CVE-2025-15371

Affected products: Tenda i24, 4G03 Pro, 4G05, 4G08, G0-8G-PoE, Nova MW5G and TEG5328F up to version 65.10.15.6. Root cause: manipulation of the Shadow File component via input Fireitup, enabling hard-coded credentials. Local access required. Public exploit details exist. Remediation: upgrade to a...

EUVD-2022-55930

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized...

SUSE CVE-2023-54279

In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass a empty env fwgetenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list. Check if first entry exist before running strchr to avoid null pointe...

SUSE CVE-2023-54304

In the Linux kernel, the following vulnerability has been resolved: firmware: mesonsm: fix to avoid potential NULL pointer dereference ofmatchdevice may fail and returns a NULL pointer. Fix this by checking the return value of ofmatchdevice...

SUSE CVE-2023-54325

In the Linux kernel, the following vulnerability has been resolved: crypto: qat - fix out-of-bounds read When preparing an AER-CTR request, the driver copies the key provided by the user into a data structure that is accessible by the firmware. If the target device is QAT GEN4, the key size is...

PT-2025-54426

Cypress Solutions CTM-200 2.7.1 contains an authenticated command injection vulnerability in the firmware upgrade script that allows remote attackers to execute shell commands. Attackers can exploit the 'fw url' parameter in the ctm-config-upgrade.sh script to inject and execute arbitrary command...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993052 advisory. In the Linux kernel, the following vulnerability has been resolved: i40e: Fix kernel crash during reboot when adapter is in recovery mode If the driver detects durin...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993029)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993029 advisory. In the Linux kernel, the following vulnerability has been resolved: firmware: xilinx: don't make a sleepable memory allocation from an atomic context The following...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993176)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993176 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmfcpreinitdcmds This patch fixes a...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993117)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993117 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/radeon: Add the missed acpiputtable to fix memory leak When the radeon driver reads the bios...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992813)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992813 advisory. In the Linux kernel, the following vulnerability has been resolved: crypto: cavium - prevent integer overflow loading firmware The codelength value comes from the...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993229)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993229 advisory. In the Linux kernel, the following vulnerability has been resolved: efi: Don't map the entire mokvar table to determine its size Currently, when validating the mokva...

EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2025-2623)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : x86/mce: Work around an erratum on fast string copy instructionsCVE-2022-49124 net: preserve skbendoffset in...

Cypress Solutions CTM-200 操作系统命令注入漏洞

The Cypress Solutions CTM-200 is a wireless gateway from Cypress Solutions. An operating system command injection vulnerability exists in the Cypress Solutions CTM-200 version 2.7.1, which stems from an authenticated command injection in the fwurl parameter of the firmware upgrade script, which...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-992937)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992937 advisory. In the Linux kernel, the following vulnerability has been resolved: cassini: Fix a memory leak in the error handling path of casinitone cassaturnfirmwareinit allocat...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992794)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992794 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix of node refcount leak in tcpciregisterport I got the following report whil...

CVE-2022-50804

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to cross-site request forgery CSRF attacks, allowing attackers to perform administrative actions on behalf of authenticated users without their knowledge or consent...

CVE-2022-50796

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized...

CVE-2022-50796

SOUND4 IMPACT/FIRST/PULSE/Eco =2.x contains an unauthenticated remote code execution vulnerability in the firmware upload functionality with path traversal flaw. Attackers can exploit the upload.cgi script to write malicious files to the system with www-data permissions, enabling unauthorized...

CVE-2022-50801 JM-DATA ONU JF511-TV 1.0.67 Authenticated Stored Cross-Site Scripting (XSS) Vulnerability

JM-DATA ONU JF511-TV version 1.0.67 is vulnerable to authenticated stored cross-site scripting XSS attacks, allowing attackers with authenticated access to inject malicious scripts that will be executed in other users' browsers when they view the affected content...