57584 matches found
CVE-2026-52480
CVE-2026-52480 affects the SJRC F11 SJ-GPS-PRO consumer drone (firmware build 2019-09-17, Fullhan FH8856 SoC, Linux 3.0.8). The inetd service exposes an unauthenticated FTP interface on port 21 , allowing an attacker on the adjacent network to obtain sensitive information without credentials. The...
Linux Distros Unpatched Vulnerability : CVE-2026-68479
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btrtl: validate firmware patch bounds rtlbtparsefirmware copies patchlength - 4 bytes before appending the firmware version. A malformed firmware pat...
Linux Distros Unpatched Vulnerability : CVE-2026-72131
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvme-apple: Prevent shared tags across queues on Apple A11 On Apple A11, tags of pending commands must be unique across the admin and IO queues, else the firmwa...
Linux Distros Unpatched Vulnerability : CVE-2026-68456
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its...
Linux Distros Unpatched Vulnerability : CVE-2026-74409
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: rtw89: add bounds check on firmware macid in link lookup The macid field in RX descriptors is 8 bits wide 0-255, but assoclinkonmacid has only...
CVE-2021-43716
Verification Bypass vulnerability exists in EPSON 150075647YWWV110 EasyMP Network Updater Ver.1.20. The Epson projector can be updated by encrypted firmware through USB...
Linux Distros Unpatched Vulnerability : CVE-2026-72215
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MIPS: DEC: Ensure 32-bit stack location for o32 promprintf In 64-bit configurations calling any firmware entry points from a kernel thread other than the initia...
CVE-2021-43718
CVE-2021-43718 is an authentication bypass in the Web Control interface of the Epson EH-TW5350 projector (firmware 150075647YWWV110 ). A remote, unauthenticated attacker can send a specially crafted series of HTTP requests to cause a Denial of Service . The vulnerability was discovered by team B-...
PT-2026-77291
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...
CVE-2026-52480
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service...
CVE-2026-72089
A flaw was found in the Linux kernel's Intel Versatile Processing Unit IVPU accelerator driver. An attacker could exploit a vulnerability in how the driver handles firmware logs with incorrect size information. This could lead to an out-of-bounds read, potentially disclosing sensitive information...
CVE-2026-72077
A flaw was found in the Linux kernel's ims-pcu input driver. This vulnerability occurs when the firmware object is not properly released if validation fails during an asynchronous update. This oversight can lead to a firmware leak, potentially exposing sensitive information or system resources. T...
CVE-2026-67967
Buffer Overflow vulnerability in Tenda W20E V16.01.0.62782 allows an attacker to execute arbitrary code. This is an incomplete fix for CVE-2025-44867 and CVE-2026-36819...
MINI-PPC9-4GG3-RC65
Bulletin has no description...
CVE-2026-75013
A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146B20201023. This affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation results in null pointer dereference. The attack can be launched remotely. The exploit is now public and may be used...
CVE-2026-17639 Certain HP Smart Tank All in One – Potential Denial of Service
Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...
CVE-2026-17639
Certain HP Smart Tank All-in-One printers may be potentially vulnerable to a denial of service condition that allows an unauthenticated attacker to cause the device to become unavailable by sending multiple concurrent HTTP requests...
CVE-2026-68456
A flaw was found in the Linux kernel's ueagle-atm USB driver. This driver uses an asynchronous mechanism for loading firmware but does not wait for its completion when a device is disconnected. This creates a race condition where the device's teardown can run concurrently with firmware loading. I...