PT-2025-28931 · Cloudbees +1 · Jenkins +1

Name of the Vulnerable Software and Affected Versions: Jenkins Applitools Eyes Plugin versions 1.16.5 and earlier Description: The Jenkins Applitools Eyes Plugin stores Applitools API keys unencrypted in job config.xml files on the Jenkins controller. Users with Item/Extended Read permission or...

PT-2025-29233 · Mpc10 +6 · Mpc10 +7

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 23.2 through 23.2R2-S4 Juniper Networks Junos OS versions 23.4 through 23.4R2-S5 Juniper Networks Junos OS versions 24.2 through 24.2R2-S1 Juniper Networks Junos OS versions 24.4 through 24.4R1-S3 Juniper...

PT-2025-28835 · Unknown · Lifestylestore

Name of the Vulnerable Software and Affected Versions: LifeStyle Store version 1.0 Description: A critical issue has been found in the code, affecting the /cart add.php file, where the manipulation of the ID argument leads to SQL injection. This can be initiated remotely. Recommendations: For...

PT-2025-28956 · Evesys · Evesys

Name of the Vulnerable Software and Affected Versions: evesys versions 7.1 2152 through 8.0 2202 Description: The software contains a reflected cross-site scripting XSS issue. The issue is located in the indexeva.php file through the action parameter. Recommendations: evesys versions prior to 7.1...

PT-2025-29257 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 21.2R3-S9 Juniper Networks Junos OS versions 21.4 before 21.4R3-S8 Juniper Networks Junos OS versions 22.2 before 22.2R3-S6 Juniper Networks Junos OS versions 22.3 before 22.3R3-S3 Juniper Networks...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in apr 1.7.0-12.el9_3

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of apr 1.7.0-12.el93 Vulnerability Details CVEID:CVE-2022-28331 DESCRIPTION: On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in aprsocketsendv. This is a result of intege...

Third-Party Dependency in Bamboo Data Center and Server

This High severity Third-Party Dependency vulnerability was introduced in version 9.6.0 of Bamboo Data Center and Server. This Third-Party Dependency vulnerability, with a CVSS Score of 7.2 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N allows an unauthenticated attacker to...

PT-2025-28644

Name of the Vulnerable Software and Affected Versions: FortiOS affected versions not specified Description: A heap-based buffer overflow vulnerability exists in the cw stad daemon. This vulnerability, classified under CWE-122, could allow an authenticated attacker to execute arbitrary code or...

PT-2025-28650 · Emerson · Valvelink Products

Name of the Vulnerable Software and Affected Versions: Emerson ValveLink Products affected versions not specified Description: Emerson ValveLink Products store sensitive information in cleartext in memory. This sensitive memory may be saved to disk, stored in a core dump, or remain uncleared if t...

PT-2025-28287 · Sap · Sap Netweaver

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver affected versions not specified Description: The issue allows an authenticated non-administrative user to call a remote-enabled function module, potentially granting access to non-sensitive information about the SAP system and O...

PT-2025-28277 · Sap · Sap Netweaver Business Warehouse

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Business Warehouse CCAW affected versions not specified Description: The issue allows a privileged attacker to cause a high CPU load by executing RFC enabled function modules without any input parameters. This results in reduced...

PT-2025-28548

Name of the Vulnerable Software and Affected Versions: Microsoft Remote Desktop Client affected versions not specified Description: A relative path traversal flaw exists in the Remote Desktop Client, potentially allowing an unauthorized attacker to execute code over a network. Malicious Remote...

PT-2025-28559 · Microsoft · Windows Event Tracing +1

Name of the Vulnerable Software and Affected Versions: Windows Event Tracing affected versions not specified Description: The issue is related to a use after free condition in Windows Event Tracing, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment,...

PT-2025-28749 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier ColdFusion versions prior to 2025.3 Description: A reflected Cross-Site Scripting XSS issue affects the software. If an unauthenticated attacker convinces a victim to visit a URL...

PT-2025-28748 · Adobe · Coldfusion

Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier Description: The issue is a stored Cross-Site Scripting XSS vulnerability that could be exploited by a high-privileged attacker to inject malicious scripts into vulnerable form fields...

PT-2025-28459 · Abis · Adjutant Core Accounting Erp

Name of the Vulnerable Software and Affected Versions: Abis, Inc Adjutant Core Accounting ERP version v.PreBeta250F Description: The issue allows a remote attacker to obtain sensitive information via the cid parameter in the GET request. This is a SQL Injection vulnerability, which means an...

PT-2025-28503

Name of the Vulnerable Software and Affected Versions: Juju versions prior to 3.6.8 Juju versions prior to 2.9.52 Description: The issue allows any authenticated controller user to upload arbitrary agent binaries to any model or to the controller itself without verifying model membership or...

PT-2025-28391 · Siemens · Tia Project-Server +1

Name of the Vulnerable Software and Affected Versions: TIA Project-Server versions prior to V2.1.1 TIA Project-Server V17 versions Totally Integrated Automation Portal TIA Portal V17 versions Totally Integrated Automation Portal TIA Portal V18 versions Totally Integrated Automation Portal TIA...

PT-2025-28632 · Mediawiki · Mediawiki

Name of the Vulnerable Software and Affected Versions: MediaWiki - CheckUser extension versions 1.39.X through 1.39.13 MediaWiki - CheckUser extension versions 1.42.X through 1.42.7 MediaWiki - CheckUser extension versions 1.43.X through 1.43.2 Description: The Special:CheckUser interface is...

PT-2025-28793 · Adobe · Illustrator

Name of the Vulnerable Software and Affected Versions: Illustrator versions 28.7.6 and earlier Illustrator version 29.5.1 and earlier Description: Illustrator is affected by an Integer Overflow or Wraparound issue that may lead to arbitrary code execution within the current user's context...