PT-2025-24666 · Solarwinds · Solarwinds Observability Self-Hosted

Name of the Vulnerable Software and Affected Versions: SolarWinds Observability Self-Hosted affected versions not specified Description: The issue concerns an open redirection vulnerability where the URL is not properly sanitized. This could allow an attacker to manipulate the string and redirect...

PT-2025-24866

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue involves access of a resource using an incompatible type, also known as 'type confusion', in Microsoft Office. This allows an unauthorized attacker to execute code locally...

PT-2025-24637 · Cisco · Cisco Webex Meeting Server

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meeting Server affected versions not specified Description: The issue concerns an unvalidated redirect in Cisco Webex Meeting Server. No information is provided about the estimated number of potentially affected devices worldwide ...

PT-2025-24845 · Microsoft · Windows Storage Management Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Management Provider affected versions not specified Description: The issue is an out-of-bounds read that allows an authorized attacker to disclose information locally. It is related to a sneaky information leak in Windows...

PT-2025-24876

Name of the Vulnerable Software and Affected Versions Microsoft Office affected versions not specified Description The issue is related to a use after free flaw in Microsoft Office, allowing an unauthorized attacker to execute code locally. This can enable remote attackers to execute arbitrary co...

PT-2025-24849 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: A heap-based buffer overflow issue in Windows Routing and Remote Access Service RRAS allows an authorized attacker to execute code over a network...

PT-2025-24826 · Microsoft · Windows Win32K +1

Name of the Vulnerable Software and Affected Versions: Windows Win32K affected versions not specified Description: The issue is related to a use after free condition in the Windows Win32K - GRFX component, which allows an authorized attacker to elevate privileges locally. Recommendations: At the...

PT-2025-24855 · Microsoft · Windows Netlogon +1

Name of the Vulnerable Software and Affected Versions: Windows Netlogon affected versions not specified Description: The issue is related to the use of an uninitialized resource in Windows Netlogon, allowing an unauthorized attacker to elevate privileges over a network. Recommendations: At the...

PT-2025-24844 · Microsoft · Windows Storage Management Provider +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Management Provider affected versions not specified Description: The issue is an out-of-bounds read that allows an authorized attacker to disclose information locally. There is no information available about the estimated numb...

PT-2025-24639 · Unknown · Dm Corporative Cms

Name of the Vulnerable Software and Affected Versions: DM Corporative CMS affected versions not specified Description: A SQL injection issue has been found, allowing an attacker to retrieve, create, update, and delete databases. This is achieved through the name parameter in the "/antcatalogue.as...

PT-2025-24626 · Schneider Electric · Modicon Controllers M241/M251

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An Uncontrolled Resource Consumption issue exists, potentially causing Denial of Service. This occurs when an authenticated malicious user sends a manipulated HTTPS Content-Length header to...

PT-2025-24871 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as 'sql injection', which allows an authorized attacker to execute...

PT-2025-24644 · Unknown · Dm Corporative Cms

Name of the Vulnerable Software and Affected Versions: DM Corporative CMS affected versions not specified Description: An Insecure Direct Object Reference IDOR vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to access the private area by setting the optio...

PT-2025-24595 · Sap · Sap Mdm Server

Name of the Vulnerable Software and Affected Versions: SAP MDM Server affected versions not specified Description: The issue allows an attacker to send specially crafted packets to the SAP MDM Server, triggering a memory read access violation in the server process. This causes the server to fail...

PT-2025-24834 · Microsoft · Windows Recovery Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Recovery Driver affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', which allows an authorized attacker to elevate privileges locally. There...

PT-2025-24598 · Sap · Sap Business One Integration Framework

Name of the Vulnerable Software and Affected Versions: SAP Business One Integration Framework affected versions not specified Description: The issue concerns inadequate security settings checks in the SAP Business One Integration Framework, allowing attackers to bypass access restrictions and...

PT-2025-24835 · Microsoft · Windows Storage Port Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Storage Port Driver affected versions not specified Description: The issue is related to improper access control, allowing an authorized attacker to disclose information locally. This could potentially expose sensitive information...

PT-2025-24623 · Schneider Electric · Evlink Wallbox

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A Path Traversal vulnerability exists, which could cause arbitrary file reads from the charging station. The exploitation of this vulnerability requires an authenticated session of the web...

PT-2025-24882 · Microsoft · Windows Shell +1

Name of the Vulnerable Software and Affected Versions: Windows Hello affected versions not specified Description: The issue allows an authorized attacker to disclose sensitive information locally through exposure of sensitive information to an unauthorized actor in Windows Hello. Recommendations:...

PT-2025-24854 · Microsoft · App Control For Business +1

Name of the Vulnerable Software and Affected Versions: App Control for Business WDAC affected versions not specified Description: The issue is related to the improper verification of cryptographic signatures, allowing an unauthorized attacker to bypass a security feature locally. This could...