PT-2025-4010 · Joeybling · Bootplus

Name of the Vulnerable Software and Affected Versions: JoeyBling bootplus versions up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d Description: A critical issue has been found in JoeyBling bootplus, affecting an unknown part of the file /admin/sys/user/list. The manipulation of the sort argument...

PT-2025-4906 · Unknown · Translation.Pro

Name of the Vulnerable Software and Affected Versions: Translation.Pro versions n/a through 1.0.0 Description: The issue is related to improper neutralization of input during web page generation, which allows for reflected cross-site scripting XSS. This means an attacker can inject malicious...

PT-2025-4981 · Unknown · Contact Form 7 – Ccavenue Add-On

Name of the Vulnerable Software and Affected Versions: Contact Form 7 – CCAvenue Add-on versions n/a through 1.0 Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting', which allows Reflected XSS. This means that an...

PT-2025-1050 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Service affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory. It allows remote attackers to execute arbitrary code, potentially affecting the system. Recommendations: At th...

PT-2025-2036 · Unknown · Health Module

Name of the Vulnerable Software and Affected Versions: Health module affected versions not specified Description: The health module has insufficient restrictions on loading URLs, which may lead to some information leakage. Recommendations: At the moment, there is no information about a newer...

PT-2025-42407

Name of the Vulnerable Software and Affected Versions github.com/go-viper/mapstructure/v2 affected versions not specified Description A flaw exists in the field processing component that utilizes the mapstructure.WeakDecode function. The issue stems from improper neutralization of output data sen...

PT-2025-2337 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...

PT-2024-10864 · Huawei · Huawei Products

Name of the Vulnerable Software and Affected Versions: Huawei products affected versions not specified Description: There is an insufficient integrity vulnerability in Huawei products. A module does not perform sufficient integrity check in a specific scenario. Attackers can exploit the...

PT-2024-10899 · Unknown · Weather Module

Name of the Vulnerable Software and Affected Versions: Weather module affected versions not specified Description: The issue concerns the improper storage of some parameters within the weather module, leading to the leakage of sensitive information. Recommendations: At the moment, there is no...

PT-2024-36635 · Unknown · Richteam Share Buttons – Social Media

Name of the Vulnerable Software and Affected Versions: richteam Share Buttons – Social Media versions n/a through 1.0.2 Description: The issue is related to the improper neutralization of special elements used in an SQL command, allowing Blind SQL Injection. This means an attacker can inject...

PT-2024-36658 · Unknown · Alex W Fowler Easy Site Importer

Name of the Vulnerable Software and Affected Versions: Alex W Fowler Easy Site Importer versions n/a through 1.0.1 Description: The issue is related to a missing authorization vulnerability in Alex W Fowler Easy Site Importer, which allows exploiting incorrectly configured access control security...

PT-2024-36036 · Unknown · Uiextension

Name of the Vulnerable Software and Affected Versions: UIExtension module affected versions not specified Description: The issue is related to a cross-process screen stack vulnerability in the UIExtension module. Successful exploitation of this vulnerability may affect service confidentiality...

PT-2024-26934 · Sharp +1 · Sharp Mfps +1

Name of the Vulnerable Software and Affected Versions: Sharp Corporation and Toshiba Tec Corporation multiple MFPs multifunction printers affected versions not specified Description: An out-of-bounds read issue exists, which may lead to a denial-of-service DoS condition. Recommendations: At the...

PT-2024-34784 · Unknown · Mdr Webmaster Tools

Name of the Vulnerable Software and Affected Versions: MDR Webmaster Tools versions n/a through 1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, an...

PT-2024-34954 · Unknown · Boombox Shortcode

Name of the Vulnerable Software and Affected Versions: Boombox Shortcode versions n/a through 1.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing DOM-Based XSS. This enables potential attackers to...

PT-2024-34709 · Unknown +1 · Hda Driver +1

Name of the Vulnerable Software and Affected Versions: hda driver affected versions not specified Description: The issue concerns a buffer over-read in the hda driver, which is triggered by a guest-controlled value. This allows for potential exploitation. No information is provided about the...

PT-2024-12199 · Enel X · Waybox Enel X

Name of the Vulnerable Software and Affected Versions: Waybox Enel X web management application affected versions not specified Description: The Waybox Enel X web management application has an issue that allows execution of arbitrary requests on the internal database via the /admin/dbstore.php AP...

PT-2024-33453 · Unknown · Rudestan Vkontakte Wall Post

Name of the Vulnerable Software and Affected Versions: RudeStan VKontakte Wall Post versions n/a through 2.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on the web...

PT-2024-39936 · Teamplus Technology · Team+

Name of the Vulnerable Software and Affected Versions: Team+ from TEAMPLUS TECHNOLOGY affected versions not specified Description: The issue concerns a failure to properly validate a specific page parameter, allowing unauthenticated remote attackers to inject arbitrary SQL commands and potentiall...

PT-2024-8104 · Schneider Electric · Ecostruxure Power Monitoring Expert

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Monitoring Expert affected versions not specified Description: A Deserialization of Untrusted Data issue exists, which could allow code to be remotely executed on the server when unsafely deserialized data is posted to the w...