31288 matches found
PT-2025-46280
Name of the Vulnerable Software and Affected Versions Squirrels Auto Inventory plugin for WordPress versions up to and including 1.0.3 Description The software is susceptible to Stored Cross-Site Scripting through the admin settings. This is due to inadequate input sanitization and output escapin...
PT-2025-46544
Name of the Vulnerable Software and Affected Versions Siemens Software Center versions prior to 3.5 Solid Edge SE2025 versions prior to 225.0 Update 10 Description The software is susceptible to a DLL hijacking issue. An attacker could potentially execute arbitrary code by placing a specially...
Academy Software Foundation OpenEXR EXR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Academy Software Foundation OpenEXR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists withi...
PT-2025-46518
Name of the Vulnerable Software and Affected Versions Adobe Pass versions 3.7.3 and earlier Description An Incorrect Authorization issue exists in Adobe Pass. An attacker could bypass security measures and gain unauthorized read and write access. Exploitation requires user interaction, specifical...
PT-2025-46407
Name of the Vulnerable Software and Affected Versions IntelR QAT Windows software versions prior to 2.6.0 Description An untrusted pointer dereference exists in some IntelR QAT Windows software. This issue, occurring within Ring 3: User Applications, may allow an information disclosure. A system...
KLA90053 PE vulnerability in Microsoft SQL Server
An elevation of privilege vulnerability was found in Microsoft SQL Server. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2025-59499 Related products Microsoft-SQL-Server Microsoft-Azure CVE list CVE-2025-59499 critical KB list 5068405 5068403 5068401...
PT-2025-46372
Name of the Vulnerable Software and Affected Versions NETGEAR DGN2200v4 versions prior to 1.0.0.132 Description A flaw exists in input validation within the NETGEAR DGN2200v4 N300 Wireless ADSL2+ Modem Router. This issue allows attackers with direct network access to potentially execute code on t...
PT-2025-46443
Name of the Vulnerable Software and Affected Versions InCopy versions 20.5 and 19.5.5 and earlier Description InCopy versions 20.5, 19.5.5, and earlier are susceptible to a Use After Free issue. Successful exploitation of this issue could lead to arbitrary code execution with the privileges of th...
PT-2025-46381
Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw related to external control of file name or path within Ring 3 User Applications, potentially allowing an escalation of privilege. A local...
PT-2025-46397
Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description The software contains a flaw due to unrestricted file upload of a dangerous type within Ring 3 User Applications. This could allow an unprivileged software adversary, combin...
PT-2025-46390
Name of the Vulnerable Software and Affected Versions IntelR CIP software versions prior to WIN DCA 2.4.0.11001 Description An improper access control issue exists in some IntelR CIP software. This may allow an information disclosure within Ring 3 User Applications. An unprivileged software...
.NET 9.0 Update - November 11, 2025 (KB5071067)
None None...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the WriteRelationships function when the exclusion operator is used in the authorization schema and the server is configured with --write-relationships-max-updates-per-call greater...
WordPress Fleet Manager plugin <= 2.5.1 - Authenticated (Editor+) Stored Cross-Site Scripting vulnerability
Authenticated Editor+ Stored Cross-Site Scripting vulnerability discovered by Ivan Cese in WordPress Plugin Fleet Manager versions = 2.5.1...
CVE-2025-64504
Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user‑controlled orgId and used it in authorization checks. As a result, any authenticated user on th...
CVE-2025-64504 Langfuse vulnerable to cross‑organization enumeration of member & invitation lists via project membership APIs
Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user‑controlled orgId and used it in authorization checks. As a result, any authenticated user on th...
EUVD-2025-50817
Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user‑controlled orgId and used it in authorization checks. As a result, any authenticated user on th...
CVE-2025-64504 Langfuse vulnerable to cross‑organization enumeration of member & invitation lists via project membership APIs
Langfuse is an open source large language model engineering platform. Starting in version 2.70.0 and prior to versions 2.95.11 and 3.124.1, in certain project membership APIs, the server trusted a user‑controlled orgId and used it in authorization checks. As a result, any authenticated user on th...