PT-2025-18890 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue has been identified in the Linux kernel, specifically in the mpi3mr remove function. This issue is related to the sas hba.phy memory not being properly freed. The...

PT-2025-18851 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 5.4 through 5.5 Description: A vulnerability in the Linux kernel has been resolved, related to the misuse of non-idle barriers as fence trackers. The issue was caused by a race condition in the barrier processing code,...

PT-2025-26127 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak issue was found in the Linux kernel, specifically in the security read state kernel function. This function directly returns the result of security read policy without...

PT-2023-30216 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns unauthenticated SQL Injection vulnerabilities. Specifically, the id parameter in the uploadphoto function of the functions.php resource does not validate the characters...

PT-2025-18835 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A issue in the Linux kernel has been identified where attempting to probe a mt7921e PCI card without firmware results in a successful probe, but ieee80211 register hw is not called. Wh...

PT-2023-8601 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.14 XWiki Platform versions prior to 15.5.1 XWiki Platform versions prior to 15.6 RC1 Description: The issue is related to reflected cross-site scripting RXSS via the rev parameter used in the content of...

PT-2023-30210 · Alter · Alter

Name of the Vulnerable Software and Affected Versions: Alter plugin versions = 1.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This means an attacker can trick a user into performing unintended actions on a web application that the user is authenticated to. No...

Important: tomcat9

Issue Overview: Incomplete Cleanup vulnerability in Apache Tomcat. When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomcat to skip some parts...

PT-2023-29766 · Unknown · Wpn-Xm Serverstack

Name of the Vulnerable Software and Affected Versions: WPN-XM Serverstack version 0.8.6 Description: A Cross-Site Scripting issue has been detected in WPN-XM Serverstack. This issue could allow a remote attacker to send a specially crafted JavaScript payload through the...

PT-2023-30569 · Zoho · Manageengine Desktop Central

Name of the Vulnerable Software and Affected Versions: ManageEngine Desktop Central version 9.1.0 Description: A Server-Side Request Forgery SSRF vulnerability has been found, specifically affecting the /smtpConfig.do component. This issue could allow an authenticated attacker to launch targeted...

PT-2023-32436 · Teamamaze · Amazefileutilities

Name of the Vulnerable Software and Affected Versions: teamamaze/amazefileutilities versions prior to 1.91 Description: The issue is related to improper authorization. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

PT-2023-27449 · Eclipse · Eclipse Parsson

Name of the Vulnerable Software and Affected Versions: Eclipse Parsson versions prior to 1.1.4 Eclipse Parsson versions prior to 1.0.5 Description: Parsing JSON from untrusted sources can lead to exploitation due to edge cases in Java's built-in support for parsing numbers with large scales,...

Weintek EasyBuilder Pro

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Weintek Equipment : EasyBuilder Pro Vulnerability : Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain remote...

PT-2023-29523 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The Online Food Ordering System is affected by multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the verified parameter of the routers/user-router.php resource,...

PT-2023-26707

Name of the Vulnerable Software and Affected Versions Lost and Found Information System version 1.0 Description The issue allows account takeover via username and password to a "/classes/Users.php?f=save" API endpoint. Recommendations For Lost and Found Information System version 1.0, consider...

PT-2023-24783 · Kyocera · Kyocera Taskalfa 4053Ci

Name of the Vulnerable Software and Affected Versions: Kyocera TASKalfa 4053ci printers versions 2VG S000.002.561 and earlier Description: The issue allows a denial of service service outage via the "/wlmdeu%2f%2e%2e%2f%2e%2e" endpoint followed by a directory reference such as "%2fetc%00index.htm...

PT-2023-29356 · Unknown · Online Bus Booking System

Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the date parameter of the "bus info.php" resource does not validate the characters received, and they...

PT-2023-28667 · Ibm · Ibm Cics Tx Standard +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard versions 10.1 through 11.1 IBM CICS TX Advanced versions 10.1 through 11.1 Description: The issue arises because the software performs an operation at a privilege level that is higher than the minimum level required, whic...

PT-2023-28484 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible missing permission check in the dm service. This could lead to local information disclosure with no additional...

PT-2023-35558 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read crash has been reported, involving the dwg geojson object and dwg write geojson functions in the llvmfuzz.c file. The crash...