PT-2025-44380

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel’s ksmbd component contains a flaw related to recursive locking within RPC handle list access. Specifically, the ksmbd session rpc method function attempts to lock sess-r...

Google Chrome Security Update (stable-channel-update-for-desktop_28-2025-10) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

PT-2025-43918

Name of the Vulnerable Software and Affected Versions ZTE MC889A Pro affected versions not specified Description A Denial of Service DoS issue exists in the ZTE MC889A Pro product. The root cause is inadequate validation of input parameters within the Short Message Service interface, which could...

PT-2025-43924

Name of the Vulnerable Software and Affected Versions versions prior to 2025 Description The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access, increasing the risk of unauthorised connections...

Siemens SIMATIC Devices Improper Input Validation (CVE-2024-50142)

In the Linux kernel, the following vulnerability has been resolved: xfrm: validate new SA's prefixlen using SA family when sel.family is unset This expands the validation introduced in commit 07bf7908950a xfrm:Validate address prefix lengths in the xfrm selector. syzbot created an SA with...

PT-2025-43449

Name of the Vulnerable Software and Affected Versions Moodle affected versions not specified Description An issue in Moodle’s timed assignment feature allowed students to bypass the time restriction, potentially giving them more time than allowed to complete an assessment. Recommendations At the...

PT-2025-43546

Name of the Vulnerable Software and Affected Versions Captive Portal affected versions not specified Description The Captive Portal system contains a flaw that permits authentication bypass. The issue allows bypassing the normal authentication mechanisms of the Captive Portal. No information is...

PT-2025-43545

Name of the Vulnerable Software and Affected Versions Arista NG Firewall affected versions not specified Description This issue is a diagnostics command injection that could lead to arbitrary command execution with root privileges. Successful exploitation allows an attacker to execute commands...

Oracle Java SE Unspecified Vulnerability (Oct 2025) - Linux

Oracle Java SE is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Java SE Unspecified Vulnerability (Oct 2025) - Windows

Oracle Java SE is prone to an unspecified vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unspecified Vulnerability in IBM Aspera Faspex

IBM Aspera Faspex is an International Business Machines IBM solution for rapid global person-to-person document delivery and collaboration. A security vulnerability exists in IBM Aspera Faspex versions 5.0.0 through 5.0.13.1 that stems from a cross-domain policy file containing domains that shoul...

Unspecified Vulnerability in HCL AION

HCL AION is an AI lifecycle management platform from HCL India. HCL AION has a security vulnerability which is caused due to missing security attributes in the encrypted session SSL cookie. No details of the vulnerability are provided at this time...

Unspecified Vulnerability in Microsoft Windows (CNVD-2025-24644)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability that can be exploited by attackers to remotely execute code...

Unspecified Vulnerability in Microsoft Defender (CNVD-2025-24169)

Microsoft Defender is a threat protection software from Microsoft USA. Microsoft Defender for Linux has a security vulnerability that can be exploited by attackers to cause a denial of service on the system...

Unspecified Vulnerability in Microsoft Windows (CNVD-2025-24420)

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. Microsoft Windows has a security vulnerability that can be exploited by an attacker to gain elevated privileges...

Unspecified Vulnerability in Adobe Substance3D Viewer (CNVD-2025-24166)

Adobe Substance3D Viewer is a stand-alone desktop application for viewing and editing 3D files from Audobee Adobe USA. A security vulnerability exists in Adobe Substance3D Viewer 0.25.2 and earlier versions, which can be exploited by an attacker to cause arbitrary code execution in the current us...

Centreon has an unspecified vulnerability (CNVD-2025-24647)

Centreon is a set of open source system monitoring tools from France's Centreon. The product mainly provides monitoring functions for resources such as network, system and application programs. Centreon has a security vulnerability that can be exploited by attackers to execute arbitrary Web scrip...

CVE

It is an offensive tool for Windows. This repository appears to...

PT-2025-45463

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in the Google Chrome Omnibox component related to improper control flow management. Successful exploitation could allow a remote attacker to disclose protected information...

PT-2025-42329

Name of the Vulnerable Software and Affected Versions TMUI affected versions not specified Description A directory traversal issue exists in TMUI that permits an authenticated attacker to access files beyond those intended. The vulnerability allows access to files that are not limited to the...