PT-2025-20922 · Edimax · Edimax Cv7428Ns

Name of the Vulnerable Software and Affected Versions: EDIMAX CV7428NS version 1.20 Description: A remote code execution issue was discovered, allowing exploitation via the command parameter in the mp function. Recommendations: For EDIMAX CV7428NS version 1.20, consider restricting access to the ...

PT-2025-20838 · WordPress · Frontend Dashboard

Name of the Vulnerable Software and Affected Versions: Frontend Dashboard plugin for WordPress versions 1.0 through 2.2.7 Description: The issue is related to a missing capability check on the fed admin setting form function function. This allows authenticated attackers with Subscriber-level acce...

PT-2025-20842 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon web versions 24.04.0 through 24.04.9 Centreon web versions 24.10.0 through 24.10.3 Description: The issue is related to Improper Privilege Management in the API Token creation form modules, allowing Privilege Escalation...

PT-2025-20880 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon web versions 22.10.0 through 22.10.28 Centreon web versions 23.04.0 through 23.04.26 Centreon web versions 23.10.0 through 23.10.21 Centreon web versions 24.04.0 through 24.04.10 Centreon web versions 24.10.0 through 24.10.4...

PT-2025-25203 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 10.7.x through 10.7.1 Mattermost versions 10.6.x through 10.6.3 Mattermost versions 10.5.x through 10.5.4 Mattermost versions 9.11.x through 9.11.13 Description: The issue is related to the improper validation of LDAP grou...

PT-2025-20829 · Gnu · Gnu Screen

Name of the Vulnerable Software and Affected Versions: Screen versions 5.0.0 Description: The issue is related to the logfile reopen function in the GNU screen terminal multiplexer. When Screen runs with setuid-root privileges, it does not drop privileges while operating on a user-supplied path...

PT-2025-23194

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.6 Apache Tomcat versions 10.1.0-M1 through 10.1.40 Apache Tomcat versions 9.0.0.M1 through 9.0.104 Description The issue is related to improper handling of case sensitivity in Apache Tomcat's GCI...

PT-2025-20761 · Apple · Ipados +8

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 11.5 macOS Sonoma versions prior to 14.7.6 tvOS versions prior to 18.5 iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions...

PT-2025-20790 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: The issue was addressed with improved memory handling. Connecting to a malicious AFP server may corrupt kernel memory. Recommendations: For macOS versions prior t...

PT-2025-20797

Name of the Vulnerable Software and Affected Versions watchOS versions prior to 11.5 tvOS versions prior to 18.5 iOS versions prior to 18.5 iPadOS versions prior to 18.5 macOS Sequoia versions prior to 15.5 visionOS versions prior to 2.5 Safari versions prior to 18.5 Description The issue is...

PT-2025-20686 · Auma · Auma Profox +5

Name of the Vulnerable Software and Affected Versions: Auma AC1.2 versions 06.00.00 through 06.09.04 Auma MEC 03.01 versions prior to 01.02.00 Auma PROFOX versions prior to 01-01.10.00 Auma SGx/SVx versions 03.00.00 through 03.05.01 Auma TIGRON versions prior to 01-01.09.00 Auma TIGRON SIL versio...

PT-2025-20692

Name of the Vulnerable Software and Affected Versions nimiq/core-rs-albatross versions prior to 1.1.0 Description The issue is related to uncontrolled memory allocation in the nimiq-network-libp2p subcrate of nimiq/core-rs-albatross, which can lead to a Denial of Service DoS attack. Specifically,...

PT-2025-20791 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.7.6 macOS Sequoia versions prior to 15.5 macOS Sonoma versions prior to 14.7.6 Description: A logic issue was addressed with improved state management, which could allow an attacker to gain access to protect...

PT-2025-20762 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iPadOS versions prior to 17.7.7 iOS versions prior to 18.5 iPadOS versions prior to 18.5 Description: Processing web content may lead to a denial-of-service. The issue was addressed with improved UI. Recommendations: For iPadOS versions prior...

PT-2025-20656 · Sungrow · Sungrow Logger1000

Name of the Vulnerable Software and Affected Versions: SunGrow Logger1000 version 01 A Description: A problematic issue has been found in the software, affecting some unknown processing. The manipulation leads to weak password requirements. The attack may be initiated remotely. The complexity of ...

PT-2025-20660 · Unknown · Kkfileview

Name of the Vulnerable Software and Affected Versions: kkFileView version 4.4.0 Description: A critical issue affects an unknown part of the file /fileUpload. The manipulation of the File argument leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

PT-2025-20649 · Unknown · Lumi H5P-Nodejs-Library

Name of the Vulnerable Software and Affected Versions: Lumi H5P-Nodejs-library versions prior to 9.3.3 Description: The issue is related to the omission of a sanitizeHtml call for plain text strings. This could potentially lead to security issues, although specific details about the estimated...

PT-2025-20631 · Unknown · Phpgurukul Apartment Visitors Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Apartment Visitors Management System version 1.0 Description: A critical issue has been found in the PHPGurukul Apartment Visitors Management System. The vulnerability affects an unknown functionality of the file /category.php...

PT-2025-20615 · Cisco · Cisco Asa

Name of the Vulnerable Software and Affected Versions: Cisco ASA affected versions not specified Description: The issue concerns a bypass of SSL/TLS certificate pinning. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where...

PT-2025-20623 · Unknown · Code-Projects Hospital Management System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Hospital Management System version 1.0 Description: A critical vulnerability was found in the Simple Hospital Management System. The issue affects the Add function of the Add Information component. Manipulation of the...