PT-2025-15344

Name of the Vulnerable Software and Affected Versions: secfr trustlet versions prior to SMR Apr-2025 Release 1 Description: The issue allows local privileged attackers to cause memory corruption due to an out-of-bounds write in the secfr trustlet. Recommendations: For versions prior to SMR Apr-20...

PT-2025-15617 · Adobe · Animate

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.7 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could lead to arbitrary code execution in the context of the current user. To exploit this, a victim must open a malicious file,...

PT-2025-15345

Name of the Vulnerable Software and Affected Versions: libsavsac.so versions prior to SMR Apr-2025 Release 1 Description: The issue is related to an out-of-bounds read in parsing audio data, which allows local attackers to read out-of-bounds memory. This can be exploited by local attackers...

PT-2025-15630 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2022.6 and earlier Adobe Framemaker version 2020.8 Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to...

PT-2025-15474 · Zoom · Zoom Workplace Apps

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: A null pointer dereference issue may allow an authenticated user to conduct a denial of service via network access. Recommendations: At the moment, there is no...

PT-2025-15646 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier Description: The issue is related to an Improper Authorization vulnerability that could result in Privilege escalation. An attacker could leverage this...

PT-2025-15317 · WordPress · Streamit

Name of the Vulnerable Software and Affected Versions: Streamit theme for WordPress versions up to, and including, 4.0.1 Description: The issue is related to arbitrary file uploads due to missing file type validation in the st Authentication Controller::edit profile function. This allows...

PT-2025-15914 · Sonicwall · Sonicwall Netextender Windows

Name of the Vulnerable Software and Affected Versions: SonicWall NetExtender versions 10.3.1 and earlier Description: An Improper Link Resolution Before File Access 'Link Following' vulnerability in SonicWall NetExtender Windows 32 and 64 bit client allows an attacker to manipulate file paths. Th...

PT-2025-15352 · Unknown +1 · Nothings Stb +1

Name of the Vulnerable Software and Affected Versions: Nothings stb up to f056911 Description: A critical vulnerability has been found in Nothings stb, affecting the stb include string function. The manipulation of the path to includes argument leads to a stack-based buffer overflow. This issue c...

PT-2025-15447 · Unknown · Bep/Imagemeta

Name of the Vulnerable Software and Affected Versions: bep/imagemeta versions prior to 0.11.0 Description: The issue concerns a Go library for reading image metadata from various file formats, including JPEG, TIFF, PNG, and WebP. A buffer created for parsing metadata in PNG and WebP images had no...

PT-2025-15366 · Sap · Sap Kmc Wpc

Name of the Vulnerable Software and Affected Versions: SAP KMC WPC affected versions not specified Description: The issue allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query, potentially exposing sensitive information and causing low impact on the...

PT-2025-15416 · WordPress · Motors – Car Dealership & Classified Listings Plugin

Name of the Vulnerable Software and Affected Versions: Motors – Car Dealership & Classified Listings Plugin versions up to, and including, 1.4.66 Description: The issue allows authenticated attackers with Subscriber-level access and above to execute several initial set-up actions due to a missing...

PT-2025-15382 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied material text parameter and lack of sufficient preparation on the existing SQL query, makin...

PT-2025-15635 · Dnn · Dnn

Name of the Vulnerable Software and Affected Versions: DNN formerly DotNetNuke versions prior to 9.13.2 Description: The issue allows uploading files with malicious content by renaming them to have an allowed file extension, such as renaming an executable file to have a .jpg extension. This could...

PT-2025-15406 · Siemens · Siemens License Server

Name of the Vulnerable Software and Affected Versions: Siemens License Server SLS versions prior to V4.3 Description: A vulnerability has been identified where the affected application searches for executable files in the application folder without proper validation. This could allow an attacker ...

KB5056457: Servicing stack update for Windows Server 2008 SP2: April 8, 2025

None None...

PT-2025-15623 · Adobe · Framemaker

Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2020.8, 2022.6 and earlier Description: The issue is a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction...

PT-2025-15547 · Microsoft · Azure Local

Name of the Vulnerable Software and Affected Versions: Azure Local affected versions not specified Description: The issue is related to improper input validation in Azure Local, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no...

PT-2025-15337 · Unknown · Clipboardservice

Name of the Vulnerable Software and Affected Versions: ClipboardService versions prior to 1 Description: The issue is related to the improper handling of insufficient permission or privileges in ClipboardService. This allows local attackers to access files with system privilege. User interaction ...

PT-2025-15336 · Unknown · Sticker Center

Name of the Vulnerable Software and Affected Versions: Sticker Center versions prior to SMR Apr-2025 Release 1 Description: The issue is related to improper access control in the Sticker Center, allowing local attackers to access image files with system privileges. Recommendations: For versions...