PT-2025-15346

Name of the Vulnerable Software and Affected Versions: Galaxy Watch versions prior to SMR Apr-2025 Release 1 Description: The issue is related to inadequate access control, allowing local attackers to access sensitive information on the Galaxy Watch. This could potentially expose confidential dat...

PT-2025-15454 · Matrix · Element Web

Name of the Vulnerable Software and Affected Versions: Element Web versions 1.11.16 through 1.11.96 Description: The issue concerns Element Web, a Matrix web client, where versions from 1.11.16 to 1.11.96 can be configured to load Element Call from an external URL. Under certain conditions, this...

PT-2025-15418 · Dell · Dell Common Event Enabler

Name of the Vulnerable Software and Affected Versions: Dell Common Event Enabler version 9.0.0.0 Description: The issue is related to an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA of the Dell Common Event Enabler. This cou...

PT-2025-15626 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8 and earlier Adobe Framemaker version 2022.6 Description: The issue is a Stack-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. To exploit this problem, th...

PT-2025-15433 · Ivanti · Ivanti Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2024 SU1 Ivanti Endpoint Manager versions prior to 2022 SU7 Description: The issue concerns improper certificate validation, allowing a remote unauthenticated attacker to intercept limited traffic...

PT-2025-15583 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Visual Studio affected versions not specified Description: The issue is related to improper access control in Visual Studio, allowing an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no informatio...

PT-2025-15445 · Unknown +1 · Crud-Query-Parser +1

Name of the Vulnerable Software and Affected Versions: crud-query-parser versions prior to 0.1.0 Description: The crud-query-parser library is affected by an issue where improper neutralization of the order/sort parameter in the TypeORM adapter allows SQL injection. This issue impacts users who a...

PT-2025-15501 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue concerns sensitive data storage in improperly locked memory, allowing an authorized attacker to elevate privileges locally. This elevation-of-privilege vulnerability can be...

CVE-2025-30195 A crafted zone can lead to an illegal memory access in the PowerDNS Recursor

An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service. The remedy is: upgrade to the patched 5.2.1 version. We would like to thank Volodym...

CVE-2025-30473 Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider. When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command...

PT-2025-15290 · Libvips +1 · Libvips +1

Name of the Vulnerable Software and Affected Versions: libvips versions prior to 8.16.1 Description: The issue arises from the heifsave operation in libvips, which can incorrectly determine the presence of an alpha channel in a "multiband" input. This can occur with a well-crafted TIFF image,...

PT-2025-16585 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue affects the SIZE Command Handler component, leading to a buffer overflow. This can be exploited remotely. Recommendations: For PCMan FTP Server version 2.0.7, consider disabling the...

PT-2025-15246 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the jobLogId parameter. Recommendations: For RUoYi version 4.8.0, consider restricting access to the jobLogId parameter to minimize the ris...

PT-2025-20419 · Totolink · Totolink A3100R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3100R version 5.9c.1527 Description: The issue is related to a Buffer Overflow that can be triggered via the priority parameter in the setMacQos interface of /lib/cste modules/firewall.so. This can be accessed through the API endpoi...

PT-2025-15131 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.2 Description: The issue allows a local attacker to cause a denial of service DOS through an out-of-bounds read. Recommendations: For versions prior to 5.0.2, update to a version newer than 5.0.2 to resolve t...

PT-2025-15176 · Mediatek · Mt7915 +6

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: In the wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote information disclosure with no additional execution privileges neede...

PT-2025-23562 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 137.0.7151.68 Description: A use after free issue in Blink allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The estimated number of potentially affected devices is not...

PT-2025-16897 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical issue has been discovered, affecting the STATUS Command Handler component. This issue leads to a buffer overflow and can be initiated remotely. The exploit details have been publicly...

PT-2025-15137 · Unknown · Codeprojects Online Restaurant Management System

Name of the Vulnerable Software and Affected Versions: codeprojects Online Restaurant Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/menu update.php. The manipulation of the menu argument leads to SQL...

PT-2025-15221 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical issue was found in the PHPGurukul Old Age Home Management System, affecting an unknown function of the file /admin/view-enquiry.php. The manipulation of the viewid...