PT-2025-29368 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability exists in the Tenda FH1202. The issue affects the fromAdvSetWan function within the /goform/AdvSetWan file. Manipulation of the PPPOEPassword argument leads to a stack-bas...

PT-2025-30016

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's eventpoll implementation where the epoll reference count is decremented while still holding the ep mutex. This can lead to a use-after-free condition...

PT-2025-28893

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The provided information indicates a potential security issue. Details regarding the nature of the issue, affected devices, or real-world exploitation are not...

PT-2025-28906 · Jenkins · Jenkins Statistics Gatherer Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Statistics Gatherer Plugin versions 2.0.3 and earlier Description: The Jenkins Statistics Gatherer Plugin stores the AWS Secret Key unencrypted in its global configuration file...

PT-2025-29372 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability exists in the fromPptpUserSetting function of the /goform/PPTPUserSetting file. Manipulation of the delno argument leads to a stack-based buffer overflow, allowing for...

PT-2025-28924 · Jenkins · Jenkins Kryptowire Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Kryptowire Plugin versions 0.2 and earlier Description: The Jenkins Kryptowire Plugin stores the Kryptowire API key unencrypted in its global configuration file org.aerogear.kryptowire.GlobalConfigurationImpl.xml on the Jenkins...

PT-2025-28884 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A flaw exists in the Linux kernel's io uring resource management related to folio unpinning. Specifically, the issue arises when a tail page of a folio is pinned, and the io uring...

PT-2025-29373 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability has been identified in the fromwebExcptypemanFilter function of the /goform/webExcptypemanFilter file. Manipulation of the argument page leads to a stack-based buffer...

PT-2025-29371 · Tenda · Tenda Fh1202

Name of the Vulnerable Software and Affected Versions: Tenda FH1202 version 1.2.0.14408 Description: A critical vulnerability has been identified in Tenda FH1202. The issue resides in the fromPptpUserAdd function within the /goform/PPTPDClient file. Manipulation of the Username argument leads to ...

PT-2025-28826 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DXF files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

PT-2025-28562 · Microsoft · Windows User-Mode Driver Framework Host +1

Name of the Vulnerable Software and Affected Versions: Windows User-Mode Driver Framework Host affected versions not specified Description: The issue allows an authorized attacker to disclose sensitive information locally due to the exposure of sensitive information to an unauthorized actor in...

PT-2025-28435 · Emac · Emac

Name of the Vulnerable Software and Affected Versions: EMAC affected versions not specified Description: The issue is related to memory corruption that occurs while copying the result to the transmission queue in EMAC. This corruption can potentially lead to unintended behavior or crashes...

PT-2025-28451 · Qualcomm · Snapdragon +22

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs during sub-system restart while processing clean-up to free up resources. Recommendations: At the moment, there is no information about a newer version that contains...

PT-2025-28607 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: SQL Server affected versions not specified Description: The issue is related to a heap-based buffer overflow in SQL Server, which allows an authorized attacker to execute code over a network. This can be achieved through a network connection,...

PT-2025-29185

Name of the Vulnerable Software and Affected Versions: Emerson ValveLink affected versions not specified Description: Emerson ValveLink products do not validate or incorrectly validate input data, potentially leading to unsafe or incorrect data processing. Recommendations: At the moment, there is...

PT-2025-28539 · Microsoft · Mpeg-2 Video Extension +1

Name of the Vulnerable Software and Affected Versions: Microsoft MPEG-2 Video Extension affected versions not specified Description: The issue is related to a use after free condition in the Microsoft MPEG-2 Video Extension, which allows an authorized attacker to execute code locally...

PT-2025-28312 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write due to an incorrect bounds check in the wlan AP driver could lead to remote code execution with no additional execution privileges needed. User interaction is...

PT-2025-28615 · Microsoft · Windows Notification +1

Name of the Vulnerable Software and Affected Versions: Windows Notification affected versions not specified Description: The issue is related to a use after free condition in Windows Notification, allowing an authorized attacker to locally elevate privileges. This can potentially be exploited by ...

PT-2025-28593

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: An out-of-bounds read issue in Microsoft Office allows an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no information about a newer versi...

PT-2025-28430 · Qualcomm · Snapdragon +189

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A cryptographic issue exists while processing crypto API calls. Missing checks may lead to corrupted key usage or IV reuses. Recommendations: At the moment, there is no information about a...