CVE-2023-54123

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf-biosplit' In the error path of raid10run, 'conf' need be freed, however, 'conf-biosplit' is missed and memory will be leaked. Since there are 3 places to free 'conf', factor out a helper to fix th...

CVE-2023-54123 md/raid10: fix memleak for 'conf->bio_split'

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix memleak for 'conf-biosplit' In the error path of raid10run, 'conf' need be freed, however, 'conf-biosplit' is missed and memory will be leaked. Since there are 3 places to free 'conf', factor out a helper to fix th...

CVE-2025-68738 wifi: mt76: mt7996: fix null pointer deref in mt7996_conf_tx()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix null pointer deref in mt7996conftx If a link does not have an assigned channel yet, mt7996viflink returns NULL. We still need to store the updated queue settings in that case, and apply them later. Move th...

CVE-2023-54029

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

UBUNTU-CVE-2023-54037

In the Linux kernel, the following vulnerability has been resolved: ice: prevent NULL pointer deref during reload Calling ethtool during reload can lead to call trace, because VSI isn't configured for some time, but netdev is alive. To fix it add rtnl lock for VSI deconfig and config. Set...

CVE-2023-54037 ice: prevent NULL pointer deref during reload

In the Linux kernel, the following vulnerability has been resolved: ice: prevent NULL pointer deref during reload Calling ethtool during reload can lead to call trace, because VSI isn't configured for some time, but netdev is alive. To fix it add rtnl lock for VSI deconfig and config. Set...

CVE-2023-54029

CVE-2023-54029 concerns the Linux kernel’s iwlwifi component (iwl_mvm_max_amsdu_size) when using Multiple Logical LANs (MLO). The root cause described across connected records: in MLO scenarios, code may access channel information via vif->bss_conf.chan->band, but bss_conf isn’t used in thi...

CVE-2023-54025 wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled

In the Linux kernel, the following vulnerability has been resolved: wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled In case WoWlan was never configured during the operation of the system, the hw-wiphy-wowlanconfig will be NULL. rsiconfigwowlan checks whether wowlanconfig is...

CVE-2023-54025

Technical details for CVE-2023-54025 are not publicly provided in the supplied documents. No affected products, versions, impact, or mitigations are specified here; monitor for updates.

EUVD-2025-205001

PDFsam Enhanced Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows phyiscally-present attackers to escalate privileges on affected installations of PDFsam Enhanced. An attacker must first obtain the ability to mount a malicious drive onto the targ...

WordPress plugin Funnelforms Free 安全漏洞

Funnelforms Free is a free plugin that focuses on helping webmasters increase conversions through multi-step forms and contact forms. WordPress Funnelforms Free suffers from a lack of authorization vulnerability, which can be exploited by an attacker to perform an unauthorized operation via a...

PT-2025-52934

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's USB gadget functionality that can lead to a use-after-free condition during a USB configuration switch. Specifically, the issue occurs when switching...

V-SOL GPON/EPON OLT Platform 安全漏洞

V-SOL GPON/EPON OLT Platform is an optical line terminal management platform from China Semiconductor V-SOL. A security vulnerability exists in V-SOL GPON/EPON OLT Platform version 2.03, which originates from unauthenticated information disclosure and could result in the downloading of...

PT-2025-52967

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel related to ACPICA. Specifically, a null pointer dereference can occur in the acpi db display objects function due to a potential failure of ACPI ALLOCAT...

PT-2025-53365

Microhard Systems IPn4G 1.1.0 contains a configuration file disclosure vulnerability that allows authenticated attackers to download sensitive system configuration files. Attackers can retrieve configuration files from multiple directories including '/www', '/etc/m cli/', and '/tmp' to access...

PT-2025-53352

Name of the Vulnerable Software and Affected Versions Leica Geosystems GR10/GR25/GR30/GR50 GNSS version 4.30.063 Description The software contains a stored cross-site scripting issue in the configuration file upload functionality. An attacker can upload a malicious HTML file that will execute...

FLIR Brickstream 3D+ 安全漏洞

FLIR Brickstream 3D+ is an intelligent passenger flow analysis sensor from FLIR, Inc. A security vulnerability exists in FLIR Brickstream 3D+ version 2.1.742.1842, which stems from an unauthenticated ExportConfig REST API that could lead to the disclosure of sensitive configuration files...

PT-2025-53357

FLIR Brickstream 3D+ 2.1.742.1842 contains an unauthenticated vulnerability in the ExportConfig REST API that allows attackers to download sensitive configuration files. Attackers can exploit the getConfigExportFile.cgi endpoint to retrieve system configurations, potentially enabling authenticati...

PT-2025-53327

Name of the Vulnerable Software and Affected Versions FaceSentry Access Control System version 6.4.8 Description The FaceSentry Access Control System contains an authentication issue involving hard-coded SSH credentials for the wwwuser account. An insecure sudoers configuration allows attackers t...

PT-2025-53325

Name of the Vulnerable Software and Affected Versions V-SOL GPON/EPON OLT Platform version 2.03 Description The software contains an information disclosure issue that allows unauthorized access to configuration files. Attackers can obtain sensitive configuration data by sending HTTP GET requests ...