PT-2025-22506 · Ibm · Ibm Aspera Faspex

Name of the Vulnerable Software and Affected Versions: IBM Aspera Faspex versions 5.0.0 through 5.0.12 Description: The issue allows an authenticated user to obtain sensitive information or perform unauthorized actions on behalf of another user due to client-side enforcement of server-side...

PT-2025-22553 · Ocuco · Ocuco Innovation

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component. Recommendations: For Ocuco Innovation version 2.10.24.51, consider restricting access to the...

PT-2025-22530 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: Servlet injection vulnerabilities in ASPECT allow remote code execution if session administrator credentials...

PT-2025-22531 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: An Unchecked Loop Condition in ASPECT provides an attacker the ability to maliciously consume system resource...

PT-2025-22539 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3. NEXUS Series versions through 3. MATRIX Series versions through 3. Description: Predictable filename vulnerabilities in ASPECT may expose sensitive information to a potential attacker if administrator...

PT-2025-22504 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: The issue allows access and modification of unintended resources due to Absolute File Traversal vulnerabiliti...

PT-2025-22552 · Ocuco · Ocuco Innovation

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the JOBENTRY.EXE. Recommendations: For Ocuco Innovation version 2.10.24.51, consider restricting access to the JOBENTRY.EXE to...

PT-2025-22494 · Pglogical +1 · Pglogical +1

Name of the Vulnerable Software and Affected Versions: pglogical versions 3.x BDR/PGD versions 4 and 5 Description: The issue arises when pglogical attempts to replicate data without verifying if it is using a replication connection. This allows a user with CONNECT access to a database configured...

PT-2025-22510 · Msp360 · Msp360 Backup

Name of the Vulnerable Software and Affected Versions: MSP360 Backup version 8.0 Description: An insecure file system permissions issue allows a low privileged user to execute commands with SYSTEM level privileges using a specially crafted file with an arbitrary file backup target. Recommendation...

PT-2025-22563 · Schule · Schule

Name of the Vulnerable Software and Affected Versions: Schule versions prior to 1.0.1 Description: The issue concerns the Schule open-source school management system software, which relies on client-side JavaScript to redirect users to different panels based on their role. This implementation pos...

PT-2025-22522 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: The issue allows attackers to delete system files if session administrator credentials become compromised,...

PT-2025-22523 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: Remote Code Execution vulnerabilities are present in ASPECT if session administrator credentials become...

PT-2025-22532 · Unknown · Nexus Series +2

Name of the Vulnerable Software and Affected Versions: ASPECT-Enterprise versions through 3.08.03 NEXUS Series versions through 3.08.03 MATRIX Series versions through 3.08.03 Description: Relative Path Traversal vulnerabilities in ASPECT allow access to file resources if session administrator...

PT-2025-23554

Name of the Vulnerable Software and Affected Versions tar-fs versions prior to 3.0.9 tar-fs versions prior to 2.1.3 tar-fs versions prior to 1.16.5 Description The issue in tar-fs allows an extract to write outside the specified directory with a specific tarball. This is due to improper limitatio...

CVE-2004-0921

AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets...

PT-2025-22350 · Unknown · Konsola Proget

Name of the Vulnerable Software and Affected Versions: Konsola Proget versions prior to 2.17.5 Description: A low-privileged user can access information about profiles created in Proget MDM, which contain details about allowed/prohibited functions. The profiles do not reveal any sensitive...

PT-2025-22330 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.4.0p1 Checkmk versions prior to 2.3.0p32 Checkmk versions prior to 2.2.0p42 Checkmk version 2.1.0 Description: The issue allows authenticated attackers to write arbitrary files due to argument injection in special...

PT-2025-22499 · Ubtech +1 · Freepass +1

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to URL redirection to untrusted sites, also known as 'Open Redirect'. This occurs when a web application redirects a user to a URL that is not validated, potentially...

PT-2025-22406 · Unknown · Campcodes Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Campcodes Online Shopping Portal version 1.0 Description: A critical issue has been discovered, affecting an unknown function of the file /admin/edit-category.php. The manipulation of the Category argument leads to SQL injection. This issue c...

PT-2025-22443 · Plane · Plane

Name of the Vulnerable Software and Affected Versions: Plane versions prior to 0.23 Description: The issue concerns insecure permissions in the UserSerializer that allow users to modify fields intended to be read-only, such as the email. This can potentially lead to account takeover when combined...