PT-2025-10821

Name of the Vulnerable Software and Affected Versions Microsoft Office versions prior to 2.3 Microsoft 365 Apps for Enterprise affected versions not specified Microsoft Word affected versions not specified Microsoft Office Long Term Servicing Channel affected versions not specified Description Th...

PT-2025-10771

Name of the Vulnerable Software and Affected Versions FortiOS versions 7.0.0 through 7.4.4 FortiProxy versions 7.0.19 through 7.4.6 FortiPAM versions 1.3.1 through 1.4.2 FortiSRA versions 1.3.1 through 1.4.2 FortiWeb versions 7.0.10 through 7.4.5 Description A use of externally-controlled format...

PT-2025-10768 · Fortinet · Fortindr

Name of the Vulnerable Software and Affected Versions: Fortinet FortiNDR versions 7.1.0 through 7.1.1 Fortinet FortiNDR versions 7.2.0 through 7.2.1 Fortinet FortiNDR version 7.4.0 Fortinet FortiNDR versions prior to 7.0.5 Description: A cross-site request forgery vulnerability in Fortinet FortiN...

PT-2025-10815

Name of the Vulnerable Software and Affected Versions: ASP.NET Core versions prior to 9.0.3 ASP.NET Core versions prior to 8.0.14 ASP.NET Core versions prior to 6.0.37 Description: A vulnerability exists in ASP.NET Core applications calling RefreshSignInAsync with an improperly authenticated user...

PT-2025-10808 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server version 10.0.17763.0 Description: The issue is related to a heap-based buffer overflow in the Windows Telephony Server, which allows an unauthorized attacker to execute code over a network. This can enable remote...

PT-2025-10846 · Microsoft · Office Access

Name of the Vulnerable Software and Affected Versions: Microsoft Office Access versions prior to the fixed version Description: The issue is related to a use-after-free vulnerability in Microsoft Office Access, which allows an unauthorized attacker to execute code locally. This vulnerability can ...

PT-2025-10806

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to March 11, 2025 Description External control of file names or paths in the Windows NTLM NT LAN Manager protocol allows an unauthorized attacker to perform spoofing over a network. This issue, specifically...

PT-2025-16456

Name of the Vulnerable Software and Affected Versions MySQL Client versions 8.0.0 through 8.0.41 MySQL Client versions 8.4.0 through 8.4.4 MySQL Client versions 9.0.0 through 9.2.0 Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise the...

PT-2025-16763

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the f2fs filesystem. The issue arises when the f2fs write inode function fails to check the CP ERROR FLAG flag,...

PT-2025-16890 · Tp Link · Tp-Link M7450

Name of the Vulnerable Software and Affected Versions: TP-Link M7450 4G LTE Mobile Wi-Fi Router Firmware version 1.0.2 Build 170306 Rel.1015n Description: A SQL Injection vulnerability exists, allowing an unauthenticated attacker to inject malicious SQL statements via the username and password...

Siemens SCALANCE M-800 and SC-600 Families

SUMMARY SCALANCE M-800 and SC-600 families are affected by improper input validation in the OpenVPN authentication. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific...

Siemens SCALANCE LPE9403

SUMMARY SCALANCE LPE9403 is affected by multiple vulnerabilities that could allow an attacker to impact its confidentiality, integrity and availability. Siemens has released a new version for SCALANCE LPE9403 and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general...

Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP

SUMMARY SiPass integrated ACC Advanced Central Controller devices contain multiple vulnerabilities that could allow attackers to execute commands on the devices with root privileges and access sensitive data. Siemens has released new versions for the affected products and recommends to update to...

PT-2025-10571 · Laravel +1 · Laravel +1

Name of the Vulnerable Software and Affected Versions: Laravel framework versions 11.9.0 through 11.35.1 Description: The Laravel framework is susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page. This issue allows an attacke...

PT-2025-10598 · Unknown · Information Kerala Mission Sanchaya

Name of the Vulnerable Software and Affected Versions: Information Kerala Mission SANCHAYA version 3.0.4 Description: The issue in the Property Tax Payment Portal of Information Kerala Mission SANCHAYA allows attackers to arbitrarily modify payment amounts via a crafted request. Recommendations:...

PT-2025-10642

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.13 Rack versions prior to 3.0.14 Rack versions prior to 3.1.12 Description The issue arises from the Rack::Static component not properly sanitizing user-supplied paths before serving files, allowing encoded path...

PT-2025-15967 · Gerbera · Gerbera

Name of the Vulnerable Software and Affected Versions: gerbera versions prior to 2.5.0-1.1 Description: A vulnerability in the gerbera package on openSUSE Tumbleweed allows the service user gerbera to escalate to root. Recommendations: For versions prior to 2.5.0-1.1, update to version 2.5.0-1.1 ...

PT-2025-10607

Name of the Vulnerable Software and Affected Versions Nomad Community and Nomad Enterprise versions prior to 1.9.7 Nomad Enterprise versions prior to 1.8.11 Nomad Enterprise versions prior to 1.7.19 Description The issue concerns unintentional exposure of the workload identity token and client...

PT-2025-14348

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free vulnerability in the ksmbd component of the Linux kernel. Specifically, the interim entry of ksmbd work could be deleted after an oplock is freed...

CVE-2025-27636 Apache Camel: Camel Message Header Injection via Improper Filtering

Bypass/Injection vulnerability in Apache Camel components under particular conditions. This issue affects Apache Camel: from 4.10.0 through = 4.10.1, from 4.8.0 through = 4.8.4, from 3.10.0 through = 3.22.3. Users are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for 4.8.x LTS an...