PT-2022-2366 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.16.12 Description: The issue is related to the Linux kernel's USB gadget driver, specifically in the udc-xilinx.c file. It involves an array index that is not properly validated, potentially allowing a remote...

PT-2012-6016

Name of the Vulnerable Software and Affected Versions ShareThis module versions 7.x-2.x before 7.x-2.5 Description The issue allows remote authenticated users with the "administer sharethis" permission to inject arbitrary web script or HTML via unspecified vectors related to JavaScript settings...

PT-2012-5380

Name of the Vulnerable Software and Affected Versions Moodle versions 2.1.x through 2.1.7 Moodle versions 2.2.x through 2.2.4 Moodle versions 2.3.x through 2.3.1 Description The issue allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file...

PT-2012-4483

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware versions 10.1.3.1 through 11.1.1.6 Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Install component of the Oracle MapViewer...

PT-2012-1639

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 18.0.1025.168 Apple iTunes affected versions not specified Description The issue is related to a use-after-free vulnerability that allows remote attackers to cause a denial of service or possibly have unspecifie...

PT-2012-2549

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor versions 5.5 through 5.8 SP1 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by exploiting the DPA Utilities.cProcessAuthenticationData function. This can be...

PT-2010-5029

Name of the Vulnerable Software and Affected Versions IBM DB2 UDB version 9.5 before FP6a Description The issue affects the "Query Compiler, Rewrite, Optimizer" component, allowing remote authenticated users to cause a denial of service by consuming CPU resources. This is achieved through a craft...

PT-2026-108170

Name of the Vulnerable Software and Affected Versions music-metadata versions prior to 11.16.0 Description The MP4 parser accepts an attacker-controlled 64-bit extended atom size and converts it to a JavaScript Number. This resulting payload length is used for atom-specific readToken calls before...

PT-2026-93160

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.47 Description A confused deputy issue in PriceTracking allows a remote attacker to bypass system access restrictions to a privileged page. This is achieved by leveraging social engineering and...

PT-2026-92874

Name of the Vulnerable Software and Affected Versions Oracle XML Gateway versions 12.2.3 through 12.2.15 Description A flaw in the Install component of the Oracle XML Gateway product of Oracle E-Business Suite allows a low privileged attacker with network access via HTTP to compromise the system...

PT-2026-92721

Vulnerability in the Oracle Field Service product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Field Service...

PT-2026-93184

Name of the Vulnerable Software and Affected Versions a2ui-project a2ui versions prior to 0.10.7 Description A remote attack can be launched against the Basic Catalog component due to inefficient regular expression complexity within an unknown function in the file renderers/web core/src/v0 9/basi...

PT-2026-92074

Name of the Vulnerable Software and Affected Versions FreeRDP versions prior to 3.31.0 Description Remote attackers can cause a server crash by sending crafted RDP packets with zero or oversized values for the DesktopWidth and DesktopHeight variables during GCC negotiation. This lack of validatio...

PT-2026-92091

Name of the Vulnerable Software and Affected Versions Vikunja versions prior to 2.6.0 Description Public authentication endpoints under /api/v2, including login, register, password-reset, and OAuth token routes, do not implement rate limiting. This allows remote unauthenticated attackers to execu...

PT-2026-91186

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Syncope. An administrator with adequate entitlements can get access via REST to the list of existing Access Tokens, including their signed JWT body. These values can be then used to perform further REST requests,...

PT-2026-90001

Concrete CMS 9.2.0 to 9.5.2 contain a missing authorization vulnerability in the REST API Groups list endpoint. The listGroups method in concrete/src/Api/Controller/Groups.php registers a permissions checker callback that unconditionally returns true, so no per-object tree node authorization is...

PT-2026-90151

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 9.5.3 Description An object-level authorization failure occurs when updating a Page Type. The Types::submit dashboard controller processes the ptID variable provided by the user to load and save a Page Type witho...

PT-2026-88925

Name of the Vulnerable Software and Affected Versions Apache Parquet versions 1.12 through 1.18 Description The org.apache.parquet.crypto.keytools package allows for the encryption of Parquet files using an envelope encryption mechanism that wraps data keys via a Key Management Service KMS. When...

PT-2026-88963

Name of the Vulnerable Software and Affected Versions FortiPAM Chrome extension affected versions not specified Description An authentication procedure flaw in the Privileged Access Management extension allows remote attackers to compromise the confidentiality and integrity of protected...

PT-2026-81857

Name of the Vulnerable Software and Affected Versions tongweb version 7.0.24 Description An issue in the Spring HttpInovkerServiceExporter component allows a remote attacker to execute arbitrary code by sending a crafted request to the 'console/heimdall' endpoint. Recommendations At the moment,...

PT-2026-81516

Name of the Vulnerable Software and Affected Versions NVIDIA NemoClaw versions 0.0.0 through 0.0.25 Description NVIDIA NemoClaw for Linux contains a flaw in its inference server setup that allows a remote attacker to access the inference service without authentication. In affected configurations,...

PT-2026-80870

RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts. The GroupPost.get API handler concatenates the database-controlled screen value directly with the application's source/ directory and opens the resulting path without verifying that...

PT-2026-79589

Name of the Vulnerable Software and Affected Versions WS Form LITE – Drag & Drop Contact Form Builder versions prior to 1.10.81 Description The plugin is susceptible to PHP Object Injection, a condition where untrusted input is deserialized, allowing an attacker to inject PHP objects. This occurs...

PT-2026-80742

Name of the Vulnerable Software and Affected Versions Ember affected versions not specified Description An unauthenticated remote attacker can inject terminal escape sequences into the operator's terminal user interface TUI by sending HTTP requests with control bytes in the request target to a...

