PT-2025-22368

Name of the Vulnerable Software and Affected Versions sr feuser register extension for TYPO3 versions through 12.4.8 Description The issue allows remote code execution via unsafe deserialization. There is no information provided about the estimated number of potentially affected devices worldwide...

PT-2025-22121 · Salesforce · Omnis Studio

Name of the Vulnerable Software and Affected Versions: Salesforce OmniStudio versions prior to 254 Description: The issue is related to an Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards, which allows exposure of Custom Settings data. Recommendations: For...

PT-2025-22301 · Wavlink · Wavlink Wl-Wn579A3

Name of the Vulnerable Software and Affected Versions: Wavlink WL-WN579A3 version 1.0 Description: A command injection vulnerability in the component /cgi-bin/firewall.cgi allows attackers to execute arbitrary commands via a crafted input. This issue affects the /cgi-bin/firewall.cgi endpoint,...

PT-2025-27963

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A vulnerability in the Linux kernel has been resolved. The issue is related to the drm/msm/a7xx component, where calling the CP RESET CONTEXT STATE packet is necessary when switching...

PT-2025-22125

Name of the Vulnerable Software and Affected Versions: Rapid7 AppSpider Pro versions prior to 7.5.018 Description: The issue is related to a stored cross-site scripting vulnerability in the ScanName field. Although the application prevents the inclusion of special characters within the ScanName...

PT-2025-22148 · Vmware · Vmware Workstation +2

Name of the Vulnerable Software and Affected Versions: VMware ESXi, Workstation, and Fusion affected versions not specified Description: The issue is a denial-of-service vulnerability due to certain guest options. A malicious actor with non-administrative privileges within a guest operating syste...

PT-2025-22237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the wifi component, specifically the ath12k driver. In the ath12k dp mon srng process function, an incorrect function, ath12k hal srng src get next entry, is used...

PT-2025-22371

Name of the Vulnerable Software and Affected Versions femanager extension versions prior to 8.2.2 Description The issue allows attackers to view frontend user data. This is achieved through an Insecure Direct Object Reference IDOR in the femanager TYPO3 extension, where attackers can exploit a us...

PT-2025-22285

Name of the Vulnerable Software and Affected Versions containerd version 2.1.0 Description A time-of-check to time-of-use TOCTOU vulnerability was found in containerd. This issue allows specially crafted container images to arbitrarily modify the host file system while unpacking an image during a...

PT-2025-22118 · Salesforce · Omnis Studio

Name of the Vulnerable Software and Affected Versions: Salesforce OmniStudio versions prior to Spring 2025 Description: The issue is related to an Improper Preservation of Permissions vulnerability in Salesforce OmniStudio FlexCards, which allows the bypass of field level security controls for...

PT-2025-23038

Name of the Vulnerable Software and Affected Versions GNU Coreutils affected versions not specified Description A flaw was found in the sort utility's begfield function, which is vulnerable to a heap buffer under-read. This issue may cause the program to access memory outside the allocated buffer...

PT-2025-22119 · Salesforce · Omnis Studio

Name of the Vulnerable Software and Affected Versions: Salesforce OmniStudio versions prior to Spring 2025 Description: The issue concerns the improper preservation of permissions in Salesforce OmniStudio FlexCards, allowing the bypass of field-level security controls for OmniUICard objects...

VMware Workstation 17.0.x < 17.6.3 Multiple Vulnerabilities (VMSA-2025-0010)

The version of VMware Workstation installed on the remote host is 17.0.x prior to 17.6.3. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...

Atlassian Jira 9.12.x < 9.12.22 (JRASERVER-78717)

The version of Atlassian Jira Server running on the remote host is affected by a vulnerability as referenced in the JRASERVER-78717 advisory. - An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. CVE-2021-33813 Note that Nessu...

K000151397: Apache Tomcat vulnerabilities CVE-2025-31650, CVE-2025-31651

Security Advisory Description CVE-2025-31650 Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger a...

ArcGIS Insecure OAuth 2.0 Implementation

The ArcGIS clientcredentials OAuth 2.0 API implementation does not adhere to the RFC/standards; This hidden known and by-design, but undocumented functionality enables a requester referred to as client in RFC 6749 to request an, undocumented, custom token expiration from ArcGIS referred to as...

PT-2025-22071

Name of the Vulnerable Software and Affected Versions: Mikado-Themes Foton versions n/a through 2.5.2 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as 'PHP Remote File Inclusion' vulnerability. This allows PHP Local File...

PT-2025-21948 · Unknown · Ultimate Blocks

Name of the Vulnerable Software and Affected Versions: Ultimate Blocks versions n/a through 3.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for DOM-Based XSS attacks. Recommendations: For...

PT-2025-21988 · Falang · Falang

Name of the Vulnerable Software and Affected Versions: Falang multilanguage versions 1.3.61 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions 1.3.61 and earlier,...

PT-2025-22029 · WordPress · Sanjeev Mohindra Author Box Plugin With Different Description

Name of the Vulnerable Software and Affected Versions: Sanjeev Mohindra Author Box Plugin With Different Description versions 1.3.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows Cross Site Request Forgery. Recommendations: For Sanjeev Mohindra...