PT-2025-27859

Name of the Vulnerable Software and Affected Versions PHP versions prior to 8.1.33 PHP versions prior to 8.2.29 PHP versions prior to 8.3.23 PHP versions prior to 8.4 php7.4 php8.2 Description The pgsql and pdo pgsql escaping functions do not verify if the underlying quoting functions return...

PT-2025-11344

Name of the Vulnerable Software and Affected Versions PHP versions 8.1. through 8.1.31 PHP versions 8.2. through 8.2.27 PHP versions 8.3. through 8.3.18 PHP versions 8.4. through 8.4.4 Description The issue is related to the use of the wrong content-type header to determine the charset when a...

PT-2025-20326

Name of the Vulnerable Software and Affected Versions Slurm versions 22.05, 23.02, 23.11.11, 24.05.8, and 24.11.5 are affected. Description The issue is related to permission handling for Coordinators within the accounting system, allowing them to promote a user to Administrator. This is due to a...

PT-2025-25560

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M1 through 11.0.7 Apache Tomcat versions 10.1.0-M1 through 10.1.41 Apache Tomcat versions 9.0.0.M1 through 9.0.105 Description The issue is related to an Authentication Bypass Using an Alternate Path or Channel...

PT-2025-21892 · Slurm-Wlm +1 · Slurm-Wlm +1

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in slurm-wlm within Debian Linux. No further details are available. Recommendations: At the moment, there is no information about a newer...

PT-2025-30212

Name of the Vulnerable Software and Affected Versions mbedtls versions prior to 3.6.4 Description The software contains a use-after-free issue in the mbedtls x509 string to names function. This function incorrectly frees a pointer that application code may still be using, leading to a potential...

PT-2025-2355 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be related to an unused CVE record that was...

PT-2025-11346

Name of the Vulnerable Software and Affected Versions PHP versions 8.1. through 8.1.31 PHP versions 8.2. through 8.2.27 PHP versions 8.3. through 8.3.18 PHP versions 8.4. through 8.4.4 Description The issue is related to the insufficient validation of end-of-line characters in user-supplied...

PT-2025-11345

Name of the Vulnerable Software and Affected Versions: PHP versions up to 8.1.31 PHP versions up to 8.2.27 PHP versions up to 8.3.18 PHP versions up to 8.4.4 php7.4 Description: The issue concerns the Streams HTTP Wrapper in PHP. Recommendations: For PHP versions up to 8.1.31, update to a version...

PT-2025-27814 · Mediawiki +1 · Mediawiki +2

Name of the Vulnerable Software and Affected Versions: Mediawiki - CentralAuth Extension versions 1.39.0 through 1.39.12 Mediawiki - CentralAuth Extension versions 1.42.0 through 1.42.6 Mediawiki - CentralAuth Extension versions 1.43.0 through 1.43.1 Description: The issue is related to an Improp...

PT-2025-28240

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 11.0.0-M1 through 11.0.8 Apache Tomcat versions 10.1.0-M1 through 10.1.42 Apache Tomcat versions 9.0.0.M1 through 9.0.106 Description: An uncontrolled resource consumption issue exists in Apache Tomcat when an HTTP/2...

PT-2025-23989

Name of the Vulnerable Software and Affected Versions golang versions 1.15 through 1.19 Description The issue affects golang packages in Debian Linux. No further details are available due to the lack of information from high-priority sources. Recommendations For golang version 1.15, update to a...

PT-2025-25565

Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions 1.0 through 1.5 Apache Commons FileUpload versions 2.0.0-M1 through 2.0.0-M3 Description The issue is related to the allocation of resources for multipart headers with insufficient limits, which enables a...

PT-2025-28036

Name of the Vulnerable Software and Affected Versions PHP versions prior to 8.1.33 PHP versions prior to 8.2.29 PHP versions prior to 8.3.23 PHP versions prior to 8.4.10 PHP 7.4 affected versions not specified PHP 8.2 affected versions not specified Description PHP versions 8.1. before 8.1.33, 8....

PT-2025-28239

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 11.0.0-M1 through 11.0.8 Apache Tomcat versions 10.1.0-M1 through 10.1.42 Apache Tomcat versions 9.0.0.M1 through 9.0.106 Description: An integer overflow issue in Apache Tomcat, under specific multipart upload...

PT-2024-15992 · Unknown · Lm-Sys/Fastchat

Name of the Vulnerable Software and Affected Versions: lm-sys/fastchat versions as of commit e208d5677c6837d590b81cb03847c0b9de100765 Description: A Server-Side Request Forgery SSRF vulnerability exists in the "POST /worker generate stream" API endpoint of the Controller API Server. This issue...

PT-2025-6966

Name of the Vulnerable Software and Affected Versions: FFmpeg git-master commit N-113007-g8d24a28d06 Description: A reachable assertion in FFmpeg allows attackers to cause a Denial of Service DoS via opening a crafted AAC file. Recommendations: For FFmpeg git-master commit N-113007-g8d24a28d06,...

PT-2024-68: Cross-Site Scripting (XSS) in the HTML page header in PhpSpreadsheet

The vulnerability was identified in PhpSpreadsheet, versions = 3.0.0, = 2.0.0, = 2.2.0, = 3.0.0, = 2.0.0, = 2.2.0, = 2.3.4 to 2.3.5 or higher Additional information: Researcher: Aleksey Solovev Positive Technologies...

PT-2024-35654 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.8.0-2024-03-19-intel-next-iLS-24ww14 Description: The issue is related to possible deadlocks in the Bluetooth management MGMT component of the Linux kernel, caused by the hci cmd sync dequeue function. This ca...

PT-2024-65: Unauthorized Reflected XSS in PhpSpreadsheet (Accounting.php)

The vulnerability was identified in PhpSpreadsheet, versions = 3.0.0, = 2.0.0, = 2.2.0, = 3.0.0, = 2.0.0, = 2.2.0, = 2.3.4 to 2.3.5 or higher Additional information: Security advisory Researcher: Aleksey Solovev Positive Technologies...