CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

WordPress Uncanny Automator plugin <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Settings Update vulnerability discovered by mikemyers in WordPress Plugin Uncanny Automator versions = 6.4.0.2...

Court Rules Against NSO Group

The case is over: A jury has awarded WhatsApp $167 million in punitive damages in a case the company brought against Israel-based NSO Group for exploiting a software vulnerability that hijacked the phones of thousands of users. I'm sure it'll be appealed. Everything always is...

CVE-2025-30176

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

BELL-CVE-2023-53145

Bulletin has no description...

PrivEsc (Privilege Escalation) in Jira Service Management Data Center

This High severity PrivEsc Privilege Escalation vulnerability was introduced in versions 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center. This PrivEsc Privilege Escalation vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileg...

PT-2025-21082 · Intel · Intel Graphics

Name of the Vulnerable Software and Affected Versions: IntelR Graphics software affected versions not specified Description: The issue is related to improper access control in some IntelR Graphics software, which may allow an authenticated user to potentially enable denial of service via local...

PT-2025-20926

Name of the Vulnerable Software and Affected Versions: Flask versions 3.1.0 Description: The issue arises from the incorrect handling of fallback key configuration in Flask, where the last fallback key is used for signing instead of the current signing key. This is due to Flask constructing the...

PT-2025-20923 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002R version 4.0.0-B20230531.1404 Description: A command injection issue was discovered via the FUN 00459fdc function. This allows for potential exploitation. Recommendations: For TOTOLINK A3002R version 4.0.0-B20230531.1404,...

PT-2025-20859 · Siemens · Teamcenter Visualization

Name of the Vulnerable Software and Affected Versions: Teamcenter Visualization versions prior to V14.3.0.14 Teamcenter Visualization versions prior to V2312.0010 Teamcenter Visualization versions prior to V2406.0008 Teamcenter Visualization versions prior to V2412.0004 Description: A vulnerabili...

PT-2025-23173 · Apache +1 · Apache Web Server +1

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.179 Description: The issue concerns insufficient checking of files uploaded to the application, allowing files with phtml and phar extensions to be uploaded. This can lead to remote code execution if the Apache...

PT-2025-23255 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: FreeScout is a free self-hosted help desk and shared mailbox. The application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input...

PT-2025-21096 · Intel · Intel Network Adapters

Name of the Vulnerable Software and Affected Versions: IntelR Network Adapters package versions prior to 29.4 Description: A race condition in some Administrative Tools for IntelR Network Adapters may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-20822 · Sap · Sap S/4Hana Cloud Private Edition +1

Name of the Vulnerable Software and Affected Versions: SAP S/4HANA Cloud Private Edition affected versions not specified Description: The issue allows an authenticated attacker with SAP standard authorization to execute a certain function module remotely and replace arbitrary ABAP programs,...

PT-2025-21050 · Intel · Intel(R) Oneapi Level Zero

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Level Zero affected versions not specified Description: The issue is related to an uncontrolled search path in some IntelR oneAPI Level Zero software, which may allow an authenticated user to potentially enable escalation of...

PT-2025-21098 · Intel · Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: Edge Orchestrator for IntelR Tiber™ Edge Platform affected versions not specified Description: The issue concerns the exposure of sensitive information to unauthorized actors for some Edge Orchestrator software. This could potentially allow a...

PT-2025-21070 · Intel · Intel Ethernet Connection

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Connection software versions prior to 29.4 Description: The issue is related to an uncontrolled search path element in some IntelR Ethernet Connection software. This may allow an authenticated user to potentially enable...

PT-2025-20935 · Amd · Amd Cloud Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Cloud Manageability Service affected versions not specified Description: The issue is related to an unquoted search path within the AMD Cloud Manageability Service, which can be exploited by a local attacker to escalate privileges. This...

PT-2025-21064 · Intel · Intel Xeon 6 Processor E-Cores Firmware

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor E-Cores firmware affected versions not specified Description: The issue is related to insufficient control flow management in the Alias Checking Trusted Module. This may allow a privileged user to potentially enable...

PT-2025-23256 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: The issue is caused by a lack of input validation and sanitization in both Session::flash and other areas, allowing user input to be executed without proper filtering. This results in a...