CVE-2024-45570

Memory corruption may occur during IO configuration processing when the IO port count is invalid...

DEBIAN-CVE-2025-37825

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds access in nvmetenableport When trying to enable a port that has no transport configured yet, nvmetenableport uses NVMFTRTYPEMAX 255 to query the transports array, causing an out-of-bounds access: 106.0586...

UBUNTU-CVE-2025-37825

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix out-of-bounds access in nvmetenableport When trying to enable a port that has no transport configured yet, nvmetenableport uses NVMFTRTYPEMAX 255 to query the transports array, causing an out-of-bounds access: 106.0586...

CVE-2025-37822 riscv: uprobes: Add missing fence.i after building the XOL buffer

In the Linux kernel, the following vulnerability has been resolved: riscv: uprobes: Add missing fence.i after building the XOL buffer The XOL execute out-of-line buffer is used to single-step the replaced instructions for uprobes. The RISC-V port was missing a proper fence.i i$ flushing after...

firewalld bug fix update

An update is available for firewalld. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list firewalld is a firewall service daemon that provides a dynamic customizable...

CVE-2025-25504

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC In AV over IP products v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges...

Configuring the SSH Service Port Properly

A server typically has multiple NICs and IP addresses. You need to plan IP addresses to determine which ones are used for services or management. Not all IP addresses need to listen on SSH connections. You can specify only some IP addresses to perform SSH connections to reduce the attack surface...

TOTOLINK N150RT IP Port Filtering Component Cross-Site Scripting Vulnerability

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT version 3.4.0-B20190525 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the IP Port Filtering component, whi...

Configure Proper Policies for INPUT of nftables

The INPUT chain is used to filter packets received from external systems. For any service provided for external systems, configure the corresponding INPUT policy and enable the related port so that external clients can access the service through the port. If the policy is not set, all packets tha...

CVE-2024-45570

Memory corruption may occur during IO configuration processing when the IO port count is invalid...

CVE-2024-45570

CVE-2024-45570 is a memory corruption issue in Qualcomm chipsets that occurs during IO configuration processing when the IO port count is invalid. The vulnerability affects the IO configuration path (component/driver/function) and is described with a local attack vector, low authentication requir...

CVE-2024-45570 Use of Out-of-range Pointer Offset in Camera Driver

Memory corruption may occur during IO configuration processing when the IO port count is invalid...

[SECURITY] Fedora 41 Update: kappanhang-0-0.3.20250427gitdffb773.fc41

Remotely open audio channels and a serial port to an Icom RS-BA1 server for ex. Icom IC-705 transceiver...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from memory corruption during IO configuration processing when the IO port count is invalid...

PT-2025-19850 · Qualcomm · Snapdragon +56

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: Memory corruption may occur during IO configuration processing when the IO port count is invalid. This issue is related to the processing of IO configuration and can lead to memory corruptio...

Crestron Automate VX 安全漏洞

Crestron Automate VX is an enterprise-grade intelligent space automation platform with integrated AV control, IoT device management, and data analytics from Crestron USA. A security vulnerability exists in Crestron Automate VX versions 5.6.8161.21536 through 6.4.0.49 that originates from the...

CVE-2025-25504

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC In AV over IP products v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges...

CVE-2025-25504

An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC In AV over IP products v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges...

virtuoso-opensource security update

1:6.1.6-7.0.1 - Back port fix for CVE-2024-57656 Orabug:37856848...

PT-2025-19713

Name of the Vulnerable Software and Affected Versions Gefen WebFWC In AV over IP products versions 1.70, 1.85h, 1.86v Description An issue in the /usr/local/bin/jncs.sh script allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute...