PT-2025-28502

Name of the Vulnerable Software and Affected Versions: AMD processors affected versions not specified Description: A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across...

PT-2025-28350 · Phoenix Contact · Axc F 1152 +4

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been...

PT-2025-28595

Name of the Vulnerable Software and Affected Versions: Microsoft Office Word affected versions not specified Description: The issue is related to a use after free condition in Microsoft Office Word, which allows an unauthorized attacker to execute code locally. Recommendations: At the moment, the...

PT-2025-28826 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DXF files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

PT-2025-28590 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to a double free in the Microsoft Brokering File System, which allows an authorized attacker to elevate privileges locally. Recommendations: At...

PT-2025-28596

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to a use after free condition in Microsoft Office, which enables an unauthorized attacker to execute code locally. Recommendations: At the moment, there is no...

PT-2025-28607 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: SQL Server affected versions not specified Description: The issue is related to a heap-based buffer overflow in SQL Server, which allows an authorized attacker to execute code over a network. This can be achieved through a network connection,...

PT-2025-28475 · Frappe · Press

Name of the Vulnerable Software and Affected Versions: Press versions affected versions not specified Description: The issue concerns a lack of server-side validation for 2FA login, allowing users to circumvent this security measure. Press is a Frappe custom app that manages infrastructure,...

PT-2025-28557 · Microsoft · Tdx.Sys +1

Name of the Vulnerable Software and Affected Versions: Windows TDX.sys affected versions not specified Description: The issue is related to an out-of-bounds read in Windows TDX.sys, which allows an authorized attacker to disclose information locally. This means that an attacker with certain...

PT-2025-28707 · Irfanview · Irfanview

Name of the Vulnerable Software and Affected Versions: IrfanView CADImage Plugin affected versions not specified Description: The IrfanView CADImage Plugin contains a flaw in the parsing of DWG files due to insufficient validation of user-supplied data. This can lead to a memory corruption...

PT-2025-28433 · Qualcomm · Snapdragon +214

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption occurs while retrieving the CBOR data from TA. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-28757 · Unknown · Code-Projects Jonnys Liquor

Name of the Vulnerable Software and Affected Versions: code-projects Jonnys Liquor version 1.0 Description: A critical issue exists in an unknown functionality of the file /browse.php. Manipulation of the Search argument results in SQL injection. The attack can be launched remotely. The exploit h...

PT-2025-28530 · Microsoft · Windows Bitlocker +1

Name of the Vulnerable Software and Affected Versions: Windows BitLocker affected versions not specified Description: A time-of-check time-of-use toctou race condition exists, allowing an unauthorized attacker to bypass a security feature with a physical attack. This issue enables attackers to...

PT-2025-28572 · Microsoft · Windows Nt Rras +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a heap-based buffer overflow in the Windows Routing and Remote Access Service RRAS, which allows an unauthorized attacker to...

PT-2025-28628 · Microsoft · Graphics +1

Name of the Vulnerable Software and Affected Versions: Microsoft Graphics Component affected versions not specified Description: A heap-based buffer overflow issue in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is...

PT-2025-28344 · Phoenix Contact · Charx Sec-3000 +7

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root. Recommendations: At the moment, there is no information abou...

PT-2025-28540 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue allows an authorized attacker to disclose sensitive information locally due to exposure in the Windows Kernel. Recommendations: At the moment, there is no information about...

PT-2025-28309 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28525 · Microsoft · Office

Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue concerns the deserialization of untrusted data in Microsoft Office, which allows an unauthorized attacker to elevate privileges locally. This means an attacker can gain...

PT-2025-28567 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: A heap-based buffer overflow issue in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to execute code over a network...