PT-2025-45379

Name of the Vulnerable Software and Affected Versions Weblate versions prior to 5.14.1 Description Weblate versions 5.14 and below disclose the IP address of a project member when inviting a user to a project. The audit log, which includes IP addresses from administrative actions, is accessible t...

PT-2026-42470

Name of the Vulnerable Software and Affected Versions Apex One/SEP agent affected versions not specified Description An origin validation error in the process protection communication mechanism allows a local attacker to escalate privileges. To exploit this issue, the attacker must first have the...

PT-2026-42468

Name of the Vulnerable Software and Affected Versions Trend Micro TrendAI Apex One affected versions not specified TrendAI Apex One as a Service affected versions not specified Description An origin validation issue in the Apex One/SEP agent allows a local attacker to escalate privileges. This fl...

PT-2025-38104

Name of the Vulnerable Software and Affected Versions: User Sync – Remote User Sync plugin for WordPress versions prior to 1.0.3 Description: The User Sync – Remote User Sync plugin for WordPress is susceptible to Cross-Site Request Forgery. This is due to missing or incorrect nonce validation in...

PT-2025-37740

Name of the Vulnerable Software and Affected Versions: yangzongzhuan RuoYi versions up to 4.8.1 Description: A security flaw has been discovered in yangzongzhuan RuoYi. This impacts the filterKeyword function of the file /com/ruoyi/common/utils/sql/SqlUtil.java within the Blacklist Handler...

PT-2026-42472

Name of the Vulnerable Software and Affected Versions Apex One/SEP agent affected versions not specified Description A time-of-check time-of-use TOCTOU issue exists in the agent, which occurs when a program checks a condition such as a file's existence or permissions and then uses the result of...

PT-2025-35599

Name of the Vulnerable Software and Affected Versions DASYLab affected versions not specified Description DASYLab is susceptible to an out-of-bounds write due to improper bounds checking when parsing a DSB file. This can lead to arbitrary code execution if a user opens a specially crafted DSB fil...

PT-2025-34761

Name of the Vulnerable Software and Affected Versions Citrix NetScaler ADC and NetScaler Gateway versions prior to 14.1-47.48, 13.1-59.22, and 13.1-37.241-FIPS, and 12.1-55.330-FIPS Description Citrix NetScaler ADC and NetScaler Gateway contain a memory overflow vulnerability that allows for remo...

PT-2025-32312 · Ruby-Jwt +1 · Ruby-Jwt +1

Name of the Vulnerable Software and Affected Versions: ruby-jwt version 3.0.0.beta1 Description: ruby-jwt v3.0.0.beta1 contains weak encryption. The supplier notes that key size is not enforced by the library itself, and restrictions imposed by recent versions of OpenSSL may apply to users of the...

PT-2025-32116 · Undefined · Undefined

CVE-2025-54797 - Apache Struts Remote Code Execution CVE ID : CVE-2025-54797 Published : Aug. 5, 2025, 12:15 a.m. | 2 hours, 19 minutes ago Description : Rejected reason: This CVE is a duplicate of CVE-2025-52464. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected...

PT-2025-30319

Name of the Vulnerable Software and Affected Versions Linksys E2500 version 3.0.04.002 Description The chroot local user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot...

PT-2025-31084

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free condition exists in the SMB client within the Linux kernel's crypt message function when asynchronous cryptography is utilized. The initial fix for CVE-2024-50047 remove...

PT-2025-25187 · Weidmueller · Ie-Sr-2Tx-Wl +2

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: An unauthenticated remote attacker can execute arbitrary commands with root privileges on affected devices due to a lack of Cross-Site Request Forgery CSRF protection in the Main Web...

PT-2025-25104 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.22 and earlier Description: A stored Cross-Site Scripting XSS issue affects the software, allowing a low-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim browses ...

PT-2025-22871 · H3C · H3C Seccenter Smp-E1114P02

Name of the Vulnerable Software and Affected Versions: H3C SecCenter SMP-E1114P02 up to 20250513 Description: A vulnerability was found in the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely...

PT-2025-19844 · Qualcomm · Snapdragon +14

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue is related to memory corruption that occurs while handling a schedule request in the Camera Request Manager CRM due to an invalid link count in the corresponding session. This...

PT-2025-18175 · Bookgy · Bookgy

Name of the Vulnerable Software and Affected Versions: Bookgy affected versions not specified Description: The issue is related to a SQL injection vulnerability. This could allow an attacker to retrieve, create, update, and delete databases by sending an HTTP request through the IDTIPO, IDPISTA,...

