PT-2025-11451 · Dcmtk +2 · Dcmtk +2

Name of the Vulnerable Software and Affected Versions: DCMTK version 3.6.9 Description: A critical vulnerability was found in the dcmjpls JPEG-LS Decoder component of DCMTK, affecting unknown code and leading to memory corruption. The attack can be initiated remotely. The manipulation with the...

PT-2025-11559 · Unknown · Code-Projects Real Estate Property Management System

Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the txtName, txtEmail, txtMobile, and txtFeedback arguments in an unkno...

PT-2025-11400 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1800T versions 9.1.0cu.2112 B20220316 and earlier Description: A critical issue affects the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to a stack-based buffer...

PT-2025-10999 · WordPress · The Finale Lite – Sales Countdown Timer & Discount

Name of the Vulnerable Software and Affected Versions: The Finale Lite – Sales Countdown Timer & Discount for WooCommerce plugin for WordPress versions up to, and including, 2.19.0 Description: The issue is related to Stored DOM-Based Cross-Site Scripting via the countdown timer due to insufficie...

CVE-2025-27615

CVE-2025-27615 affects umatiGateway. The Red Hat entry describes that the user interface may be publicly accessible when using the provided docker-compose file, allowing configuration to be viewed and altered. The root cause appears to be UI exposure beyond localhost, with a patch in commit 5d81a...

PT-2025-11649 · Kemp · Kemp Loadmaster

Name of the Vulnerable Software and Affected Versions: Progress LoadMaster versions 7.2.40.0 and above ECS versions all versions Multi-Tenancy versions 7.1.35.4 and above Description: The issue is related to an improper input validation vulnerability in Progress LoadMaster, which allows a buffer...

PT-2025-17240 · Mybb · Mybb

Name of the Vulnerable Software and Affected Versions: MyBB version 1.8.38 Description: An issue in MyBB allows a remote attacker to obtain sensitive information via the Change Avatar function. The supplier disputes this due to the allowed actions of Board administrators and SSRF mitigation...

Linux Distros Unpatched Vulnerability : CVE-2022-4399

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in TicklishHoneyBee nodau. It has been rated as critical. Affected by this issue is some unknown functionality of the file src/db.c. T...

CVE-2025-1893

Open5GS AMF module vulnerability (CVE-2025-1893) affects gmm_state_authentication in src/amf/gmm-sm.c, with denial-of-service implications. A remote attacker can crash the AMF, causing mobility/session outages and network-wide loss of connectivity; impact includes blocking new registrations until...

PT-2025-9736 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.35 Description: The issue is related to improper limitation of a pathname to a restricted directory in DevTools. An attacker could bypass file access restrictions by convincing a user to install a...

PT-2025-9575 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions up to 2.7.2 Description: A denial of service issue has been found in the gmm state authentication function of the file src/amf/gmm-sm.c in the component AMF. This issue can be exploited remotely, leading to a network-wide...

PT-2025-14761

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A critical issue was found in the ASE File Handler component, specifically affecting the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices in the file...

CVE-2025-1816

A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audioelementobu of the file libavformat/iamfparse.c of the component IAMF File Handler. The manipulation of the argument numparameters leads to memory leak...

CVE-2025-1816

FFmpeg-2025-1816 affects IAMF File Handler: audio_element_obu in libavformat/iamf_parse.c suffers a memory leak when num_parameters is manipulated. This enables remote initiation of an attack; the vulnerability has public disclosure. A patch is identified: 0526535cd58444dd264e810b2f3348b4d96cff3b...

PT-2025-11214

Name of the Vulnerable Software and Affected Versions: Vim versions prior to 9.1.1198 Description: The issue concerns potential data loss when using Vim with the zip.vim plugin and specially crafted zip files. The impact is considered medium as it requires a user to view the malicious archive wit...

CVE-2024-9285

A vulnerability was found in Tu Yafeng Via Browser up to 5.9.0 on Android. It has been rated as problematic. This issue affects some unknown processing of the component Javascript Bridge. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

PT-2025-9192 · Zj1983 Zz · Zj1983 Zz

Name of the Vulnerable Software and Affected Versions: zj1983 zz up to 2024-8 Description: A critical vulnerability has been found in the function getOaWid of the file src/main/java/com/futvan/z/system/zworkflow/ZworkflowAction.java. The manipulation of the argument tableId leads to SQL injection...

PT-2025-9190 · Unknown · Zfileaction

Name of the Vulnerable Software and Affected Versions: zj1983 zz up to 2024-8 Description: A critical vulnerability has been found in zj1983 zz, affecting some unknown processing of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.upload. The manipulation of the file argument leads to...

PT-2025-9062 · Apache · Apache Inlong

Name of the Vulnerable Software and Affected Versions: Apache InLong versions 1.13.0 through 2.1.0 Description: The issue concerns a deserialization of untrusted data, allowing for an arbitrary file read vulnerability. This can be exploited by bypassing security measures through double writing of...

Siemens SIMATIC Devices Linux Kernel Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-3649)

A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfsnewinode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch t...