PT-2026-79187

Name of the Vulnerable Software and Affected Versions TREK versions prior to 3.1.0 Description TREK fails to revalidate URLs during native redirect following in the importGoogleList and importNaverList functions within server/src/services/placeService.ts, and the resolveGoogleMapsUrl function...

PT-2026-78836

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-755AP versions prior to 20260702 Description A command injection flaw exists in the ssi component within the /cgi-bin/email.cgi endpoint. The issue resides in the log email server function, allowing a remote attacker to execute...

PT-2026-73191

Name of the Vulnerable Software and Affected Versions treefrog-framework versions prior to 2.11.3 Description A flaw in the Session Cookie Handler component allows for improper authentication via remote manipulation. The issue resides in the std::strncmp function within the...

PT-2026-76809

Name of the Vulnerable Software and Affected Versions SWE-agent's trajectory inspector version 1.1.0 Description The HTTP server fails to properly sanitize request paths in the '/trajectory/' endpoint, allowing the use of parent-directory '..' references to perform path traversal. The server bind...

PT-2026-72635

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the SCTP DIAG endpoint dumping process. The system traverses endpoint address lists without holding the lock sock lock, while these lists can be modified...

PT-2026-73056

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.7.4 Description Stored Cross-Site Scripting XSS occurs because attribute-view field names are stored without HTML escaping and interpolated directly into option elements using innerHTML within the sort menu. An...

PT-2026-72952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An information leak exists in the ALSA usb-audio component specifically affecting RME Digiface status. The function snd rme digiface read status reads a status block into an uninitialize...

PT-2026-70705

Name of the Vulnerable Software and Affected Versions Microsoft Office Word affected versions not specified Description An off-by-one error occurs when a program writes or reads one element past the end of an array, which can lead to memory corruption or information disclosure. In this case, the...

PT-2026-70640

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to memory...

PT-2026-69236

Name of the Vulnerable Software and Affected Versions MSI Radix AXE6600 version v781521 Description Remote attackers can execute arbitrary commands and obtain root privileges on the underlying system. This is possible through the alg function, which triggers a command injection within the portFw...

PT-2026-67687

Name of the Vulnerable Software and Affected Versions Samsung Open Source rlottie affected versions not specified Description Improper input validation allows the processing of oversized serialized data payloads. Recommendations At the moment, there is no information about a newer version that...

PT-2026-66751

A reflected cross-site scripting XSS vulnerability has been identified in the PHP Jabbers - PHP Poll Script. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in version 4.1...

PT-2026-66472

Name of the Vulnerable Software and Affected Versions E-Commerce Pack versions prior to 5.03.01.49 Description A Cross-Site Request Forgery CSRF flaw exists in the software. CSRF is a type of attack that tricks a victim into submitting a malicious request. It allows an attacker to perform...

PT-2026-66440

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in HTTP/2 handling allows the nghttp2 session mem send function to be called re-entrantly while nghttp2 session mem recv is executing. This sequence leads to ...

PT-2026-66407

Name of the Vulnerable Software and Affected Versions Node.js versions 22.x Node.js versions 24.x Node.js versions 26.x Description A flaw in the Permission Model enforcement allows the trace events.createTracing.enable function to write trace logs outside the boundaries defined by the...

PT-2026-66417

Name of the Vulnerable Software and Affected Versions MELSEC MX Controller MX-R model affected versions not specified MELSEC MX Controller MX-F model affected versions not specified Master/local module affected versions not specified CC-Link IE TSN interface board affected versions not specified...

PT-2026-65792

Name of the Vulnerable Software and Affected Versions RO CSVI versions prior to 9.11.0 Description Cross-Site Request Forgery CSRF vectors exist in the AJAX endpoint handlers of the rolandd.com Joomla Extension. CSRF is a type of attack that tricks a victim into submitting a malicious request. It...

PT-2026-65702

A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover...

PT-2026-65645

Summary The Diameter AVP decoder in github.com/gopacket/gopacket computes dataLength := avp.Length - uint32headerSize without first ensuring avp.Length = headerSize. When the Vendor flag is set, headerSize is 12, but the only length guard upstream rejects avp.Length CWE-770 unbounded allocation...

PT-2026-65321

Unauthenticated Server Side Request Forgery SSRF in FormCraft = 3.9.15 versions...

PT-2026-64594

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists during system reboot when cpufreq suspend is called via the kernel restart to device shutdown path. Because the reboot path does not call freeze processes,...

PT-2026-64244

The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site's opt-in forms and insert new template-based opt-in rows into the database...

PT-2026-64010

GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the IMAP Server configuration that allows authenticated attackers to inject arbitrary web script or HTML via the server URL parameter to /Archiver/ImapServerWizard.aspx. The injected payload is stored by...

PT-2026-63431

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager versions prior to 20.2.0.0 Description The Identity and Access Management IAM component contains a flaw in the generation of security tokens. A remote attacker with low privileges could exploit this issue to...

PT-2026-63395

Name of the Vulnerable Software and Affected Versions Telerik UI for AJAX versions prior to 2026.2.708 Description Forged upload metadata can influence the processing of AsyncUploadTypeName, leading to unsafe attacker-controlled type resolution. This flaw allows for remote code execution in...

PT-2026-63508

Name of the Vulnerable Software and Affected Versions IP Login affected versions not specified Description The IP Login extension for Joomla trusts forwarded client-IP headers without requiring a configured trusted proxy. This allows attackers to spoof the IP address used for automatic login, whi...