PT-2025-17323 · Bw Broadcast · Tx1000 +5

Name of the Vulnerable Software and Affected Versions: BW Broadcast TX600 versions 1.6.0 BW Broadcast TX300 versions 1.6.0 BW Broadcast TX150 versions 1.6.0 BW Broadcast TX1000 versions 1.6.0 BW Broadcast TX30 versions 1.6.0 BW Broadcast TX50 versions 1.6.0 Description: The issue is related to...

PT-2025-7684 · Unknown · Phpgurukul Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Nurse Hiring System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Online Nurse Hiring System. This issue affects unknown code of the file /admin/manage-nurse.php. The manipulation of the...

PT-2025-7475 · WordPress · Modal Window

Name of the Vulnerable Software and Affected Versions: The Modal Window plugin for WordPress versions up to, and including, 6.1.5 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode due to insufficient input sanitization and output escaping on...

PT-2024-34778 · Webriti · Webriti Custom Login

Name of the Vulnerable Software and Affected Versions: Webriti Custom Login versions 0.3 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that also allows Reflected XSS in the Webriti Custom Login plugin. Recommendations: For versions 0.3 and earlie...

PT-2024-10544 · Ibm · Storage Protect Backup-Archive Client +1

Name of the Vulnerable Software and Affected Versions: IBM Storage Protect for Virtual Environments: Data Protection for VMware and Storage Protect Backup-Archive Client versions 8.1.0.0 through 8.1.23.0 Description: The issue is related to the use of weaker than expected cryptographic algorithms...

PT-2024-32424 · Gotenna · Gotenna Pro App +2

Name of the Vulnerable Software and Affected Versions: goTenna Pro App affected versions not specified goTenna Pro X and Pro X2 affected versions not specified Description: The issue is related to the goTenna Pro App not injecting extra characters into broadcasted frames to obfuscate the length o...

PT-2024-21846 · Withsecure · Withsecure Elements Agent +1

Name of the Vulnerable Software and Affected Versions: WithSecure Elements Agent versions through 23.x WithSecure Elements Client Security versions through 23.x Description: An issue allows local users to block an admin from completing an installation, resulting in a Denial-of-Service DoS. This...

PT-2026-39283

Name of the Vulnerable Software and Affected Versions Open WebUI versions prior to 0.1.124 Description An improper authorization control exists where the API fails to validate if a user possesses an authorized role of user or admin. When the platform is configured to allow new sign-ups, new...

PT-2024-23724 · Beescms · Beescms

Name of the Vulnerable Software and Affected Versions: beescms version 4.0 Description: The issue allows a remote attacker to execute arbitrary code via a file path that was not isolated and the suffix was not verified in admin template.php. This is an arbitrary file write vulnerability...

PT-2024-22733 · Woocommerce · Woocommerce Google Feed Manager

Name of the Vulnerable Software and Affected Versions: WooCommerce Google Feed Manager versions n/a through 2.2.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an...

PT-2024-21037

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.2.0 through 7.4.3.18 Liferay DXP 7.4 before update 19 Liferay DXP 7.3 before update 4 Liferay DXP 7.2 before fix pack 19 Description The issue allows remote attackers to redirect users to arbitrary external URLs via...

PT-2024-14923 · WordPress · Woostify Sites Library

Name of the Vulnerable Software and Affected Versions: Woostify Sites Library WordPress plugin versions prior to 1.4.8 Description: The issue concerns a lack of authorization in an AJAX action, allowing any authenticated users to update arbitrary blog options and set them to 'activated'. This cou...

PT-2024-1337 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.35 and prior MySQL Server versions 8.2.0 and prior Description: The issue is related to insufficient input validation in the Server: RAPID component of Oracle MySQL Server. It allows a low-privileged attacker with...

PT-2023-29737 · Qt Company · Qt

Name of the Vulnerable Software and Affected Versions: Qt versions prior to 6.2.11 Qt versions 6.3.x through 6.6.x before 6.6.1 Description: An issue was discovered in Qt when a QML image refers to an image whose content is not known yet, leading to an assumption that it is an SVG document. If th...

PT-2023-21195 · Wacom · Wacom Tablet Driver

Name of the Vulnerable Software and Affected Versions: Wacom Tablet Driver installer versions prior to 6.4.2-1 Description: The issue allows for arbitrary code execution with root privilege when a user is tricked into executing a malicious script before running the affected installer version. Thi...

PT-2025-18803 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A potential use-after-free issue has been identified in the Linux kernel, specifically in the intel-ish-hid ipc component. This issue occurs when a reset notify IPC message is received...

