Information Leakage in Data Linkage

The process of linking databases that contain sensitive information about individuals across organisations is an increasingly common requirement in the health and social science research domains, as well as with governments and businesses. To protect personal data, protocols have been developed t...

PT-2025-21124 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in arbitrary file system read. An attacker could leverage this vulnerability to access or...

PT-2025-23250 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.178 Description: The issue is related to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data in the conversation POST data body. Recommendations: For versions...

PT-2025-20880

Name of the Vulnerable Software and Affected Versions: Centreon web versions 22.10.0 through 22.10.28 Centreon web versions 23.04.0 through 23.04.26 Centreon web versions 23.10.0 through 23.10.21 Centreon web versions 24.04.0 through 24.04.10 Centreon web versions 24.10.0 through 24.10.4...

PT-2025-20898 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The issue concerns an XML Entity Injection vulnerability. No specific details about affected devices, real-world incidents, or technical exploitation details such as API endpoint...

PT-2025-20886

Name of the Vulnerable Software and Affected Versions: Centreon web versions 24.10.3 through 24.10.4 Centreon web versions 24.04.09 through 24.04.10 Centreon web versions 23.10.19 through 23.10.21 Centreon web versions 23.04.24 through 23.04.26 Description: The issue is related to improper...

PT-2025-20876

Name of the Vulnerable Software and Affected Versions: SCALANCE LPE9403 versions with SINEMA Remote Connect Edge Client installed Description: A vulnerability has been identified that allows a non-privileged local attacker to bypass the authentication of the SINEMA Remote Connect Edge Client, and...

PT-2025-20885 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.4.0b7 beta Checkmk versions prior to 2.3.0p32 Checkmk versions prior to 2.2.0p42 Checkmk version 2.1.0p49 Description: The issue allows a user with write access to the JAVA HOME/bin directory to escalate privileges...

PT-2025-20922 · Edimax · Edimax Cv7428Ns

Name of the Vulnerable Software and Affected Versions: EDIMAX CV7428NS version 1.20 Description: A remote code execution issue was discovered, allowing exploitation via the command parameter in the mp function. Recommendations: For EDIMAX CV7428NS version 1.20, consider restricting access to the ...

PT-2025-21088

Name of the Vulnerable Software and Affected Versions: IntelR Advisor affected versions not specified Description: The issue concerns an uncontrolled search path in some IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-21127

Name of the Vulnerable Software and Affected Versions: .NET versions prior to the fixed version Visual Studio affected versions not specified Build Tools for Visual Studio affected versions not specified Description: The issue allows an authorized attacker to perform spoofing over a network due t...

PT-2025-23067

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientWindows versions 7.2.0 through 7.2.1 Description The issue allows an unauthorized remote attacker to view application information by navigating to a hosted webpage, if Windows is configured to accept incoming connections to...

PT-2025-20991 · Microsoft · Office Excel

Name of the Vulnerable Software and Affected Versions: Microsoft Office Excel versions 2016 through 2024 Microsoft Office Excel version 365 Description: The issue is an out-of-bounds read in Microsoft Office Excel, allowing an unauthorized attacker to execute code locally. This can enable remote...

PT-2025-23264 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.181 Description: The issue arises from incorrect validation of last name and first name during profile data updates, allowing the injection of arbitrary JavaScript code. This code is executed in a message when...

PT-2025-21028 · Hashicorp · Nomad Enterprise

Name of the Vulnerable Software and Affected Versions: Nomad Enterprise versions prior to 1.10.1 Nomad Enterprise versions prior to 1.9.9 Nomad Enterprise versions prior to 1.8.13 Description: Nomad Enterprise jobs using the policy override option are bypassing the mandatory sentinel policies...

PT-2025-21119

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged...

PT-2025-20820 · Sap Se · Sap S/4Hana Hcm Portugal/Sap Erp Hcm Portugal

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to a missing authorization check, allowing an unauthorized user to view the files of other companies. This could lead to the disclosure of personal data of employees...

Siemens SIMATIC PCS

SUMMARY Affected products do not correctly invalidate user sessions upon user logout. This could allow a remote unauthenticated attacker, who has obtained the session token by other means, to re-use a legitimate user's session even after logout. Siemens has released new versions for the affected...

Siemens MS/TP Point Pickup Module

SUMMARY MS/TP Point Pickup Module devices are affected by a denial of service vulnerability that could be triggered by an attacker residing in the same BACnet network by sending a specially crafted MSTP message. A power cycle is required to restore the device's normal operation. Siemens...

Siemens SIPROTEC and SICAM

SUMMARY This advisory documents the impact of CVE-2024-3596 also dubbed "Blastradius", a vulnerability in the RADIUS protocol, to SIPROTEC, SICAM and related products. The vulnerability could allow on-path attackers, located between a Network Access Server the RADIUS client, e.g., a SICAM device...