PT-2025-22644 · Suse · Spacewalk-Java

Name of the Vulnerable Software and Affected Versions: spacewalk-java versions prior to 4.3.85-150400.3.105.3 spacewalk-java versions prior to 5.0.24-150600.3.25.1 Description: A Improper Neutralization of Script-Related HTML Tags in a Web Page Basic XSS vulnerability in spacewalk-java allows...

PT-2025-16677

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A null pointer dereference exists in the alloc preauth hash function within the ksmbd module. This occurs when a client sends a malformed SMB2 negotiate request, causing ksmbd to return ...

PT-2025-16782 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /edit-product.php. The manipulation of the ID argument leads to SQL...

PT-2025-16595 · Unknown · Phpgurukul Men Salon Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Men Salon Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Men Salon Management System. This issue affects the file /admin/edit-customer-detailed.php, where the manipulation of th...

PT-2025-16573 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been found in the HELP Command Handler component of PCMan FTP Server, leading to a buffer overflow. This issue can be exploited remotely. The manipulation of the HELP Command...

PT-2025-16625 · Unknown · Mirweiye Seven Bears Library Cms

Name of the Vulnerable Software and Affected Versions: mirweiye Seven Bears Library CMS version 2023 Description: A vulnerability was found in the Add Link Handler component, which can lead to server-side request forgery. The manipulation can be launched remotely. Recommendations: For mirweiye...

PT-2025-16791

Name of the Vulnerable Software and Affected Versions Cisco Webex App versions 44.6 through 44.7 Cisco Webex App affected versions not specified Description A vulnerability in the custom URL parser of Cisco Webex App could allow an unauthenticated, remote attacker to persuade a user to download...

Oracle MySQL Server 8.4 <= 8.4.4, 9.0 <= 9.2.0 Security Update (cpuapr2025) - Windows

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2025-16672 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.12.13 Description: A kernel panic is caused by a null pointer dereference in the mt792x rx get wcid function. The issue arises because the deflink structure is not properly initialized with the sta context. Th...

PT-2025-16576 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue was found in the MODE Command Handler component, which can be exploited remotely. The manipulation of this component leads to a buffer overflow. Recommendations: For PCMan FTP Serve...

PT-2025-16868 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16919 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google ChromeOS version 129.0.6668.36 Description: The issue allows network observers to expose plaintext DNS queries due to a failure to properly tunnel DNS traffic during VPN state transitions. This occurs in the Native System VPN in Google...

PT-2025-16891 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: The issue concerns a file upload vulnerability via the "Create Services" file. This vulnerability can be exploited through the "/dashboard/Services" API endpoint. The Create Services...

PT-2025-16872 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16781 · Sourcecodester · Sourcecodester Web-Based Pharmacy Product Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-based Pharmacy Product Management System version 1.0 Description: A critical issue was found in the system, affecting the file /search/search stock.php. The manipulation of the Name argument leads to SQL injection. This iss...

PT-2025-16610 · Eventin · Eventin

Name of the Vulnerable Software and Affected Versions: Eventin versions n/a through 4.0.25 Description: The issue is related to improper control of filename for include/require statement in PHP program, also known as PHP Remote File Inclusion, which allows PHP Local File Inclusion. Recommendation...

PT-2025-16823 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

PT-2025-16843 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

Low: tomcat

Issue Overview: Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97. Users are...

PT-2025-16586 · Unknown · Xianqi Kindergarten Management System

Name of the Vulnerable Software and Affected Versions: Xianqi Kindergarten Management System version 2.0 Bulid 20190808 Description: A critical issue affects the unknown processing of the file stu list.php of the component Child Management. The manipulation of the argument sex leads to SQL...