26424 matches found
CVE-2023-53293
CVE-2023-53293 has multiple feeds. The OSV entries describe a Linux kernel Bluetooth issue in the btrtl driver: the function btrtl_set_quirks() accessed btrtl_dev->ic_info->lmp_subver and could dereference NULL when a Realtek Bluetooth controller is used with an unsupported driver, risking ...
CVE-2023-53293
Removed by vendor...
CVE-2023-53293 Bluetooth: btrtl: check for NULL in btrtl_set_quirks()
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: check for NULL in btrtlsetquirks The btrtlsetquirks has accessed btrtldev-icinfo-lmpsubver since b8e482d02513. However, if installing a Realtek Bluetooth controller without the driver supported, it will hit the...
usb: dwc3: Remove WARN_ON for device endpoint command timeouts
...
CVE-2023-53316: Use After Free
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself is being removed,...
CVE-2025-55834
A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component...
PT-2025-37983
Name of the Vulnerable Software and Affected Versions oa system oasys version 1.1 Description A SQL injection vulnerability exists in oa system oasys version 1.1. This allows a remote attacker to execute arbitrary code via the alph parameters in...
Fastwel PLC Command Injection Privilege Escalation
The vulnerability of the built-in software of the PLC Fastwel is related to the failure to take measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary operating system commands and elevate their...
PLC Fastwel DoS
The vulnerability of the built-in software of the PLC Fastwel relates to the manipulation of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2023-53252
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: use RCU for hciconnparams and iterate safely in hcisync hciupdateacceptlistsync...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from not properly handling the old state CRTC, which could lead to a null pointer dereference...
Fastwel PLC Arbitrary Command Privilege Escalation
The vulnerability of the built-in software of the PLC Fastwel is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands and elevate their privileges to the level of superuser...
PLC Fastwel URL Redirect
The vulnerability in the built-in software of the PLC Fastwel relates to the redirection of URLs to unreliable websites. Exploiting this vulnerability allows a malicious actor to redirect users to arbitrary URL addresses remotely...
Security Bulletin: NVIDIA DGX and HGX HMC and BMC - September 2025
NVIDIA has released a software update for NVIDIA® DGX and HGX HMC and BMC to address the security issues described below. To protect your system, download and install the latest update from the NVIDIA Developer Tools page. Go to NVIDIA Product Security. Details This section provides a summary of...
Linux Distros Unpatched Vulnerability : CVE-2022-50247
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: usb: xhci-mtk: fix leakage of shared hcd when fail to set wakeup irq Can not set the...
Linux Distros Unpatched Vulnerability : CVE-2022-50315
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ata: ahci: Match EMMAXSLOTS with SATAPMPMAXPORTS UBSAN complains about array-index-out-of-bounds: 1.980703 kernel: UBSAN: array-index-out-of-bounds in...
EulerOS 2.0 SP13 : kernel (EulerOS-SA-2025-2134)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : x86/fpu: KVM: Set the base guest FPU uABI size to sizeofstruct kvmxsave.CVE-2022-49557 A cross-privilege Spectre v2 vulnerability allows attackers...
CVE-2025-44034
SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the alph parameters in src/main/Java/cn/gson/oasys/controller/address/AddrController...
OASYS security vulnerabilities
oasys is an OA office automation system by the individual developer misstt123. A security vulnerability exists in oasys version 1.1, which stems from a misuse of the parameter aleph in the file src/main/Java/cn/gson/oasys/controller/address/AddrController, which could lead to an SQL injection...