PT-2025-15461 · Aruba · Aos-8 Instant +1

Name of the Vulnerable Software and Affected Versions: AOS-8 Instant versions prior to the fixed version AOS-10 AP versions prior to the fixed version Description: A vulnerability in the file creation process on the command line interface could allow an authenticated remote attacker to perform...

Siemens Industrial Edge Device Kit

SUMMARY Industrial Edge Device Kit contains a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Industrial Edge Device Builders integrate Industrial Edge Device Kit into their offerings...

Siemens License Server (SLS)

SUMMARY Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server SLS and recommends to update to the latest version...

PT-2025-15432

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2024 SU1 Ivanti Endpoint Manager versions prior to 2022 SU7 Description: The issue allows an authenticated attacker to escalate to System. It is related to DLL hijacking, where a SYSTEM task loads DLL...

PT-2025-15664 · Lucee · Lucee

Name of the Vulnerable Software and Affected Versions: Lucee versions prior to 5.4.7.3 LTS Lucee versions prior to 6.1.1.118 Description: The issue is related to a protection mechanism failure. When an attacker can place files on the server, this failure can allow the attacker to run code that...

PT-2025-15644 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2023.12, 2021.18, 2025.0 and earlier Description: The issue is related to improper input validation, which could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires us...

PT-2025-15426 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 7.2.0 through 7.2.1 Description: The issue allows an attacker to disclose information by modifying the LDAP server IP to point to a malicious server, due to passwords being stored in a recoverable format...

PT-2025-15342

Name of the Vulnerable Software and Affected Versions: InputManager version SMR Apr-2025 Release 1 Description: The issue is related to improper access control in InputManager, allowing local attackers to access the scancode of a specific input device. Recommendations: For InputManager version SM...

PT-2025-15621 · Adobe · Experience Manager Screens

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager Screens versions FP11.3 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a low-privileged attacker to inject malicious scripts into vulnerable form field...

PT-2025-15440 · Ivanti · Ivanti Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2024 SU1 Ivanti Endpoint Manager versions prior to 2022 SU7 Description: The issue allows a remote unauthenticated attacker to obtain admin privileges through Reflected XSS. User interaction is requir...

PT-2025-15894 · Shopware · Shopware

Name of the Vulnerable Software and Affected Versions: Shopware versions prior to 6.6.10.3 Shopware versions prior to 6.5.8.17 Description: The Shopware application API contains a search functionality that enables users to search through information stored within their Shopware instance. The...

PT-2025-15383 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied printer text parameter and lack of sufficient preparation on the existing SQL query, making...

Siemens Mendix Runtime

SUMMARY Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has released new versions for several...

PT-2025-15305 · Unknown · Linzhaoguan Pb-Cms

Name of the Vulnerable Software and Affected Versions: LinZhaoguan pb-cms version 2.0 Description: A vulnerability was found in the file /adminlinks of the component Friendship Link Handler, leading to cross-site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

PT-2025-15245 · Ruoyi · Ruoyi

Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the changeStatus method. Recommendations: For RUoYi version 4.8.0, consider disabling the changeStatus method until a patch is available...

PT-2025-15134 · Unknown · Openharmony

Name of the Vulnerable Software and Affected Versions: OpenHarmony versions prior to 5.0.2 Description: The issue allows a local attacker to cause a denial of service DOS through an out-of-bounds write. Recommendations: For versions prior to 5.0.2, update to a version that contains a fix for this...

PT-2025-15231

Name of the Vulnerable Software and Affected Versions WildFly affected versions not specified JBoss Enterprise Application Platform EAP affected versions not specified Description A security flaw exists within the Enterprise JavaBeans EJB remote invocation mechanism, stemming from untrusted data...

PT-2025-15208 · Qualcomm · Snapdragon

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A transient Denial of Service DOS may occur while parsing extended Information Elements IE in a beacon. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-15240 · Unknown · Tarteaucitron.Js

Name of the Vulnerable Software and Affected Versions: tarteaucitron.js versions prior to 1.20.1 Description: A vulnerability was identified in tarteaucitron.js, allowing a user with high privileges to enter a URL containing an insecure scheme, such as javascript:alert. Insufficient URL validatio...

PT-2025-29001

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL pointer dereference issue was identified in the mt7996 thermal init function within the mt7996 driver of the Linux kernel. The devm kasprintf function can return a NULL pointer ...