PT-2025-29207 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-29213 · Qt Company +1 · Qt +1

Name of the Vulnerable Software and Affected Versions: Qt versions 6.6.0 through 6.8.3 Qt versions 6.9.0 through 6.9.1 Description: When passing values outside of the expected range to QColorTransferGenericFunction, it can cause a denial of service. This can occur when passing a specifically...

PT-2025-29270 · Unknown · Hax Cms Php +1

Name of the Vulnerable Software and Affected Versions: haxcms-nodejs versions prior to 11.0.6 haxcms-php versions prior to 11.0.6 Description: The logout function does not properly terminate user sessions or clear cookies. A refresh token is issued during logout, potentially allowing continued...

PT-2025-29322 · Ibm · Ibm Storage Scale

Name of the Vulnerable Software and Affected Versions: IBM Storage Scale versions 5.2.3.0 and 5.2.3.1 Description: IBM Storage Scale versions 5.2.3.0 and 5.2.3.1 may allow an authenticated user to obtain sensitive information from files due to insecure permissions inherited through the SMB...

PT-2025-29134 · Unknown · Secure-Upload

Name of the Vulnerable Software and Affected Versions: Secure-upload versions prior to 0.815.0 Description: Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service was installed on a limited number of environments. Privileged...

PT-2025-29154 · Unknown · Callmanager

Name of the Vulnerable Software and Affected Versions: Chall-Manager versions prior to 0.1.4 Description: Chall-Manager is susceptible to a zip bomb decompression issue when decoding scenario zip archives. The vulnerability does not require authentication or authorization for exploitation...

PT-2025-29096 · Ibm · Ibm Analytics Content Hub

Name of the Vulnerable Software and Affected Versions: IBM Analytics Content Hub versions 2.0 through 2.3 Description: IBM Analytics Content Hub may allow malicious file uploads due to insufficient validation of file types uploaded to Explore Content. This could enable attackers to upload and...

PT-2025-28860 · Radiflow · Isap Smart Collector

Name of the Vulnerable Software and Affected Versions: Radiflow iSAP Smart Collector version 1.20 Description: The issue allows a deprivileged Linux user to read the entire file system content, including files belonging to other users and having restricted access, such as the root password hash...

PT-2025-28943 · Clerk · @Clerk/Backend

Name of the Vulnerable Software and Affected Versions: @clerk/backend versions prior to 2.4.0 Description: Applications utilizing the verifyWebhook helper to verify incoming Clerk webhooks are susceptible to accepting improperly signed webhook events. Recommendations: Upgrade to @clerk/backend...

PT-2025-28867

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel related to the Fibre Channel Network Interface Card fnic driver. A crash can occur in the fnic wq cmpl handler function when Fibre Distributed Memory...

PT-2025-28957 · Dell · Dell Powerflex Manager

Name of the Vulnerable Software and Affected Versions: Dell PowerFlex Manager VM versions prior to 4.6.2.1 Description: Dell PowerFlex Manager VM is affected by an issue allowing the insertion of sensitive information into log files. A low-privileged attacker with remote access could exploit this...

PT-2025-28459 · Abis · Adjutant Core Accounting Erp

Name of the Vulnerable Software and Affected Versions: Abis, Inc Adjutant Core Accounting ERP version v.PreBeta250F Description: The issue allows a remote attacker to obtain sensitive information via the cid parameter in the GET request. This is a SQL Injection vulnerability, which means an...

PT-2025-28413 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue is related to improper error handling, which allows an attacker to send malformed payloads and generate error messages containing sensitive information. Recommendations: For versio...

PT-2025-32233

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Cancelling a query during a call to the Scan method of the returned Rows can lead to unexpected results when other queries are executed concurrently. This can create a race condition where the result...

PT-2025-28354 · Unknown · Code-Projects Responsive Blog

Name of the Vulnerable Software and Affected Versions: code-projects Responsive Blog Site version 1.0 Description: A critical issue has been identified, affecting unknown code in the /category.php file. The manipulation of the ID argument leads to SQL injection. This issue can be exploited...

PT-2025-28510 · Microsoft · Input Method Editor +1

Name of the Vulnerable Software and Affected Versions: Microsoft Input Method Editor IME affected versions not specified Description: The issue is related to a race condition due to improper synchronization when using a shared resource, allowing an authorized attacker to elevate privileges over a...

PT-2025-28484

Name of the Vulnerable Software and Affected Versions: HP Support Assistant affected versions not specified Description: A potential security issue has been identified, allowing a local attacker to escalate privileges via an arbitrary file deletion. Recommendations: At the moment, there is no...

PT-2025-28655 · Ibm · Ibm Openpages With Watson

Name of the Vulnerable Software and Affected Versions: IBM OpenPages with Watson versions 8.3 through 9.0 Description: The issue concerns the storage of encrypted data using AES encryption and CBC mode, which could provide weaker than expected security. An authenticated remote attacker with acces...

PT-2025-28804

Name of the Vulnerable Software and Affected Versions: The Support Board plugin for WordPress versions up to, and including, 3.8.0 Description: The issue allows unauthorized access, modification, or deletion of data due to the use of hardcoded default secrets in the sb encryption function. This...

PT-2025-28401 · Siemens · Ruggedcom I802 +49

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM i800 versions prior to V5.10.0 RUGGEDCOM i801 versions prior to V5.10.0 RUGGEDCOM i802 versions prior to V5.10.0 RUGGEDCOM i803 versions prior to V5.10.0 RUGGEDCOM M2100 versions prior to V5.10.0 RUGGEDCOM M2200 versions prior to...