CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

CVE-2025-29986

Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized...

CVE-2025-29986

CVE-2025-29986 affects Dell’s Common Event Enabler (CEE) , specifically version 9.0.0.0 , where the vulnerability lies in the Common Anti-Virus Agent (CAVA) . The root cause is an improper restriction of the communication channel to intended endpoints , which could allow an unauthenticated attack...

PT-2025-15340

Name of the Vulnerable Software and Affected Versions: Galaxy Watch versions prior to SMR Apr-2025 Release 1 Description: The issue is related to improper authorization in the wireless download protocol, allowing physical attackers to update the device unique identifier of Watch devices. This cou...

PT-2025-15442 · Ibm · Ibm Personal Communications

Name of the Vulnerable Software and Affected Versions: IBM Personal Communications versions 14 through 15 Description: The issue allows any interactively logged-in users on the target computer to run commands with full privileges in the context of NT AUTHORITYSYSTEM. This enables a low-privileged...

PT-2025-15465 · Hax Cms · Hax Cms

Name of the Vulnerable Software and Affected Versions: HAX CMS PHP versions prior to 10.0.3 Description: The issue is related to the save function in HAXCMSFile.php, which allows for unrestricted file uploads due to a non-exhaustive denylist. This list only blocks files with .php, .sh, .js, and...

PT-2025-20391 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the ssid5g parameter in the setWiFiEasyCfg function. This allows for potential exploitation. Recommendations: For TOTOLIN...

PT-2025-15354 · Unknown · Mymagicpower Aias

Name of the Vulnerable Software and Affected Versions: mymagicpower AIAS version 20250308 Description: A critical issue has been found in the processing of the file 3 api platform/api-platform/src/main/java/top/aias/platform/controller/AsrController.java. The manipulation of the url argument lead...

PT-2025-15352 · Unknown +1 · Nothings Stb +1

Name of the Vulnerable Software and Affected Versions: Nothings stb up to f056911 Description: A critical vulnerability has been found in Nothings stb, affecting the stb include string function. The manipulation of the path to includes argument leads to a stack-based buffer overflow. This issue c...

PT-2025-15318 · WordPress · Streamit

Name of the Vulnerable Software and Affected Versions: Streamit theme for WordPress versions prior to 4.0.3 Description: The issue allows for privilege escalation via account takeover due to improper validation of a user's identity prior to updating their details, such as email, in the st...

PT-2025-15332 · WordPress · Melhor Envio

Name of the Vulnerable Software and Affected Versions: Melhor Envio plugin for WordPress versions up to and including 2.15.9 Description: The issue allows unauthenticated attackers to extract sensitive data, including environment information, plugin tokens, shipping configurations, and limited...

PT-2025-17391 · Tenda · Tenda I24 +1

Name of the Vulnerable Software and Affected Versions: Tenda W12 and i24 versions 3.0.0.42887 through 3.0.0.53644 Description: A critical vulnerability was found in the function cgiSysUplinkCheckSet of the file /bin/httpd. The manipulation of the arguments hostIp1 and hostIp2 leads to a stack-bas...

PT-2025-15326 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5.6.3.154.205 20250114 Description: A critical issue has been found, affecting unknown code in the file /parameter/getLimitIPList.jsp. The manipulation of the noticeId argument leads to SQL injection. This issue can be...

PT-2025-15323 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5.6.3.154.205 20250114 Description: A critical issue was found in the file /client/UnChkMailApplication.jsp, allowing for SQL injection through the manipulation of the typename argument. This can be initiated remotely. Th...

PT-2025-15322 · Unknown · Esafenet Cdg

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version 5.6.3.154.205 20250114 Description: A critical issue has been found, affecting some unknown functionality of the file /pubinfo/updateNotice.jsp. The manipulation of the ID argument leads to SQL injection. The attack can b...

PT-2025-15338 · Unknown · Hdcp Trustlet

Name of the Vulnerable Software and Affected Versions: HDCP trustlet versions prior to SMR Apr-2025 Release 1 Description: The issue is related to improper access control in the HDCP trustlet, allowing local attackers with shell privilege to escalate their privileges to root. This can be exploite...

PT-2025-15611 · Adobe · After Effects

Name of the Vulnerable Software and Affected Versions: After Effects versions 25.1, 24.6.4 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...

Fortinet Fortigate No certificate name verification for fgfm connection (FG-IR-24-046)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-24-046 advisory. - A improper restriction of communication channel to intended endpoints vulnerability CWE-923 in Fortinet FortiOS...

PT-2025-15327 · Unknown · Seeyon Zhiyuan Interconnect Fe Collaborative Office Platform

Name of the Vulnerable Software and Affected Versions: Seeyon Zhiyuan Interconnect FE Collaborative Office Platform version 5.5.2 Description: A critical issue affects some unknown processing of the file /sysform/042/check.js%70. The manipulation of the argument Name leads to SQL injection. The...