CVE-2025-2177

CVE-2025-2177 affects libzvbi up to 0.2.43, with the vulnerable code path in src/search.c (function vbi_search_new). The issue arises from manipulating pat_len, causing an integer overflow and enabling a remote attack. The exploit has been disclosed publicly. A fix is available in version 0.2.44,...

CVE-2025-2175

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function vbistrndupiconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

CVE-2025-2174

A vulnerability was found in libzvbi up to 0.2.43. It has been declared as problematic. Affected by this vulnerability is the function vbistrndupiconvucs2 of the file src/conv.c. The manipulation of the argument srclength leads to integer overflow. The attack can be launched remotely. The exploit...

CVE-2025-2175 libzvbi _vbi_strndup_iconv integer overflow

A vulnerability was found in libzvbi up to 0.2.43. It has been rated as problematic. Affected by this issue is the function vbistrndupiconv. The manipulation leads to integer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to...

March 11, 2025—KB5053887 (Monthly Rollup)

None None...

March 11, 2025—KB5053886 (Monthly Rollup)

None None...

March 11, 2025—KB5053606 (OS Builds 19044.5608 and 19045.5608) - EXPIRED

None None...

PT-2025-10897 · Nvidia · Nvidia Riva

Name of the Vulnerable Software and Affected Versions: NVIDIA Riva versions up to and including 2.18.0 Description: The issue is related to improper access control, which could lead to escalation of privileges, data tampering, denial of service, or information disclosure. A successful exploit of...

PT-2025-10750 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A critical issue has been discovered that affects the delete function of the /admin/file/delete.do endpoint, specifically within the org.marker.mushroom.controller.FileController component. The manipulation of...

PT-2025-10757 · Mrcms · Mrcms

Name of the Vulnerable Software and Affected Versions: MRCMS version 3.1.2 Description: A vulnerability was found in the function upload of the file "/admin/file/upload.do" of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path leads to cross-site...

PT-2025-10859

Name of the Vulnerable Software and Affected Versions WebKitGTK versions 2.48.0-0ubuntu0.24.10.1 and prior. Description The WebKitGTK web rendering engine contains an out-of-bounds write vulnerability CVE-2025-24201. This vulnerability is due to the ability to toggle the WebGL context primitive...

PT-2025-10824 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel affected versions not specified Microsoft Office Online Server version 1.0.0 Description: The issue is related to a use after free vulnerability in Microsoft Office Excel, allowing an unauthorized attacker to execute co...

PT-2025-10800 · Microsoft · Windows Remote Desktop Services +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Services affected versions not specified Windows Server 2019 version 10.0.17763.0 Description: The issue is related to sensitive data storage in improperly locked memory in Windows Remote Desktop Services, allowing an...

PT-2025-10879 · Adobe · Indesign Desktop

Name of the Vulnerable Software and Affected Versions: InDesign Desktop versions ID20.1, ID19.5.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-10863 · Adobe · Substance3D - Sampler

Name of the Vulnerable Software and Affected Versions: Substance3D - Sampler versions 4.5.2 and earlier Description: The issue is an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

PT-2025-10746 · Unknown · Sipass Integrated Acc-Ap +1

Name of the Vulnerable Software and Affected Versions: SiPass integrated AC5102 ACC-G2 versions prior to V6.4.9 SiPass integrated ACC-AP versions prior to V6.4.9 Description: A vulnerability has been identified where affected devices improperly sanitize input for the "pubkey" endpoint of the REST...

PT-2025-10923 · Unknown · Shanebp Bp Email Assign Templates

Name of the Vulnerable Software and Affected Versions: shanebp BP Email Assign Templates versions n/a through 1.6 Description: The issue is related to improper neutralization of input during web page generation, which allows for Stored Cross-site Scripting XSS. This means that an attacker can...

PT-2025-10700 · Libzvbi +5 · Libzvbi +5

Name of the Vulnerable Software and Affected Versions: libzvbi versions 0.2.43 and earlier Description: A problem has been found in the function vbi strndup iconv ucs2 of the file src/conv.c. The manipulation of the argument src length leads to an uninitialized pointer. It is possible to launch t...

PT-2025-10791 · Adobe · Substance3D - Designer

Name of the Vulnerable Software and Affected Versions: Substance3D - Designer versions 14.1 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction,...

PT-2025-11215 · Froxlor · Froxlor

Name of the Vulnerable Software and Affected Versions: Froxlor versions prior to 2.2.6 Description: Froxlor is open-source server administration software. A vulnerability allows users, such as resellers or customers, to create accounts with the same email address as an existing account, creating...