PT-2025-25903 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fixed version Description: A NULL pointer dereference issue has been identified in the Linux kernel, specifically in the ftrace functionality. This issue arises when ftrace startup enable fails, causing the...

PT-2025-18861 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the powerpc/iommu component. The problem occurs when using the debugfs lookup function, which requires a...

PT-2025-3930

Name of the Vulnerable Software and Affected Versions Sparkle versions prior to 2.6.4 Description A security issue was found in Sparkle, where an attacker can replace an existing signed update with another payload, bypassing Sparkle’s EdDSA signing checks. This allows the attacker to potentially...

PT-2024-18402 · WordPress · The Event Monster

Name of the Vulnerable Software and Affected Versions: The Event Monster – Event Management, Tickets Booking, Upcoming Event plugin for WordPress versions up to, and including, 1.3.4 Description: The issue concerns a PHP Object Injection vulnerability via deserialization of untrusted input from a...

PT-2025-18898 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.156 Description: A memory allocation issue in the Linux kernel's bnxt en driver has been resolved. The driver needs to track concurrent TPA completions on the aggregation ring, and on P5 chips, the maximum...

CVE-2024-28961

Dell OpenManage Enterprise vulnerable in versions 4.0.0 and 4.0.1 to a sensitive information disclosure that could let a local, low-privileged attacker obtain credentials and gain elevated access. The publicly documented description does not specify the exact root cause or exploit details in thes...

PT-2024-25362 · Rednao · Rednao Smart Forms

Name of the Vulnerable Software and Affected Versions: RedNao Smart Forms versions 2.6.91 and earlier Description: The issue is related to a Missing Authorization vulnerability in RedNao Smart Forms. Recommendations: For RedNao Smart Forms versions 2.6.91 and earlier, at the moment, there is no...

PT-2024-14079 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: Jfinalcms version 5.0.0 Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component. This enables the attacker to perform unauthorized actions on the...

PT-2024-30433 · Apryse · Apryse Webviewer

Name of the Vulnerable Software and Affected Versions: Apryse WebViewer versions up to 10.8.0 Description: A vulnerability was found in the PDF Document Handler component of Apryse WebViewer, which can lead to cross site scripting. The manipulation can be initiated remotely. The vendor recommends...

PT-2024-24158

Name of the Vulnerable Software and Affected Versions FlowiseAI Inc Flowise versions 1.6.2 and before FlowiseAI Inc Flowise versions prior to 1.8.1 Description An issue in FlowiseAI Inc Flowise allows a remote attacker to execute arbitrary code via a crafted script sent to the /api/v1 component...

PT-2024-22382 · Limbas · Limbas

Name of the Vulnerable Software and Affected Versions: Limbas versions up to 5.2.14 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the ftid parameter. Recommendations: For versions up to 5.2.14, consider restricting access to the ftid...

PT-2024-24195 · Yealink · Yealink Vp59 Microsoft Teams Phone

Name of the Vulnerable Software and Affected Versions: Yealink VP59 Microsoft Teams Phone versions 91.15.0.118 through 122.15.0.141 Description: An issue allows a physically proximate attacker to disable the phone lock via the Walkie Talkie menu option. Recommendations: For Yealink VP59 Microsoft...

PT-2024-14713 · Unknown · Onos-Kpimon

Name of the Vulnerable Software and Affected Versions: onos-kpimon version 0.4.7 Description: The issue allows out-of-bounds array access in the processIndicationFormat1 function. Recommendations: For version 0.4.7, consider disabling the processIndicationFormat1 function until a patch is availab...

PT-2024-3293

Name of the Vulnerable Software and Affected Versions: WinRAR versions prior to 7.00 Description: The issue is related to errors in processing input data in the ANSI Escape Sequence Handler component of the WinRAR file archiver. Exploitation of this issue may allow a remote attacker to cause a...

PT-2024-24304 · Unknown · Mailcleaner

Name of the Vulnerable Software and Affected Versions: MailCleaner versions up to 2023.03.14 Description: A vulnerability was found in the Log File Endpoint component, which can be exploited to lead to cross-site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

PT-2024-25430

Name of the Vulnerable Software and Affected Versions Veritas NetBackup versions prior to 10.4 Description An issue was discovered in Veritas NetBackup that allows the Multi-Threaded Agent to be used for arbitrary file deletion on protected files. Recommendations For versions prior to 10.4, updat...

PT-2024-23513 · WordPress · Enl Newsletter

Name of the Vulnerable Software and Affected Versions: ENL Newsletter WordPress plugin versions 1.0.0 through 1.0.1 Description: The issue allows admin+ users to perform SQL injection attacks due to the lack of sanitization and escaping of a parameter before its use in a SQL statement...

CVE-2024-28241

The GLPI Agent is a generic management agent. Prior to version 1.7.2, a local user can modify GLPI-Agent code or used DLLs to modify agent logic and even gain higher privileges. Users should upgrade to GLPI-Agent 1.7.2 to receive a patch. As a workaround, use the default installation folder which...

CVE-2024-25624 iris-web vulnerable to Server Side Template Injection in reports

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Due to an improper setup of Jinja2 environment, reports generation in iris-web is prone to a Server Side Template Injection SSTI. Successful exploitation of the vulnerability c...

PT-2024-22695 · WordPress · Agca Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: AGCA WordPress plugin versions prior to 7.2.2 Description: The issue allows high privilege users, such as admins, to perform Stored Cross-Site Scripting attacks. This is possible because some settings are not properly sanitised and escaped, a...