VulnCheck KEV: CVE-2020-36870

Various Ruijie Gateway EG and NBR models firmware versions 11.16B9P1 11.94B12P1 contain a code execution vulnerability in the EWEB management system that can be abused via front-end functionality. Attackers can exploit front-end code when features such as guest authentication, local server...

Solidigm DC 安全漏洞

Solidigm DC is a solid state drive product from Solidigm, Inc. A security vulnerability exists in Solidigm DC that stems from improper firmware resource management and could lead to unauthorized access to a locked storage device by a local or physical attacker...

The vulnerability of the sub_426EF8() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub426EF8 function in TOTOLINK LR350 router microprogramming software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause service interruptions remotely...

The vulnerability of the urldecode() function in TOTOLINK A7000R router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the urldecode function in TOTOLINK A7000R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

The vulnerability of the sub_4232EC() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub4232EC function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sub_42396C() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub42396C function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

Lexmark Printers Improper Validation of Integrity Check Value (CVE-2023-50738)

A new feature to prevent Firmware downgrades was recently added to some Lexmark products. A method to override this downgrade protection has been identified. Lexmark documentation recommends that access to the Firmware Updates be restricted to trusted personnel. %NASLMINLEVEL 80900 C Tenable, Inc...

Oracle Linux 9 : linux-firmware (ELSA-2025-25744)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25744 advisory. 20251030-999.44.1.gite9292517.el9 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...

PT-2025-45501

Name of the Vulnerable Software and Affected Versions Solidigm DC Products affected versions not specified Description An issue with resource management in the firmware of certain Solidigm DC Products could allow an attacker with local or physical access to gain unauthorized access to a locked...

PT-2025-45502

Name of the Vulnerable Software and Affected Versions Solidigm DC Products affected versions not specified Description An issue involving improper resource management in the firmware of certain Solidigm DC Products exists. An attacker with local or physical access could potentially gain...

Solidigm DC 安全漏洞

Solidigm DC is a solid state drive product from Solidigm, Inc. A security vulnerability exists in Solidigm DC that stems from improper firmware resource management, which could result in unauthorized access to a locked storage device or a denial of service attack...

The vulnerability of the sub_422880() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub422880 function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sub_426EF8() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub426EF8 function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

Oracle Linux 7 : linux-firmware (ELSA-2025-25742)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25742 advisory. 20251030-999.44.1.gite9292517.el7 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...

Oracle Linux 10 : linux-firmware (ELSA-2025-25745)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25745 advisory. 20251030-999.44.1.gite9292517.el10 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from...

Oracle Linux 8 : linux-firmware (ELSA-2025-25743)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-25743 advisory. 20251030-999.44.1.gite9292517.el8 - Include AMD ucode fix Orabug: 38523856 CVE-2025-62626 Tenable has extracted the preceding description block directly from t...

The vulnerability of the sub_421A04() function in TOTOLINK A7000R router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of sub421A04 in the microprogramming software of TOTOLINK A7000R routers is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sub_421CF0() function in TOTOLINK A7000R router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the sub421CF0 function in TOTOLINK A7000R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the sub_4222E0() function in TOTOLINK A7000R router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the sub4222E0 function in TOTOLINK A7000R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the UEFI microprogramming software in embedded platforms for artificial intelligence from NVIDIA, the Jetson Orin Series and Jetson Xavier Series, allows a hacker to trigger a system failure.

The vulnerability of the UEFI microprogramming system in embedded platforms for artificial intelligence, such as NVIDIA Jetson Orin Series and NVIDIA Jetson Xavier Series, is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to cause service...