12583 matches found
PT-2025-15408 · Mendix · Mendix Runtime V8 +2
Name of the Vulnerable Software and Affected Versions: Mendix Runtime V8 versions prior to V9.24.34 is not accurate since V8 is a major version and should be listed separately, the correct interpretation is: Mendix Runtime V8 version prior to any specified fix, since all versions are affected...
PT-2025-15318 · WordPress · Streamit
Name of the Vulnerable Software and Affected Versions: Streamit theme for WordPress versions prior to 4.0.3 Description: The issue allows for privilege escalation via account takeover due to improper validation of a user's identity prior to updating their details, such as email, in the st...
PT-2025-15661 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2025.0 and earlier ColdFusion versions 2023.12 ColdFusion versions 2021.18 Description: The issue is a reflected Cross-Site Scripting XSS vulnerability. If an attacker convinces a victim to visit a URL referencing a...
PT-2025-15629 · Adobe · Framemaker
Name of the Vulnerable Software and Affected Versions: Adobe Framemaker versions 2022.6 and earlier Description: The issue is a NULL Pointer Dereference that could result in an application denial-of-service. An attacker could exploit this to crash the application, leading to a denial-of-service...
PT-2025-15649 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p4 through 2.4.8-beta2 and earlier Description: The issue is related to an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to...
PT-2025-15446 · Unknown · Bep/Imagemeta
Name of the Vulnerable Software and Affected Versions: bep/imagemeta versions prior to 0.10.0 Description: The issue concerns a Go library for reading image meta data from various file formats. The EXIF data format allows for defining large data structures in small payloads, which could be abused...
KB5055661: Servicing stack update for Windows 10, version 1607 and Server 2016: April 8, 2025
None None...
APSB25-31 : Security update available for Adobe Animate
Adobe has released an update for Adobe Animate. This update resolves critical and important vulnerabilities Successful exploitation could lead to arbitrary code execution and memory leak...
PT-2025-15338 · Unknown · Hdcp Trustlet
Name of the Vulnerable Software and Affected Versions: HDCP trustlet versions prior to SMR Apr-2025 Release 1 Description: The issue is related to improper access control in the HDCP trustlet, allowing local attackers with shell privilege to escalate their privileges to root. This can be exploite...
PT-2025-15435 · Fortinet · Fortiweb
Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.6.2 and below FortiWeb versions 7.4.6 and below FortiWeb versions 7.2 and below FortiWeb versions 7.0 and below Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also know...
PT-2025-15663 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: ColdFusion versions 2023.12 and earlier ColdFusion version 2021.18 and earlier ColdFusion version 2025.0 and earlier Description: The issue is related to an Improper Input Validation that could result in a security feature bypass. An attacker...
PT-2025-15600 · Unknown · Shahjada Live Forms
Name of the Vulnerable Software and Affected Versions: Shahjada Live Forms versions through 4.8.5 Description: The issue is related to a Missing Authorization vulnerability. Recommendations: For versions through 4.8.5, update to a version later than 4.8.5 to resolve the issue...
PT-2025-15605 · Adobe · After Effects
Name of the Vulnerable Software and Affected Versions: After Effects versions 25.1, 24.6.4 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR...
PT-2025-15350 · Samsung · Samsung Notes
Name of the Vulnerable Software and Affected Versions: SamsungNotes versions prior to 4.4.26.45 Description: The issue allows local attackers to access sensitive information due to the use of implicit intent for sensitive communication. Recommendations: For versions prior to 4.4.26.45, update to...
OPENSUSE-SU-2025:14973-1 etcd-3.5.21-1.1 on GA media
These are all security issues fixed in the etcd-3.5.21-1.1 package on the GA media of openSUSE Tumbleweed...
PT-2025-15647 · Adobe · Commerce
Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p4 through 2.4.8-beta2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that could be exploited to cause a denial-of-service condition. An attacker could trick a logged-in use...
PT-2025-15441 · Nakivo · Nakivo Backup & Replication
Name of the Vulnerable Software and Affected Versions: NAKIVO Backup & Replication versions 10.3.x through 11.0.1 Description: The issue is related to an XXE problem in the Director NBR component, allowing remote attackers to fetch and parse the XML response. Recommendations: For versions 10.3.x...
PT-2025-15428 · Fortinet · Fortimanager +5
Name of the Vulnerable Software and Affected Versions: Fortinet FortiOS versions 6.2.0 through 6.2.16 Fortinet FortiOS versions 6.4.0 through 6.4.15 Fortinet FortiOS versions 7.0.0 through 7.0.14 Fortinet FortiOS versions 7.2.0 through 7.2.7 Fortinet FortiOS versions 7.4.0 through 7.4.3 Fortinet...
PT-2025-15620 · Adobe · Animate
Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.7, 23.0.10 and earlier Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. To...