CVE-2025-4003

CVE-2025-4003 affects RefindPlus 0.14.2.AB. The vulnerability is in InternalApfsTranslateBlock of RP_ApfsIo.c and causes a null pointer dereference, enabling an attack on the local host. A patch named 4d35125ca689a255647e9033dd60c257d26df7cb exists and should be applied to remediate. Some sources...

CVE-2025-4001 scipopt scip File Descriptor genRandomLOPInstance.c main file descriptor consumption

A vulnerability has been found in scipopt scip up to 9.2.1 and classified as problematic. Affected by this vulnerability is the function main of the file examples/LOP/src/genRandomLOPInstance.c of the component File Descriptor Handler. The manipulation of the argument File leads to uncontrolled...

PT-2025-18081 · Unknown · Itsourcecode Placement Management System

Name of the Vulnerable Software and Affected Versions: iSourcecode Placement Management System version 1.0 Description: A critical vulnerability has been found in the iSourcecode Placement Management System. The issue affects an unknown function of the file /add drive.php, where the manipulation ...

PT-2025-18040 · Unknown · Refindplus

Name of the Vulnerable Software and Affected Versions: RefindPlus versions 0.14.2.AB Description: A vulnerability was found in RefindPlus, classified as problematic. The issue affects the GetDebugLogFile function of the file Library/MemLogLib/BootLog.c, leading to a null pointer dereference. Loca...

PT-2025-18113 · Novel · Novel

Name of the Vulnerable Software and Affected Versions: 201206030 Novel version 3.5.0 Description: A critical issue affects the function updateBookChapter of the file src/main/java/io/github/xxyopen/novel/controller/author/AuthorController.java of the component Chapter Handler, leading to improper...

PT-2025-18120 · Snowflake · Snowflake-Connector-Net

Name of the Vulnerable Software and Affected Versions: snowflake-connector-net versions 2.1.2 through 4.4.0 Description: The issue concerns a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS, the connector reads logging configuration from ...

PT-2025-18086 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue has been found in the processing of the file /profile.php. The manipulation of the adminname argument leads to SQL injection. The attack may be initiat...

Fedora 41 : pgadmin4 (2025-49d6f62c0e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-49d6f62c0e advisory. Update to pgadmin-9.2. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

PT-2025-18070 · Unknown · Web-Arena-X

Name of the Vulnerable Software and Affected Versions: web-arena-x webarena version 0.2.0 Description: A critical vulnerability was found in the web-arena-x webarena software. This issue affects the HTMLContentEvaluator function of the file webarena/evaluation harness/evaluators.py. The...

PT-2025-18111 · Unknown · Phpgurukul Online Banquet Booking System

Name of the Vulnerable Software and Affected Versions: phpgurukul Online Banquet Booking System version 1.2 Description: The issue allows an attacker to execute arbitrary code via the "/obbs/change-password.php" file of the My Account - Change Password component. This could potentially lead to...

PT-2025-18106 · Gfi · Gfi Mailessentials

Name of the Vulnerable Software and Affected Versions: GFI MailEssentials versions prior to 21.8 Description: The issue is related to an XML External Entity XXE problem. An authenticated and remote attacker can send crafted HTTP requests to read arbitrary system files. Recommendations: For versio...

PT-2025-18041 · Unknown · Refindplus

Name of the Vulnerable Software and Affected Versions: RefindPlus versions 0.14.2.AB Description: A vulnerability was found in RefindPlus, affecting the InternalApfsTranslateBlock function of the file Library/RP ApfsLib/RP ApfsIo.c. The manipulation leads to null pointer dereference. It is possib...

PT-2025-18084 · Devexpress · Devexpress

Name of the Vulnerable Software and Affected Versions: DevExpress versions prior to 23.1.3 Description: The issue is related to the improper protection of XtraReport serialized data in ASP.NET web forms. This affects the security of the data, potentially allowing unauthorized access or...

PT-2025-18090 · Devexpress · Devexpress

Name of the Vulnerable Software and Affected Versions: DevExpress versions prior to 23.1.3 Description: The issue allows for Server-Side Request Forgery SSRF via AsyncDownloader. Recommendations: For versions prior to 23.1.3, update to version 23.1.3 or later to resolve the issue...

PT-2025-18107 · Gfi · Gfi Mailessentials

Name of the Vulnerable Software and Affected Versions: GFI MailEssentials versions prior to 21.8 Description: The issue is related to a .NET deserialization problem. A remote and authenticated attacker can execute arbitrary code by sending crafted serialized .NET data when joining a Multi-Server...

PT-2025-18085 · Devexpress · Devexpress

Name of the Vulnerable Software and Affected Versions: DevExpress versions prior to 23.1.3 Description: The issue concerns a data-source protection mechanism bypass during the deserialization of XML data. This means that the normal protections in place to safeguard data sources can be circumvente...

PT-2025-17968 · Unknown · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Patient Record Management System version 1.0 Description: A critical vulnerability was found in the codeprojects Patient Record Management System. This issue affects an unknown part of the file /edit rpatient.php.php. The...

PT-2025-17993 · Unknown · Itwanger Paicoding

Name of the Vulnerable Software and Affected Versions: itwanger paicoding version 1.0.3 Description: A critical vulnerability was found in itwanger paicoding, affecting an unknown part of the file "/article/api/post" of the component Article Handler. The manipulation of the articleId argument lea...

PT-2025-17970

Name of the Vulnerable Software and Affected Versions NASA CryptoLib versions prior to 1.3.2 Description The issue is related to NASA CryptoLib not checking whether the SA is in an operational state before use. This could possibly lead to a bypass of the Space Data Link Security protocol SDLS...

PT-2025-18011 · Nortikin · Sverchok

Name of the Vulnerable Software and Affected Versions: nortikin Sverchok version 1.3.0 Description: A problematic issue was found in the function SvSetPropNodeMK2 of the file sverchok/nodes/object nodes/getsetprop mk2.py of the component Set Property Mk2 Node. This issue leads to improperly...