PT-2025-1823 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: There is a request for information about a specific issue. No details are provided about the nature of the issue, potentially affected devices, ...

PT-2025-21645

Name of the Vulnerable Software and Affected Versions: FCGI versions 0.44 through 0.82 Description: The included FastCGI library in FCGI is affected, causing an integer overflow and resultant heap-based buffer overflow via crafted nameLen or valueLen values in data to the IPC socket. This occurs ...

PT-2025-1144 · Gocd · Gocd

Name of the Vulnerable Software and Affected Versions: GoCD versions prior to 24.4.0 Description: The issue is related to the incorrect restriction of XML external entity references in GoCD, a continuous delivery server. This can allow "group admins" to abuse the ability to edit raw XML...

PT-2025-4297 · Unknown +1 · Siyuan Note +1

Name of the Vulnerable Software and Affected Versions: SiYuan Note version 3.1.18 Description: SiYuan Note is self-hosted, open source personal knowledge management software. The software has an arbitrary file deletion vulnerability that exists in the POST /api/history/getDocHistoryContent...

PT-2025-25393

Name of the Vulnerable Software and Affected Versions SaltStack Salt affected versions not specified Description The issue concerns a directory traversal attack in minion file cache creation. The master's default cache is vulnerable to this attack, which could be leveraged to write or overwrite...

PT-2025-3340 · Unknown +1 · Net::Easytcp +1

Name of the Vulnerable Software and Affected Versions: Net::EasyTCP versions 0.15 through 0.26 Description: The issue arises because the Net::EasyTCP package for Perl utilizes Perl's built-in rand function when no strong randomization module is present. This can lead to insecure randomization...

PT-2025-25390

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A directory traversal vulnerability in the recv file method allows arbitrary files to be written to the master cache directory. Recommendations At the moment, there is no information about a...

PT-2025-3203 · Unknown · Contest Gallery

Name of the Vulnerable Software and Affected Versions: Contest Gallery versions through 24.0.3 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored XSS attacks. Recommendations: For versions...

PT-2025-2325 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about the issue. There is a mention of a rejected reason related to compliance with CNA rules,...

PT-2025-2326 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE record du...

PT-2025-2358 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue concerns a rejected CVE record due to unused status compliance. No further details are provided about the nature of the issue or its...

PT-2025-2357 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A CVE record was rejected due to non-compliance with CNA rules because it hasn't been used. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-2360 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue was rejected due to non-utilization under CNA rules, as it has not been used. Recommendations: At the moment, there is no information...

PT-2025-2362 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not contain details about a specific vulnerability. It appears to be a notification about a rejected CVE record due to non-compliance with CNA...

PT-2025-28848

Name of the Vulnerable Software and Affected Versions: Git versions 2.43.7 through 2.49.1 Description: The issue allows for the creation and truncation of any writable file when a user clones an untrusted repository and runs Gitk without additional command arguments, provided the "Support per-fil...

PT-2025-27766

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available due to unknown descriptions in the provided sources. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-29908 · Catalyst +1 · Catalyst-Plugin-Session +1

Name of the Vulnerable Software and Affected Versions: Catalyst::Plugin::Session versions prior to 0.44 Description: The session ID generation process uses low-entropy data, including a counter, epoch time, the rand function, the process ID PID, and the Catalyst context. The rand function is...

PT-2025-3968

Name of the Vulnerable Software and Affected Versions No information available Description No details are provided about the issue. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-2349 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue concerns a rejected CVE record due to non-compliance with CNA rules, as it has not been utilized. No further details are provided about the nature of the issue or i...

PT-2025-2329 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No information is available about the vulnerable software and its affected versions. Description: The issue is related to a rejected CVE record due to non-compliance with CNA rules, as it has not been used. No further details are provided abo...