CVE-2025-12940 Credentials recorded in logs in NETGEAR WAX610 and WAX610Y

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points. An user having access to the syslog server can read the logs containing these credentials. This issue affects...

Multi-Vendor BIOS Security Vulnerabilities (November, 2025) - Lenovo Support US

No description provided...

Multi-Vendor BIOS Security Vulnerabilities (November, 2025) - Lenovo Support US

No description provided...

CVE-2025-63296

KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anykaservice.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root...

kernel: firmware: cs_dsp: Fix OOB memory read access in KUnit test (wmfw info)

In the Linux kernel, the following vulnerability has been resolved: firmware: csdsp: Fix OOB memory read access in KUnit test wmfw info KASAN reported out of bounds access - csdspmockwmfwaddinfo, because the source string length was rounded up to the allocation size...

CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

PT-2025-46351

Name of the Vulnerable Software and Affected Versions NETGEAR WAX610 versions prior to 11.8.0.10 NETGEAR WAX610Y versions prior to 11.8.0.10 Description A configuration issue can lead to login credentials being inadvertently recorded in logs when a Syslog Server is configured. An attacker with...

PT-2025-46429

Name of the Vulnerable Software and Affected Versions Intel Arc B-series GPUs affected versions not specified Description A configuration issue with default permissions in some firmware for Intel Arc B-series GPUs within Ring 1 device drivers may allow an attacker to gain elevated privileges. A...

PT-2025-46399

Name of the Vulnerable Software and Affected Versions IntelR Server Configuration Utility software and IntelR Server Firmware Update Utility software versions prior to 16.0.12 Description A flaw exists in link resolution before file access 'link following' within Ring 3: User Applications,...

Intel® Slim Bootloader Advisory

Summary: A potential security vulnerability in the Intel® Slim Bootloader may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35968 Description: Protection mechanism failure in the UEFI firmware fo...

Incorrect Secure Flag Usage in Versal™ Adaptive SoC Arm® Trusted Firmware

Summary The Secure Flag passed to Versal™ Adaptive SoC’s Arm Trusted Firmware for Cortex®-A processors TF-A for Arm’s Power State Coordination Interface PSCI commands were incorrectly set to secure instead of using the processor’s actual security state. This would allow the PSCI requests to appea...

Intel® Graphics Advisory

Summary: Potential security vulnerabilities for some Intel® Graphics software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-32091 Description: Incorrect default...

Intel Graphics 安全漏洞

Intel Graphics is a family of graphics cards from Intel Corporation USA. A security vulnerability exists in Intel Graphics, which stems from an improperly set default permissions in the firmware, which could lead to elevated privileges...

PT-2025-46437

Name of the Vulnerable Software and Affected Versions UEFI firmware with Slim Bootloader affected versions not specified Description A flaw exists in the UEFI firmware for the Slim Bootloader that could allow for privilege escalation. A local attacker with privileged user access and high complexi...

NETGEAR WAX610和NETGEAR WAX610Y 安全漏洞

The NETGEAR WAX610 and NETGEAR WAX610Y are both wireless access points from NETGEAR. A security vulnerability exists in the NETGEAR WAX610 and NETGEAR WAX610Y versions prior to 10.8.11.4, which stems from login credentials being incorrectly logged to the logs, potentially leading to credential...

NETGEAR RAX30和NETGEAR RAXE300 安全漏洞

NETGEAR RAX30 and NETGEAR RAXE300 are both products of NETGEAR, Inc.NETGEAR RAX30 is a dual-band wireless router.NETGEAR RAXE300 is a wireless router. A security vulnerability exists in the NETGEAR RAX30 and RAXE300 that stems from improper certificate validation in the firmware update logic, whi...

HPESBHF04965 rev.1 - Certain HPE ProLiant DL, and Synergy Servers Using Certain Intel Processor BIOS, INTEL-SA-01378, UPLR1 – Intel UEFI Server Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant Compute DL320 Gen12 - Prior to 1.5009-05-2025 HPE ProLiant Compute DL340 Gen12 - Prior to 1.5009-05-2025 HPE ProLiant Compute DL360 Gen12 -...

Intel UEFI Server Firmware Advisory

Summary: A potential security vulnerability for some Intel reference platforms may allow escalation of privilege or denial of service. Intel is releasing UEFI reference updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-30185 Description: Active debug code fo...

Intel® Server Configuration Utility Software Advisory

Summary: A potential security vulnerability in some Intel® Server Configuration Utility software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-24918 Description: Improper link resolution befo...

Intel Slim Bootloader 安全漏洞

Intel Slim Bootloader is a lightweight secure boot solution from Intel Corporation USA designed for the Intel platform. A security vulnerability exists in Intel Slim Bootloader that stems from a failure of the UEFI firmware protection mechanism, which could lead to elevated privileges...