PT-2025-15644 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier Description: The issue is related to improper input validation, which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

CVE-2025-26647: Improper Input Validation

Improper input validation in Windows Kerberos allows an authorized attacker to elevate privileges over a network...

CVE-2025-24058: Improper Input Validation

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-30293: Improper Input Validation

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized write access...

CVE-2025-27489: Improper Input Validation

Improper input validation in Azure Local allows an authorized attacker to elevate privileges locally...

PT-2025-15487 · Microsoft · Windows Dwm Core Library +1

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library affected versions not specified Description: The issue is related to improper input validation, which allows an authorized attacker to elevate privileges locally. This could potentially lead to unauthorized access and...

CVE-2025-29821: Improper Input Validation

Improper input validation in Dynamics Business Central allows an authorized attacker to disclose information locally...

CVE-2025-27737: Improper Input Validation

Improper input validation in Windows Security Zone Mapping allows an unauthorized attacker to bypass a security feature locally...

CVE-2025-24062: Improper Input Validation

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

CVE-2025-30294: Improper Input Validation

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A high-privileged attacker could leverage this vulnerability to bypass security protections and gain unauthorized read access...

CVE-2025-29811: Improper Input Validation

Improper input validation in Windows Mobile Broadband allows an authorized attacker to elevate privileges locally...

CVE-2025-24446: Improper Input Validation

ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution. Exploitation of this issue does not require user interaction, but admin panel privileges are required, and scope is changed...

PT-2025-15555

Name of the Vulnerable Software and Affected Versions: OpenSSH for Windows affected versions not specified Description: The issue is related to improper input validation in OpenSSH for Windows, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, ther...

CVE-2025-29816: Acceptance of Extraneous Untrusted Data With Trusted Data

Improper input validation in Microsoft Office Word allows an unauthorized attacker to bypass a security feature over a network...

Rockwell Automation Arena 安全漏洞

Rockwell Automation Arena is a discrete-event simulation and automation software from Rockwell Automation USA. A local code execution vulnerability exists in Rockwell Automation Arena due to improper validation of user-supplied data. An attacker could exploit the vulnerability to disclose...

CVE-2025-24074: Improper Input Validation

Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...

PT-2025-15662 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0 and earlier ColdFusion versions 2023.12 ColdFusion versions 2021.18 Description: The issue is related to an Improper Input Validation that could result in a security feature bypass. An attacker could leverage this t...

PT-2025-15685 · Schneider Electric · Connexium Network Manager

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability exists due to improper input validation, potentially causing a loss of confidentiality, integrity, and availability when a malicious project file is loaded by a user from the...

CVE-2025-20657

In vdec, there is a possible permission bypass due to improper input validation. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09486425; Issue ID: MSV-2609...

CVE-2025-20659

In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of service, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patc...