PT-2023-19107 · Mainwp · Mainwp Matomo Extension

Name of the Vulnerable Software and Affected Versions: MainWP Matomo Extension versions prior to 4.0.5 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2022-23623 · Elfsight · Elsight Halo

Name of the Vulnerable Software and Affected Versions: Elsight Halo affected versions not specified Description: The Elsight Halo web panel allows connection validation through a POST request to /api/v1/nics/wifi/wlan0/ping, which can be exploited by abusing the DESTINATION parameter to achieve...

PT-2022-6045 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.2 Description: A regression exists in the Linux Kernel within KVM: nVMX that allowed for speculative execution attacks. L2 can carry out Spectre v2 attacks on L1 due to L1 thinking it doesn't need retpolines o...

PT-2022-23083

Name of the Vulnerable Software and Affected Versions TensorFlow versions prior to 2.10.0 TensorFlow versions 2.9.1 and earlier TensorFlow versions 2.8.1 and earlier TensorFlow versions 2.7.2 and earlier Description The issue arises when the LRNGrad function is given an output image input tensor...

PT-2022-3986 · Cisco · Cisco Webex Meetings

Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings affected versions not specified Description: The issue exists due to insufficient protection of the web page structure in the web interface of Cisco Webex Meetings. This could allow a remote attacker to conduct a cross-si...

PT-2022-19903 · Mediawiki +1 · Mediawiki Semanticdrilldown Extension +1

Name of the Vulnerable Software and Affected Versions: MediaWiki SemanticDrilldown extension versions through 1.37.2 Description: The issue allows SQL injection with certain '-' and ' ' constraints. Recommendations: For MediaWiki SemanticDrilldown extension versions through 1.37.2, update to a...

PT-2021-7531 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 5.16-rc6 Description: An issue was discovered in the Linux kernel where the uapi finalize function in drivers/infiniband/core/uverbs uapi.c lacks a check of kmalloc array. This issue is related to a pointer...

PT-2021-8035 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the cfg80211 function in the Linux kernel, where switching from P2P GO type to ADHOC type via send msgNL80211 CMD SET INTERFACE does not call the cleanup functi...

PT-2021-4560 · Php +10 · Php +10

Name of the Vulnerable Software and Affected Versions: PHP versions 7.3.x through 7.3.31 PHP versions 7.4.x through 7.4.24 PHP versions 8.0.x through 8.0.11 Description: The issue is related to the PHP FPM SAPI component, where child worker processes can access and modify memory shared with the...

PT-2021-7066 · Linux +8 · Linux Kernel +8

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw in the processing of received ICMP errors, specifically ICMP fragment needed and ICMP redirect, allows an off-path remote user to quickly scan open UDP ports and bypass the sour...

PT-2020-15502 · Jenkins · Jenkins Elastest Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins ElasTest Plugin versions 1.2.1 and earlier Description: A cross-site request forgery issue allows attackers to connect to an attacker-specified URL using attacker-specified credentials. Recommendations: For Jenkins ElasTest Plugin...

PT-2022-9681

Name of the Vulnerable Software and Affected Versions: kubernetes affected versions not specified Description: The issue is related to the handling of raw data output to a terminal by kubectl. Specifically, it does not neutralize escape, meta, or control sequences contained in this data. This...

PT-2020-12139 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the "admin/manage-departments.php" page. This enables reflected XSS attacks...

PT-2019-18369 · Moxa · Bmxnor0200H Ethernet / Serial Rtu Module

Name of the Vulnerable Software and Affected Versions: BMXNOR0200H Ethernet / Serial RTU module all firmware versions Description: A vulnerability exists in the BMXNOR0200H Ethernet / Serial RTU module, which could cause disconnection of active connections when an unusually high number of IEC...

PT-2017-13: Elevation of Privilege in Microsoft Windows

The specialists of the Positive Research center have detected an Elevation of Privilege vulnerability in Microsoft Windows. An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully...

PT-2017-3944

Name of the Vulnerable Software and Affected Versions OpenSSL versions 1.0.2 through 1.0.2k OpenSSL versions 1.1.0 through 1.1.0d MySQL Server versions 5.6.35 and earlier MySQL Server versions 5.7.18 and earlier Description The issue is related to an out-of-bounds read in the OpenSSL library when...

PT-2026-67571

Insufficient verification of data authenticity in Caliptra Core ROM and Core Firmware validate debug unlock token in subsystem mode allows an attacker with access to the integrator's debug unlock signing service to unlock production debug on an unintended device by presenting a valid token issued...