PT-2025-29229 · Red Hat · Ansible

Name of the Vulnerable Software and Affected Versions: Ansible affected versions not specified Description: A flaw exists in Ansible that allows a malicious user to access data through three API endpoints that return verbose, unauthenticated responses. This may contain important information...

PT-2025-29197 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A vulnerability exists in Campcodes Online Recruitment Management System 1.0. The manipulation of the ID argument in the /admin/ajax.php?action=delete vacancy file leads ...

PT-2025-31088

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in netfslib when issuing subrequests. Specifically, the issue occurs between cache write completion and the setting of NETFS RREQ ALL QUEUED, potentially causing...

PT-2025-31010 · Git +1 · Upx

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a heap-buffer-overflow READ issue. The crash state involves the N BELE RTP::LEPolicy::get32 function, PackLinuxElf32::elf lookup...

PT-2025-29203

Name of the Vulnerable Software and Affected Versions: AXIS Camera Station Server affected versions not specified Description: The AXIS Camera Station Server contains a flaw that allows bypassing the normally required authentication. Recommendations: At the moment, there is no information about a...

PT-2025-29059

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the jbd2 journal dirty metadata function, resulting in a data race and potential null pointer dereference. The issue stems from a missing data-race...

PT-2025-29180 · Emerson · Valvelink

Name of the Vulnerable Software and Affected Versions: Emerson ValveLink products affected versions not specified Description: Emerson ValveLink products do not use or incorrectly use a protection mechanism, providing insufficient defense against directed attacks. Recommendations: At the moment,...

PT-2025-29054

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The strlcat function with FORTIFY support was triggering a panic due to a perceived buffer overflow, despite the correct target buffer size being passed. The issue occurs when using...

PT-2025-29135 · Alteryx · Alteryx Server

Name of the Vulnerable Software and Affected Versions: Alteryx Server version 2023.1.1.460 Description: An issue in Alteryx Server allows for HTML injection through a manipulated script within the pages component. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-29122 · Unknown · Lifestylestore

Name of the Vulnerable Software and Affected Versions: LifeStyle Store version 1.0 Description: A critical issue exists in code-projects LifeStyle Store, potentially allowing for remote SQL injection. The vulnerability is located in the /cart remove.php file, specifically through manipulation of...

PT-2025-28991 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw within the networking subsystem. Specifically, a NULL dereference can occur in the rtnl create link function when dev-netdev ops is NULL, potentially...

PT-2025-29051

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The Linux kernel contains a flaw within the cs dsp firmware component. A KUnit test revealed an out-of-bounds OOB memory read access due to incorrect string length handling during the...

Jenkins Sensedia API Platform Plugin vulnerability exposes unencrypted tokens in its global configuration file

Jenkins Sensedia Api Platform tools Plugin 1.0 stores the Sensedia API Manager integration token unencrypted in its global configuration file com.sensedia.configuration.SensediaApiConfiguration.xml on the Jenkins controller as part of its configuration. This token can be viewed by users with acce...

Jenkins IBM Cloud DevOps Plugin vulnerability exposes SonarQube authentication tokens

Jenkins IBM Cloud DevOps Plugin 2.0.16 and earlier stores SonarQube authentication tokens unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file...

GHSA-962Q-84V8-HXHJ Jenkins QMetry Test Management Plugin vulnerability exposes API keys

QMetry Test Management Plugin 1.13 and earlier stores Qmetry Automation API Keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

Jenkins QMetry Test Management Plugin vulnerability exposes API keys

QMetry Test Management Plugin 1.13 and earlier stores Qmetry Automation API Keys unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These API keys can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system...

Jenkins ReadyAPI Functional Testing Plugin vulnerability stores unencrypted authentication credentials

Jenkins ReadyAPI Functional Testing Plugin 1.11 and earlier stores SLM License Access Keys, client secrets, and passwords unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These credentials can be viewed by users with Item/Extended Read permission or acce...

Jenkins Aqua Security Scanner Plugin vulnerability exposes scanner tokens

Jenkins Aqua Security Scanner Plugin 3.2.8 and earlier stores Scanner Tokens for Aqua API unencrypted in job config.xml files on the Jenkins controller as part of its configuration. These tokens can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file...

PT-2025-28845 · Campcodes · Campcodes Payroll Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Payroll Management System version 1.0 Description: A critical vulnerability exists in Campcodes Payroll Management System. The vulnerability is due to a SQL injection flaw within unknown code of the file /ajax.php?action=save...

PT-2025-29369 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability exists in the Tenda FH1202 router firmware. The fromGstDhcpSetSer function within the /goform/GstDhcpSetSer file is affected. Manipulation of the dips argument leads to a...