PT-2025-25284

Name of the Vulnerable Software and Affected Versions ONLYOFFICE Docs DocumentServer version 8.3.1 and earlier Description The issue is a reflected cross-site scripting XSS problem that occurs when opening files via the WOPI protocol. Attackers could inject malicious scripts via crafted HTTP POST...

PT-2025-7122 · Unknown · Feminer Wms

Name of the Vulnerable Software and Affected Versions: FeMiner wms version 1.0 Description: The issue allows a remote attacker to obtain sensitive information through the parameters date1, date2, and id. This is due to a SQL injection vulnerability. Recommendations: For FeMiner wms version 1.0,...

Changing the narrative on pig butchering scams

Welcome to this week's edition of the Threat Source Newsletter. Love is in the air this week. Wait, is that love? Or is it some tech bro with a housing development company that would totally love to meet in person but can't this week emailing you about an investment opportunity in his...

PT-2025-10626 · Mozilla +5 · Thunderbird +5

Name of the Vulnerable Software and Affected Versions: Thunderbird versions prior to 136 Thunderbird versions prior to 128.8 Description: The issue arises from certain crafted MIME email messages that claim to contain an encrypted OpenPGP message but actually contain an OpenPGP signed message,...

PT-2025-6798 · WordPress · Simple Video Management System

Name of the Vulnerable Software and Affected Versions: Simple Video Management System WordPress plugin versions 1.0.0 through 1.0.4 Description: The issue allows high privilege users, such as admin, to perform Stored Cross-Site Scripting attacks. This is possible because the plugin does not...

PT-2025-6504 · Lexmark · Lexmark International Xc

Name of the Vulnerable Software and Affected Versions: Lexmark International CX, XC, CS, et. Al. versions 001.001:0 through 081.231 Lexmark International CX, XC, CS, et. Al. versions ..P001 through ..P233 Lexmark International CX, XC, CS, et. Al. versions ..P001 through ..P759 Lexmark Internation...

PT-2025-6833

Name of the Vulnerable Software and Affected Versions Q-Free MaxTime version 2.11.0 and earlier Description A CWE-346 "Origin Validation Error" in the CORS configuration allows an unauthenticated remote attacker to affect the device confidentiality, integrity, or availability via crafted URLs or...

PT-2025-6477

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 17.3 PostgreSQL versions prior to 16.7 PostgreSQL versions prior to 15.11 PostgreSQL versions prior to 14.16 PostgreSQL versions prior to 13.19 Description The issue is related to improper neutralization of quoting...

PT-2025-6928 · Glpi +1 · Glpi +1

Name of the Vulnerable Software and Affected Versions: GLPI versions 0.71 through 10.0.17 Description: The issue allows an anonymous user to fetch sensitive information from the "status.php" endpoint. There is no information about the estimated number of potentially affected devices worldwide or...

PT-2025-7051

Name of the Vulnerable Software and Affected Versions Rack versions prior to 2.2.11, 3.0.12, and 3.1.11 Description Rack provides an interface for developing web applications in Ruby. The issue occurs when a server intentionally or unintentionally allows a user creation with the username containi...

DoS (Denial of Service) com.google.protobuf:protobuf-java Dependency in Jira Software Data Center and Server

This High severity com.google.protobuf:protobuf-java Dependency vulnerability was introduced in versions 9.4.0, 9.6.0, 9.7.0, 9.8.0, 9.9.0, 9.10.0, 9.11.0, 9.12.0, 9.13.0, 9.14.0, 9.15.0, 9.16.1, 9.17.0, 10.0.0, and 10.1.1 of Jira Software Data Center and Server. This...

PT-2025-6254 · Fortinet · Fortisiem

Name of the Vulnerable Software and Affected Versions: FortiSIEM versions 6.7 through 7.1 Description: The issue is related to multiple improper neutralization of input during web page generation, also known as cross-site scripting. This may allow an authenticated attacker to perform a cross-site...

PT-2025-6245

Name of the Vulnerable Software and Affected Versions OpenSSL versions 3.2 through 3.4 Description Clients using RFC7250 Raw Public Keys RPKs to authenticate a server may fail to detect that the server was not authenticated. This occurs because TLS and DTLS handshakes do not abort as expected whe...

AMD GPU Security Vulnerabilities

AMD ID: AMD-SB-6016 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential security vulnerabilities in the Satellite Management Controller SMC in AMD Instinct™ MI300X accelerators were discovered during internal audit/penetration...

PT-2025-6260 · Fortinet · Forticlient

Name of the Vulnerable Software and Affected Versions: FortiClient versions 7.4.0 through 7.0.13 and earlier Description: The issue is related to improper access control, which may allow a local user to escalate their privileges via the FortiSSLVPNd service pipe. This could potentially be exploit...

PT-2025-6257 · Fortinet · Fortios

Name of the Vulnerable Software and Affected Versions: FortiOS versions 7.2.4 through 7.2.8 FortiOS versions 7.4.0 through 7.4.4 Description: A stack-based buffer overflow vulnerability in the implementation of the Control and Provisioning of Wireless Access Points CAPWAP protocol in FortiOS is...

Intel® Advisor Software Advisory

Summary: A potential security vulnerability in some Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39284 Description: Uncontrolled search path for some Intel® Advisor...

Siemens Questa and ModelSim

SUMMARY Questa and ModelSim incl. OEM Editions are affected by a vulnerability that could allow a local attacker to inject arbitrary code and escalate privileges. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL...

Siemens RUGGEDCOM APE1808

SUMMARY Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens is preparing fix versions and recommends to consult and implement the workarounds provided in Fortinet's upstream security notifications. 2. GENERAL...

Siemens SCALANCE W700 IEEE 802.11ax

SUMMARY SCALANCE W-700 IEEE 802.11ax family devices are affected by multiple vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to...