PT-2025-41868

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw that allows for a potential out-of-bounds write due to an incorrect bounds check. This issue could lead to remote proximal/adjacent escalation of...

PT-2025-42177

Name of the Vulnerable Software and Affected Versions Adobe Framemaker versions 2020.9 through 2022.7 Description A Use After Free issue exists in Adobe Framemaker. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User interaction is required...

PT-2025-42204

Name of the Vulnerable Software and Affected Versions Adobe Connect versions 12.9 and earlier Description The software is susceptible to a DOM-based Cross-Site Scripting XSS issue. Successful exploitation could allow an attacker to execute malicious scripts in a victim’s browser, potentially...

PT-2025-42200

Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript ma...

PT-2025-42207

Adobe Experience Manager versions 11.6 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a low privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse...

PT-2025-41867

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This could allow for remote proximal/adjacent escalation of privilege without...

PT-2025-42187

Name of the Vulnerable Software and Affected Versions Dimension versions 4.1.4 and earlier Description Dimension versions 4.1.4 and earlier are susceptible to an out-of-bounds read issue when processing a specially crafted file. This can lead to reading beyond the boundaries of allocated memory. ...

PT-2025-42192

Name of the Vulnerable Software and Affected Versions Substance3D - Stager versions 3.1.4 and earlier Description An Integer Overflow or Wraparound issue exists in Substance3D - Stager. Successful exploitation could lead to arbitrary code execution with the privileges of the current user. User...

PT-2025-41875

Name of the Vulnerable Software and Affected Versions wlan AP driver affected versions not specified Description The wlan AP driver contains a flaw involving an incorrect bounds check, potentially leading to an out-of-bounds write. Successful exploitation of this issue could allow for remote...

CVE-2025-9713

Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

CVE-2025-9713

Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

CVE-2025-9713

Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

EUVD-2025-34088

Path traversal in Ivanti Endpoint Manager allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required...

CVE-2025-9713

Ivanti Endpoint Manager CVE-2025-9713 is a path traversal issue that enables remote code execution on affected systems. The vulnerability affects versions prior to 2024 SU4 and requires user interaction for exploitation. Public documentation in the connected sources confirms the root cause is a p...

CVE-2025-21062

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...

CVE-2025-21061

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability...

CVE-2025-21049

Improper access control in SecSettings prior to SMR Oct-2025 Release 1 allows local attackers to access sensitive information. User interaction is required for triggering this vulnerability...

CVE-2025-21060

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access backup data from applications. User interaction is required for triggering this vulnerability...

CVE-2025-21062

Use of a broken or risky cryptographic algorithm in Smart Switch prior to version 3.7.67.2 allows local attackers to replace the restoring application. User interaction is required for triggering this vulnerability...

CVE-2025-21061

Cleartext storage of sensitive information in Smart Switch prior to version 3.7.67.2 allows local attackers to access sensitive data. User interaction is required for triggering this vulnerability...