12824 matches found
CVE-2026-0653 Insecure Access Control on TP-Link Tapo D235 and C260
On TP-Link Tapo C260 v1 and D235 v1, a guest‑level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows modification of protected device settings despite limited privileges. An attacker may change sensitive configuration...
CVE-2026-2202
A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow. The attack may be launched remotely. The exploit is now public and...
[SECURITY] Fedora 43 Update: rust-snpguest-0.9.2-4.fc43
Navigation utility for AMD SEV-SNP guest environment...
PT-2026-7324
Name of the Vulnerable Software and Affected Versions TP-Link Tapo C260 version 1 Description A guest-level authenticated user can bypass intended access restrictions by sending crafted requests to a synchronization endpoint. This allows modification of protected device settings despite limited...
TP-Link Tapo C260 安全漏洞
The TP-Link Tapo C260 is a surveillance camera produced by the TP-Link company. The TP-Link Tapo C260 v1 version has a security vulnerability. This vulnerability arises from the fact that guest-level authenticated users can bypass access restrictions through specially crafted requests, potentiall...
PT-2026-7451
Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a loss of guest memory integrity...
AMD Amd Epyc™ Embedded Processors和AMD EPYC 9005 Series 安全漏洞
AMD Amd Epyc™ Embedded Processors and AMD EPYC 9005 Series are products of American semiconductor company AMD. The Amd Epyc™ Embedded Processors are embedded processors. The AMD EPYC 9005 Series is a series of processors. Both the AMD Amd Epyc™ Embedded Processors and the AMD EPYC 9005 Series hav...
PT-2026-7445
A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE SOCKET policy on a different socket than the migration agent potentially resulting in loss of integrity...
PT-2026-7440
Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity...
Siemens SCALANCE and RUGGEDCOM Incorrect Authorization (CVE-2025-40568)
An internal session termination functionality in the web interface of affected products contains an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with guest role to terminate legitimate users' sessions. This plugin only works with Tenable.ot. Pleas...
PT-2026-7447
Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU. This can potentially lead to a loss of confidentiality and integrity in guest memory...
AMD Processors 安全漏洞
AMD Processors are a series of processors developed by American semiconductor company AMD. There are security vulnerabilities in AMD Processors, which stem from improper access controls and may lead to loss of confidentiality and integrity of guest memory. The following products are affected: AMD...
AMD多款产品 安全漏洞
AMD EPYC and others are products of American semiconductor company AMD. AMD EPYC is a high-performance server processor. Amd Epyc™ Embedded Processors are embedded processors. AMD EPYC Processors are a series of multi-core processors. Several AMD products have security vulnerabilities; these...
AMD EPYC 安全漏洞
The AMD EPYC is a high-performance server processor developed by American semiconductor company AMD. There are security vulnerabilities in the AMD EPYC™ 9005 Series Processors and the AMD EPYC™ Embedded 9005 Series Processors. These vulnerabilities stem from insufficient data removal, which may...
AMD EPYC Processor 安全漏洞
The AMD EPYC Processor is a series of multi-core processors developed by American semiconductor company AMD. There is a security vulnerability in the AMD EPYC Processor, which stems from improper access control. This vulnerability may lead to a loss of integrity in SEV-SNP guest memory...
PT-2026-7444
Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially resulting in a loss of SEV-SNP guest memory integrity...
PT-2026-7450
Name of the Vulnerable Software and Affected Versions AMD Secure Encrypted Virtualization SEV firmware affected versions not specified Description An improper initialization within the AMD Secure Encrypted Virtualization SEV firmware can allow an attacker with administrator privileges to corrupt...
Siemens SCALANCE and RUGGEDCOM Incorrect Authorization (CVE-2025-40567)
The Load Rollback functionality in the web interface of affected products contains an incorrect authorization check vulnerability. This could allow an authenticated remote attacker with guest role to make the affected product roll back configuration changes made by privileged users. This plugin...
CVE-2026-2202
A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow. The attack may be launched remotely. The exploit is now public and...
CVE-2026-2202
A vulnerability was detected in Tenda AC8 16.03.33.05. Affected is the function fromSetWifiGusetBasic of the file /goform/WifiGuestSet of the component httpd. The manipulation of the argument shareSpeed results in buffer overflow. The attack may be launched remotely. The exploit is now public and...