Cisco · Cisco Ucs Manager
Name of the Vulnerable Software and Affected Versions: Cisco UCS Manager Software affected versions not specified Description: A vulnerability in the Cisco UCS Manager Software Command Line Interface CLI may allow an authenticated, local attacker with administrative privileges to read, create, or...
PT-2025-34841 · Sma Solar Technology · Sunny Boy
Name of the Vulnerable Software and Affected Versions: Sunny Boy affected versions not specified Description: An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensitive system information of the affected devices. Recommendations: A...
PT-2025-34846 · Clininet · Clininet
Name of the Vulnerable Software and Affected Versions: CliniNET affected versions not specified Description: Unauthenticated access to the /cgi-bin/CliniNET.prd/GetActiveSessions.pl endpoint allows takeover of any user session logged into the system, including those with administrative privileges...
PT-2025-34890 · Cisco · Cisco Nx-Os
Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an...
PT-2025-34763
Name of the Vulnerable Software and Affected Versions: NetScaler ADC and NetScaler Gateway affected versions not specified Description: Improper access control exists on the NetScaler Management Interface in NetScaler ADC and NetScaler Gateway. An attacker gaining access to the appliance’s NSIP,...
PT-2025-34369 · Quantumnous · Quantumnous New-Api
Name of the Vulnerable Software and Affected Versions: QuantumNous new-api version 0.8.5.2 Description: The QuantumNous new-api is susceptible to a Cross-Site Scripting XSS issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
PT-2025-34391
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the ALSA subsystem, specifically in the scarlett2 input select ctl info function. A missing NULL check when allocating string arrays via kasprin...
PT-2025-34438 · D Link · D-Link Dir-619L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-619L version 2.06B01 Description: The D-Link DIR-619L device is susceptible to a buffer overflow issue in the formSysCmd function through the submit-url parameter. Recommendations: At the moment, there is no information about a new...
PT-2025-34439 · Tenda · Tenda Ax3
Name of the Vulnerable Software and Affected Versions: Tenda AX3 version V16.03.12.10 CN Description: The Tenda AX3 Router is susceptible to a buffer overflow condition in the fromSetSysTime function through manipulation of the ntpServer parameter. Recommendations: At the moment, there is no...
PT-2025-34276 · Infinitt Healthcare · Infinitt Pacs System Manager
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: An attacker could exploit this vulnerability by uploading arbitrary files via a specific endpoint, potentially leading to unauthorized remote code execution o...
PT-2025-33752 · Jasonclark · Getsemantic
Name of the Vulnerable Software and Affected Versions: jasonclark getsemantic versions up to 040c96eb8cf9947488bd01b8de99b607b0519f7d Description: A vulnerability exists in jasonclark getsemantic. The issue is related to cross site scripting, triggered by manipulating the view argument in the...
PT-2025-46745
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's pwm subsystem, specifically within the berlin driver. An incorrect register was being used during suspend and resume operations. The driver was...
PT-2025-33848 · Ibm · Ibm Sterling File Gateway +1
Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator version 6.2.1.0 IBM Sterling File Gateway version 6.2.1.0 Description: IBM Sterling B2B Integrator and IBM Sterling File Gateway are susceptible to a cross-site scripting issue. An authenticated user can embed...
PT-2025-33690 · Totolink · Totolink A3002Ru
Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: The device contains a command injection issue via the bupload.html component. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
PT-2025-33694
Name of the Vulnerable Software and Affected Versions: Lenovo PC Manager affected versions not specified Description: An improper permission vulnerability exists in Lenovo PC Manager that could allow a local attacker to escalate privileges. Recommendations: At the moment, there is no information...
PT-2025-33683 · Cip · Cip
Name of the Vulnerable Software and Affected Versions: Versions affected not specified Description: A security issue exists due to improper handling of malformed CIP Forward Close packets during fuzzing. The controller enters a solid red Fault LED state and becomes unresponsive. Upon power cycle,...