PT-2025-20901

Name of the Vulnerable Software and Affected Versions: FortiClientMac versions 7.0 through 7.4.2 FortiClientMac versions 7.0 through 7.2.8 FortiVoiceUCDesktop version 3.0 Description: An improper isolation or compartmentalization issue may allow an authenticated attacker to inject code via Electr...

PT-2025-22128

Name of the Vulnerable Software and Affected Versions DNSdist versions prior to 1.9.10 Description In some circumstances, when DNSdist is configured to allow an unlimited number of queries on a single, incoming TCP connection from a client, an attacker can cause a denial of service by crafting a...

PT-2025-23148 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.178 Description: The issue is related to insufficient validation of user-supplied data, which is used as arguments to string formatting functions. This allows an attacker to pass a string containing special...

KB5058530: Servicing stack update for Windows Server 2012: May 13, 2025

None None...

PT-2025-23255 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: FreeScout is a free self-hosted help desk and shared mailbox. The application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input...

PT-2025-23179 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The system does not provide a check on which clients an authorized user can view and edit. As a result, an authorized user without access to existing mailboxes or conversations can view and edi...

PT-2025-23172 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.178 Description: The issue is related to insufficient validation of user input in the php path parameter, allowing code injection. This occurs because backticks characters and tabulation are not removed from us...

Important: nvidia-fabric-manager

Issue Overview: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...

PT-2025-21076 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi Software for Windows versions prior to 23.100 Description: The issue is related to improper input validation, which may allow a privileged user to potentially enable denial of service via local access...

PT-2025-21016 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.8, 23.0.11 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

PT-2025-20812

Name of the Vulnerable Software and Affected Versions SAP NetWeaver affected versions not specified Description The Metadata Uploader function of the Visual Composer tool in SAP NetWeaver contains a flaw in its deserialization mechanism. Deserialization is the process of converting a data stream...

PT-2025-21123 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or...

PT-2025-21025 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Bridge versions 15.0.3, 14.1.6 and earlier Description: The issue is an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-21110 · Intel · Intel Simics Package Manager

Name of the Vulnerable Software and Affected Versions: IntelR SimicsR Package Manager versions prior to 1.12.0 Description: Insecure inherited permissions for some IntelR SimicsR Package Manager software may allow an authenticated user to potentially enable denial of service via local access...

PT-2025-20872 · Siemens · Scalance Lpe9403

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 6GK5998-3GS00-2AC2 All versions Description: A vulnerability has been identified where affected devices do not properly validate incoming Profinet packets. An unauthenticated remote attacker can exploit this flaw by sending a...

PT-2025-21097 · Intel · Intel Pro Network Adapter Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Network Adapter Driver versions prior to 29.4 Description: The issue concerns an uncontrolled search path element in some IntelR Network Adapter Driver installers for Windows 11, which may allow an authenticated user to potentially...

PT-2025-21096 · Intel · Intel Network Adapters

Name of the Vulnerable Software and Affected Versions: IntelR Network Adapters package versions prior to 29.4 Description: A race condition in some Administrative Tools for IntelR Network Adapters may allow an authenticated user to potentially enable escalation of privilege via local access...

Medium: javapackages-bootstrap

Issue Overview: Uncontrolled Resource Consumption vulnerability in Apache Commons IO. The org.apache.commons.io.input.XmlStreamReader class may excessively consume CPU resources when processing maliciously crafted input. This issue affects Apache Commons IO: from 2.0 before 2.14.0. Users are...

PT-2025-20992 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue concerns the deserialization of untrusted data in Microsoft Office SharePoint, allowing an unauthorized attacker to execute code locally. This enables remote...

PT-2025-21018 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Adobe Illustrator versions 29.3, 28.7.5 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction,...