PT-2025-29487 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.22.10 Description: NanoMQ version 0.22.10 contains a memory leak that allows attackers to cause a Denial of Service DoS by sending a crafted PUBLISH message. Recommendations: At the moment, there is no information about a new...

PT-2025-29432 · Phpgurukul · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue exists in PHPGurukul Online Fire Reporting System 1.2. The vulnerability is due to SQL injection in an unknown part of the /admin/assigned-requests.php file...

PT-2025-29469 · Wavlink · Wavlink Wn535G3

Name of the Vulnerable Software and Affected Versions: Wavlink WN535K3 version 20191010 Description: A command injection issue exists in the set sys adm function due to a flaw in handling the newpass parameter. This allows attackers to execute arbitrary commands through a crafted request...

PT-2025-29499 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection vulnerability through the ID parameter at the SEMCMS Products.php endpoint. Recommendations: As a mitigation, sanitize or validate the ID parameter at the SEMCMS...

PT-2025-29524 · Xwiki · Xwiki

Name of the Vulnerable Software and Affected Versions: XWiki versions 4.2-milestone-1 through 13.10.10 XWiki versions 14.4.0 through 14.4.6 XWiki versions 14.10.0 through 14.9.9 Description: XWiki Rendering is a system that converts textual input into different syntaxes. A flaw exists where the...

PT-2025-29445 · Avid +1 · Avid Nexis Pro+ +3

Name of the Vulnerable Software and Affected Versions: Avid NEXIS E-series versions prior to 2025.5.1 Avid NEXIS F-series versions prior to 2025.5.1 Avid NEXIS PRO+ versions prior to 2025.5.1 System Director Appliance SDA+ versions prior to 2025.5.1 Description: The Avid Nexis Agent uses a...

PT-2025-29461 · One Identity · One Identity Password Manager

Name of the Vulnerable Software and Affected Versions: One Identity Password Manager versions prior to 5.14.4 Description: The Secure Password extension in One Identity Password Manager contains a flaw in its security hardening mechanism within the kiosk browser used for the Password Self-Service...

PT-2025-29490 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: An arbitrary file upload vulnerability exists in the /controller/PicManager.php component. This allows attackers to execute arbitrary code by uploading a crafted template file. Recommendations: Update to a...

PT-2025-29519 · Wegia · Wegia

Name of the Vulnerable Software and Affected Versions: WeGIA versions prior to 3.4.4 Description: WeGIA is an open source web manager designed for the Portuguese language and charitable institutions. A Reflected Cross-Site Scripting XSS vulnerability exists in the /editar permissoes.php API...

PT-2025-29383 · Campcodes · Campcodes Sales/Inventory System

Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical vulnerability exists in Campcodes Sales and Inventory System that allows for unrestricted file upload. The vulnerability affects unknown code within the /pages/product...

PT-2025-29385 · Code Projects · Online Appointment Booking System

Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical vulnerability exists in code-projects Online Appointment Booking System 1.0. The issue involves a SQL injection vulnerability in an unknown function within th...

CVE-2025-3946

The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in incorrect handling of packets leading t...

PT-2025-29305 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The vulnerability is a denial-of-service issue. The reason for rejection is stated as 'Not used'. Recommendations: At the moment, there is no information about a newer version th...

PT-2025-29290 · Apache · Apache Sentry

Name of the Vulnerable Software and Affected Versions: Apache Sentry affected versions not specified Description: An authenticated user enrolled device may access a service protected by Sentry even if they are not authorized according to the sentry policy to access that service. This does not...

PT-2025-29333 · Phpgurukul · Phpgurukul Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Vehicle Parking Management System version 1.13 Description: A critical issue exists in PHPGurukul Vehicle Parking Management System version 1.13. The vulnerability is located in an unknown part of the /users/profile.php file...

PT-2025-29324 · Oracle · Primavera P6 Enterprise Project Portfolio Management

Name of the Vulnerable Software and Affected Versions: Oracle Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.21 Oracle Primavera P6 Enterprise Project Portfolio Management versions 21.12.0 through 21.12.21 Oracle Primavera P6 Enterprise Project Portfolio...

OESA-2025-1765 apache-commons-fileupload security update

The javax.servlet package lacks support for RFC-1867, HTML file upload. This package provides a simple to use API for working with such data. The scope of this package is to create a package of Java utility classes to read multipart/form-data within a javax.servlet.http.HttpServletRequest. Securi...

PT-2025-29274 · Ibm · Ibm Mq

Name of the Vulnerable Software and Affected Versions: IBM MQ versions 9.3 and 9.4 Description: An IBM MQ client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process, leading to its termination. Recommendations: IBM MQ version 9.3: At the moment, there is no...

PT-2025-29283 · Unknown · Open Ondemand

Name of the Vulnerable Software and Affected Versions: Open OnDemand versions prior to 3.1.14 Open OnDemand versions prior to 4.0.6 Description: Open OnDemand, an open-source HPC portal, is susceptible to a denial-of-service DoS condition. By interacting with the shell application and generating...

PT-2025-29213 · Qt Company +1 · Qt +1

Name of the Vulnerable Software and Affected Versions: Qt versions 6.6.0 through 6.8.3 Qt versions 6.9.0 through 6.9.1 Description: When passing values outside of the expected range to QColorTransferGenericFunction, it can cause a denial of service. This can occur when passing a specifically...