PT-2025-14795

Name of the Vulnerable Software and Affected Versions Gladinet CentreStack versions prior to 16.4.10315.56368 Gladinet Triofox versions prior to 16.4.10317.56372 Description Gladinet CentreStack and Triofox are affected by a deserialization vulnerability due to the use of a hardcoded machineKey i...

PT-2025-14639 · Os4Ed · Os4Ed Opensis

Name of the Vulnerable Software and Affected Versions: OS4ED openSIS versions 7.0 through 9.1 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the groupid parameter at the "/messaging/Group.php" endpoint. Recommendations: For OS4ED openSI...

PT-2025-14786

Name of the Vulnerable Software and Affected Versions Vite versions 6.0.0 through 6.0.13 Vite versions 6.1.0 through 6.1.3 Vite versions 6.2.0 through 6.2.4 Vite version 4.5.11 and earlier Vite version 5.4.16 and earlier Description The issue allows the contents of arbitrary files to be returned ...

PT-2025-14714 · Unknown · Notfound Search Engine Keywords Highlighter

Name of the Vulnerable Software and Affected Versions: NotFound Search engine keywords highlighter versions 0.1.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS in the NotFoun...

PT-2025-14635 · Unknown · Projectworlds Online Doctor Appointment Booking System

Name of the Vulnerable Software and Affected Versions: projectworlds Online Doctor Appointment Booking System version 1.0 Description: A critical issue affects the processing of the file /patient/profile.php?patientId=1, where the manipulation of the patientFirstName argument leads to SQL...

PT-2025-14503

Name of the Vulnerable Software and Affected Versions STMicroelectronics X-CUBE-AZRTOS-WL version 2.0.0 Description An integer underflow issue exists in the HTTP server's PUT request functionality, which can lead to denial of service. This is due to the NetX Duo Component HTTP Server...

PT-2025-14458 · Assetview +1 · Assetview +1

Name of the Vulnerable Software and Affected Versions: AssetView versions affected versions not specified AssetView CLOUD versions affected versions not specified Description: A missing authentication for critical function vulnerability exists in the software. If exploited, a remote unauthenticat...

PT-2025-14478

Name of the Vulnerable Software and Affected Versions Tempo Operator affected versions not specified Description A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This flaw allow...

PT-2025-14535 · Trend Micro · Trend Vision One Status

Name of the Vulnerable Software and Affected Versions: Trend Vision One Status component affected versions not specified Description: A broken access control issue was previously discovered in the Trend Vision One Status component. This could have allowed an administrator to create users who coul...

PT-2025-14501

Name of the Vulnerable Software and Affected Versions STMicroelectronics X-CUBE-AZRTOS-WL version 2.0.0 STMicroelectronics X-CUBE-AZRTOS-F7 NetX Duo Component HTTP Server version 1.1.0 Description A denial of service issue exists in the NetX Component HTTP server functionality. This can be...

PT-2025-14500

Name of the Vulnerable Software and Affected Versions STMicroelectronics X-CUBE-AZRTOS-WL version 2.0.0 STMicroelectronics X-CUBE-AZRTOS-F7 NetX Duo Web Component HTTP server version 1.1.0 Description A denial of service issue exists in the NetX Component HTTP server functionality. This can be...

PT-2025-14559 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitors Management System version 1.0 Description: A critical issue affects the processing of the file /add-apartment.php, where the manipulation of the apartmentno argument leads to SQL injection. The attack can be...

PT-2025-14515 · Jenkins +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins monitor-remote-job Plugin version 1.0 Description: The issue allows passwords to be stored unencrypted in job config.xml files on the Jenkins controller. These passwords can be viewed by users with Extended Read permission or those wh...

PT-2025-14521 · Ibm · Ibm Txseries For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM TXSeries for Multiplatforms versions 9.1 through 11.1 Description: The issue allows an attacker to enumerate usernames due to an observable login attempt response discrepancy. Recommendations: For versions 9.1 and 11.1, consider restricti...

Rancher: Restricted Administrator can change Administrator's passwords

Impact A vulnerability has been identified within Rancher where a Restricted Administrator can change the password of Administrators and take over their accounts. A Restricted Administrator should be not allowed to change the password of more privileged users unless it contains the Manage Users...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to kafka-clients-3.7.1.jar CVE-2024-31141

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to kafka-clients-3.7.1.jar CVE-2024-31141. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties,...

PT-2025-14250 · Sheetdb · Sheetdb

Name of the Vulnerable Software and Affected Versions: SheetDB versions 1.3.3 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions 1.3.3 a...

PT-2025-14117 · Bruno · Bruno

Name of the Vulnerable Software and Affected Versions: Bruno versions prior to 1.39.1 Description: A bug in the assertion runtime of Bruno, an open source IDE for exploring and testing APIs, caused assert expressions to run in Developer Mode even when Safe Mode was selected. This resulted in the...

PT-2025-14171 · Clearbit · Clearbit Reveal

Name of the Vulnerable Software and Affected Versions: Clearbit Reveal versions n/a through 1.0.6 Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user. Recommendations: For versions n/a through 1.0.6, update t...

PT-2025-14037 · Unknown · Notfound Flickr Set Slideshows

Name of the Vulnerable Software and Affected Versions: NotFound Flickr set slideshows versions 0.9 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...