Lexmark Printers Improper Validation of Integrity Check Value (CVE-2023-50738)

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified. Lexmark documentation recommends that access to the Firmware Updates be restricted to trusted personnel. %NASLMINLEVEL 80900 C Tenable, Inc...

VulnCheck KEV: CVE-2020-36870

Various Ruijie Gateway EG and NBR models firmware versions 11.16B9P1 11.94B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server...

Solidigm DC 安全漏洞

Solidigm DC is a solid state drive product from Solidigm, Inc. A security vulnerability exists in Solidigm DC that stems from improper firmware resource management and could lead to unauthorized access to a locked storage device by a local or physical attacker...

Solidigm DC 安全漏洞

Solidigm DC is a solid state drive product from Solidigm, Inc. A security vulnerability exists in Solidigm DC that stems from improper firmware resource management, which could result in unauthorized access to a locked storage device or a denial of service attack...

PT-2025-45502

Name of the Vulnerable Software and Affected Versions Solidigm DC Products affected versions not specified Description An issue involving improper resource management in the firmware of certain Solidigm DC Products exists. An attacker with local or physical access could potentially gain...

Oracle Linux 7 : linux-firmware (ELSA-2025-25742)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25742 advisory. 20251030-999.44.1.gite9292517.el7 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...

Oracle Linux 10 : linux-firmware (ELSA-2025-25745)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25745 advisory. 20251030-999.44.1.gite9292517.el10 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from...

Oracle Linux 9 : linux-firmware (ELSA-2025-25744)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25744 advisory. 20251030-999.44.1.gite9292517.el9 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...

PT-2025-45501

Name of the Vulnerable Software and Affected Versions Solidigm DC Products affected versions not specified Description An issue with resource management in the firmware of certain Solidigm DC Products could allow an attacker with local or physical access to gain unauthorized access to a locked...

Oracle Linux 8 : linux-firmware (ELSA-2025-25743)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25743 advisory. 20251030-999.44.1.gite9292517.el8 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...

CVE-2022-50596

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

EUVD-2025-38046

An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the systemctrl API System/reFactory component...

CVE-2025-63560

An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the systemctrl API System/reFactory component...

linux-firmware security update

20251030-999.44.1.gite9292517.el9 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626...

CVE-2025-63560

An issue in KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 allows a remote attacker to cause a denial of service via the systemctrl API System/reFactory component...

CVE-2025-63560

CVE-2025-63560 affects KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v1.20.0006. A remote attacker can cause a denial of service via the systemctrl API, System/reFactory component. Public details confirm the vulnerability and affected version; no exploit specifics are provide...

PT-2025-45341

Name of the Vulnerable Software and Affected Versions KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware version 1.20.0006 Description An issue allows a remote attacker to cause a denial of service via the systemctrl API System/reFactory component. Recommendations At the moment,...

PT-2025-45371

D-Link DIR-1260 Wi-Fi router firmware versions up to and including v1.20B05 contain a command injection vulnerability within the web management interface that allows for unauthenticated attackers to execute arbitrary commands on the device with root privileges. The flaw specifically exists within...

linux-firmware security update

20251030-999.44.1.gite9292517.el8 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626...

PT-2025-45256

Name of the Vulnerable Software and Affected Versions Elspec G5 versions through 1.2.2.19 Description A person with physical access to the device can reset the Admin password by inserting a USB drive containing a publicly documented reset string into a USB port. Recommendations Versions prior to...