PT-2025-29086 · Open Information Security Foundation +1 · Suricata +1

Name of the Vulnerable Software and Affected Versions: Suricata versions 7.0.10 and below Suricata versions 8.0.0-beta1 through 8.0.0-rc1 Description: Suricata, a network IDS, IPS, and NSM engine, is affected by an issue where mishandling of data on HTTP2 stream 0 can lead to uncontrolled memory...

PT-2025-29128 · Headlamp · Headlamp

Name of the Vulnerable Software and Affected Versions: Headlamp versions prior to 0.31.1 Description: Headlamp is an extensible Kubernetes web UI. A command injection issue exists in the codeSign.js script used during the macOS packaging workflow. This is due to the improper use of the execSync...

PT-2025-29137 · Unknown · Mako Server

Name of the Vulnerable Software and Affected Versions: Mako Server versions 2.5 and 2.6 Description: An OS command injection vulnerability exists within the tutorial interface. An unauthenticated attacker can send a crafted PUT request containing arbitrary Lua os.execute code to the...

PT-2025-29105 · Unknown · Parse Server

Name of the Vulnerable Software and Affected Versions: Parse Server versions 5.3.0 through 7.5.3 Parse Server version 8.2.2 Description: Parse Server’s GraphQL API allowed public access to the GraphQL schema without requiring a session token or the master key in versions 5.3.0 through 7.5.3 and...

PT-2025-29156 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue exists in code-projects Library System 1.0 related to unrestricted file upload. The vulnerability is located in the /user/student/profile.php file, where manipulation of t...

PT-2025-28974 · Unknown · Command Centre Server

Name of the Vulnerable Software and Affected Versions: Command Centre Server versions prior to 9.30.1874 MR1 Command Centre Server versions prior to 9.20.2337 MR3 Command Centre Server versions prior to 9.10.3194 MR6 Command Centre Server versions prior to 9.00.3371 MR7 Command Centre Server...

PT-2025-29126 · Eset · Eset Security Product

Name of the Vulnerable Software and Affected Versions: ESET security products versions affected versions not specified Description: The installation file of ESET security products on Windows allows an attacker to delete an arbitrary file without the necessary permissions. An attacker with the...

PT-2025-29149 · Unknown · Mpgram-Web

Name of the Vulnerable Software and Affected Versions: mpgram-web commit 94baadb Description: A cross-site scripting XSS issue exists in the /master/login.php component. This allows attackers to execute arbitrary Javascript in the context of a user's browser using a crafted payload...

PT-2025-29108 · Zoom Video Communications · Zoom Clients For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows affected versions not specified Description: A buffer overflow issue exists in certain Zoom Clients for Windows. This issue may allow an authorized user to cause a denial of service through network access...

PT-2025-29085

Name of the Vulnerable Software and Affected Versions: LibHTP versions 0.5.50 and below Description: LibHTP is a security-aware parser for the HTTP protocol. Versions 0.5.50 and below contain a traffic-induced memory leak that can lead to process memory starvation and loss of visibility...

BASM (Broken Authentication & Session Management) org.springframework.security:spring-security-crypto Dependency in Jira Service Management Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 5.12.0, 10.3.0, 10.4.0, 10.5.0, 10.6.0 and 10.7.0 of Jira Service Management Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.4 and a CVSS Vector of...

BASM (Broken Authentication and Session Management) org.apache.tomcat:tomcat-catalina Dependency in Jira Service Management Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in versions 9.12.0, 10.3.0 and 10.7.1 of Jira Service Management Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N...

PT-2025-29071 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 13.3 through 17.11.5 GitLab EE versions 18.0 through 18.0.3 GitLab EE versions 18.1 through 18.1.1 Description: An issue exists in GitLab EE that allows authenticated project owners to bypass group-level forking restriction...

PT-2025-28860 · Radiflow · Isap Smart Collector

Name of the Vulnerable Software and Affected Versions: Radiflow iSAP Smart Collector version 1.20 Description: The issue allows a deprivileged Linux user to read the entire file system content, including files belonging to other users and having restricted access, such as the root password hash...

PT-2025-28956 · Evesys · Evesys

Name of the Vulnerable Software and Affected Versions: evesys versions 7.1 2152 through 8.0 2202 Description: The software contains a reflected cross-site scripting XSS issue. The issue is located in the indexeva.php file through the action parameter. Recommendations: evesys versions prior to 7.1...

PT-2025-28865 · Radiflow · Isap Smart Collector

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The device has two web servers that expose unauthenticated REST APIs on the management network, specifically on TCP ports 8084 and 8086. An attacker can exploit OS command injection through...

PT-2025-28926 · Jenkins · Jenkins Sensedia Api Platform Tools Plugin

Name of the Vulnerable Software and Affected Versions: Jenkins Sensedia Api Platform Tools Plugin version 1.0 Description: The Jenkins Sensedia Api Platform Tools Plugin does not mask the Sensedia API Manager integration token on the global configuration form, potentially allowing attackers to...

PT-2025-29097 · Ibm · Ibm Analytics Content Hub

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub versions 2.0 through 2.3 Description: The software may reveal detailed technical error messages, potentially exposing information about the application framework to a remote attacker. This information could be used f...

PT-2025-29259 · Juniper Networks · J-Web +2

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS on SRX Series versions prior to 21.4R3-S9 Juniper Networks Junos OS on SRX Series versions 22.2 through 22.2R3-S5 Juniper Networks Junos OS on SRX Series versions 22.4 through 22.4R3-S5 Juniper Networks Junos OS on S...

PT-2025-29233 · Mpc10 +6 · Mpc10 +7

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 23.2 through 23.2R2-S4 Juniper Networks Junos OS versions 23.4 through 23.4R2-S5 Juniper Networks Junos OS versions 24.2 through 24.2R2-S1 Juniper Networks Junos OS versions 24.4 through 24.4R1-S3 Juniper...