CVE-2022-50224

CVE-2022-50224 is a Linux kernel/KVM issue where NX is treated as a valid SPTE bit for NPT, enabling a mismatch that can trigger a WARN when reserved SPTE bits are set. Concrete details come from the Linux kernel KVM/mmu path, including a traceback and a mitigation involving NX handling when the ...

CVE-2022-50224 KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT Treat the NX bit as valid when using NPT, as KVM will set the NX bit when the NX huge page mitigation is enabled mindblowing and trigger the WARN that fires on reserved SPTE bits...

CVE-2022-50224 KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT Treat the NX bit as valid when using NPT, as KVM will set the NX bit when the NX huge page mitigation is enabled mindblowing and trigger the WARN that fires on reserved SPTE bits...

CVE-2022-50224: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Treat NX as a valid SPTE bit for NPT Treat the NX bit as valid when using NPT, as KVM will set the NX bit when the NX huge page mitigation is enabled mindblowing and trigger the WARN that fires on reserved SPTE bits...

Streamline NX Client 3.5.0 - 3.7.0 MiTM (2025-000006)

The version of Streamline NX Client installed on the remote host is between 3.5.0 and 3.7.0. It is, therefore, affected by a vulnerability as referenced in the 2025-000006 advisory. It contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-midd...

Streamline NX Client 3.5.0 < 3.243.0 Multiple Vulnerabilities (2025-000004 / 2025-000005)

The version of Streamline NX Client installed on the remote host is between 3.5.0 and 3.243.0. It is, therefore, affected by a vulnerability as referenced in the 2025-000004 and 2025-000005 advisories: - External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versio...

CVE-2025-48825

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code...

CVE-2025-46783

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product...

CVE-2025-36506

External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data...

CVE-2025-36506

External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data...

CVE-2025-46783

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product...

CVE-2025-48825

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code...

CVE-2025-48825

The CVE-2025-48825 affects Ricoh Streamline NX V3 PC Client, versions 3.5.0–3.7.0. The issue is use of a less trusted source, enabling a local-MITM attacker to eavesdrop upgrade requests and execute a malicious DLL with custom code. Impact is limited to scenarios where an attacker can position th...

CVE-2025-48825

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code...

CVE-2025-48825

RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.7.0 contains an issue with use of less trusted source, which may allow an attacker who can conduct a man-in-the-middle attack to eavesdrop upgrade requests and execute a malicious DLL with custom code...

CVE-2025-46783

CVE-2025-46783 affects RICOH Streamline NX V3 PC Client, versions 3.5.0–3.242.0. The issue is a path traversal flaw that could allow arbitrary code execution on the client by tampering with specific files used by the product. Connected sources corroborate the vulnerable range and the potential fo...

CVE-2025-46783

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product...

CVE-2025-46783

Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product...

CVE-2025-36506

CVE-2025-36506 affects Ricoh Streamline NX V3 PC Client, versions 3.5.0 to 3.242.0. The issue is an external control of file name or path (CWE-73) that allows a crafted request to overwrite arbitrary files in the filesystem with log data. Exploitation details are not provided beyond the vulnerabi...

CVE-2025-36506

External control of file name or path issue exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If an attacker sends a specially crafted request, arbitrary files in the file system can be overwritten with log data...