2333 matches found
PT-2025-19724 · NetGear · Netgear Rax5
Name of the Vulnerable Software and Affected Versions: NETGEAR RAX5 version 1.0.2.26 Description: A command injection issue was discovered in the NETGEAR RAX5 AX1600 WiFi Router via the iface parameter in the vif enable function. This allows for potential exploitation. Recommendations: For versio...
CVE-2025-44865
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2023-53054
In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low power, PM suspend / resume routines call: dwc2lowlevelhwenable - devmaddactionorreset. This adds a new devres each time. This may als...
DEBIAN-CVE-2023-53054
In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: fix a devres leak in hwenable upon suspend resume Each time the platform goes to low power, PM suspend / resume routines call: dwc2lowlevelhwenable - devmaddactionorreset. This adds a new devres each time. This may als...
DEBIAN-CVE-2022-49902
In the Linux kernel, the following vulnerability has been resolved: block: Fix possible memory leak for rqwb on adddisk failure kmemleak reported memory leaks in deviceadddisk: kmemleak: 3 new suspected memory leaks unreferenced object 0xffff88800f420800 size 512: comm "modprobe", pid 4275, jiffi...
UBUNTU-CVE-2022-49861
In the Linux kernel, the following vulnerability has been resolved: dmaengine: mvxorv2: Fix a resource leak in mvxorv2remove A clkprepareenable call in the probe is not balanced by a corresponding clkdisableunprepare in the remove function. Add the missing call...
UBUNTU-CVE-2022-49781
In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd: Fix crash due to race between amdpmuenableall, perf NMI and throttling amdpmuenableall does: if !testbitidx, cpuc-activemask continue; amdpmuenableeventcpuc-eventsidx; A perf NMI of another event can come between...
UBUNTU-CVE-2025-37784
In the Linux kernel, the following vulnerability has been resolved: net: ti: icss-iep: Fix possible NULL pointer dereference for perout request The ICSS IEP driver tracks perout and pps enable state with flags. Currently when disabling pps and perout signals during icssiepexit, results in NULL...
UBUNTU-CVE-2025-23144
In the Linux kernel, the following vulnerability has been resolved: backlight: ledbl: Hold ledaccess lock when calling ledsysfsdisable Lockdep detects the following issue on led-backlight removal: 142.315935 ------------ cut here ------------ 142.315954 WARNING: CPU: 2 PID: 292 at...
CVE-2025-44865: Improper Neutralization of Special Elements used in a Command
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
Tenda W20E 安全漏洞
The Tenda W20E is a router from the Chinese company Tenda. The Tenda W20E suffers from a command injection vulnerability that stems from the formSetDebugCfg function enable parameter failing to properly filter construct command special characters, commands, and so on. No detailed vulnerability...
CVE-2025-44865
Tenda W20E V15.11.0.6 was found to contain a command injection vulnerability in the formSetDebugCfg function via the enable parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
PT-2025-18578 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A resource leak issue has been identified in the Linux kernel, specifically in the dmaengine mv xor v2 component. The problem arises from an unbalanced clk prepare enable call in the...
CVE-2025-29209
TOTOLINK X18 v9.1.0cu.2024B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub41105C function of cstecgi .cgi...
CVE-2025-29209
TOTOLINK X18 v9.1.0cu.2024B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub41105C function of cstecgi .cgi...
SUSE CVE-2025-22084
In the Linux kernel, the following vulnerability has been resolved: w1: fix NULL pointer dereference in probe The w1uartprobe function calls w1uartserdevopen which includes devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer...
CVE-2025-29209: Improper Neutralization of Special Elements used in a Command
TOTOLINK X18 v9.1.0cu.2024B20220329 has an unauthorized arbitrary command execution in the enable parameter' of the sub41105C function of cstecgi .cgi...
CVE-2025-29209
The TOTOLINK X18 wireless router, specifically version v9.1.0cu.2024_B20220329 , is vulnerable to unauthorized arbitrary command execution . The root cause is an improper neutralization of special elements in the enable parameter of the sub_41105C function within the cstecgi.cgi file. An attacker...
TOTOLINK X18 安全漏洞
The TOTOLINK X18 is a wireless router from TOTOLINK that provides a high-speed and stable wireless network connection. The TOTOLINK X18 suffers from a command execution vulnerability that originates in the enable parameter of the sub41105C function of the cstecgi.cgi file. An attacker can exploit...