kernel: nvmet: fix out-of-bounds access in nvmet_enable_port

An out-of-bounds access vulnerability was found in the Linux kernel's nvme subsystem in the nvmetenableport function. The vulnerability can occur when a port is enabled without a transport type configured, causing the function to use the NVMFTRTYPEMAX value 255 as an array index into the...

The vulnerability of the /goform/saveAutoQos function in the microprogramming router Tenda AC15 allows a attacker to execute arbitrary code.

The vulnerability of the /goform/saveAutoQos microprogramming system for Tenda AC15 routers lies in the fact that the operation’s output goes beyond the buffer in memory when processing the enable parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990579)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990579 advisory. In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: rk3399dmc: Disable edev on remove Otherwise we hit an unablanced enable-count when...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989566)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989566 advisory. In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: rk3399dmc: Disable edev on remove Otherwise we hit an unablanced enable-count when...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988954)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988954 advisory. In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: rk3399dmc: Disable edev on remove Otherwise we hit an unablanced enable-count when...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989738)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989738 advisory. In the Linux kernel, the following vulnerability has been resolved: dmaengine: mvxorv2: Fix a resource leak in mvxorv2remove A clkprepareenable call in the probe is...

CVE-2025-12367

The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.3.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Author-level...

CVE-2025-12367 SiteSEO – SEO Simplified <= 1.3.1 - Missing Authorization to Authenticated (Author+) Plugin Settings Update

The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.3.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Author-level...

Tenda O3 Buffer Overflow Vulnerability (CNVD-2025-26876)

Tenda O3 is an outdoor wireless bridge from Tenda, China. The Tenda O3 suffers from a buffer overflow vulnerability that stems from the failure of the parameter enable of the SetValue/GetValue function in the file /goform/sysAutoReboot to correctly validate the length of the input data, which can...

Tenda O3 form/setDhcpConfig function function buffer overflow vulnerability

Tenda O3 is an outdoor wireless bridge from Tenda, China. Tenda O3 1.0.0.10 version of the buffer overflow vulnerability exists, the vulnerability stems from the file /goform/setDhcpConfig function SetValue/GetValue parameter dhcpEn fails to correctly validate the length of the input data size, t...

TOTOLINK A3300R enable parameter buffer overflow vulnerability

The TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A3300R version 17.0.0cu.557B20221024, which originates from the parameter enable in the file /cgi-bin/cstecgi.cgi that fails to correctly validate the length and siz...

CVE-2025-46363

Dell Secure Connect Gateway SCG 5.0 Application and Appliance versions 5.26.00.00 - 5.30.00.00, contain a Relative Path Traversal vulnerability in the SCG exposed for an internal collection download REST API if this REST API is enabled by Admin user from UI. A low privileged attacker with remote...

CVE-2025-12260

A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557B20221024. The impacted element is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. Such manipulation of the argument enable leads to stack-based buffer overflow. It is possible to...

CVE-2025-12214

A vulnerability was detected in Tenda O3 1.0.0.102478. This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a manipulation of the argument enable results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and...

CVE-2025-12214

CVE-2025-12214 affects Tenda O3 (outdoor wireless bridge) 1.0.0.10(2478). The vulnerability resides in the SetValue/GetValue function of the file /goform/sysAutoReboot, where improper validation of the enable argument leads to a stack-based buffer overflow. This can be triggered remotely and has ...

CVE-2025-12214 Tenda O3 sysAutoReboot GetValue stack-based overflow

A vulnerability was detected in Tenda O3 1.0.0.102478. This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a manipulation of the argument enable results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and...

The vulnerability of components related to DRM, AMD, and PM in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/PM components of the Linux operating system is related to improper error handling in the functions sidpmenable and sidpmprocessinterrupt. Exploiting this vulnerability can allow a hacker to cause a service failure...

Siemens SIMATIC Devices NULL Pointer Dereference (CVE-2025-21638)

In the Linux kernel, the following vulnerability has been resolved: sctp: sysctl: authenable: avoid using current-nsproxy As mentioned in a previous commit of this series, using the 'net' structure via 'current' is not recommended for different reasons: - Inconsistency: getting info from the...

Tenda O3 安全漏洞

Tenda O3 is an outdoor wireless bridge from Tenda, China. The Tenda O3 suffers from a buffer overflow vulnerability that stems from the failure of the parameter enable of the SetValue/GetValue function in the file /goform/sysAutoReboot to correctly validate the length of the input data, which can...

PT-2025-43921

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R version 17.0.0cu.557 B20221024 that allows for remote manipulation of the enable argument within the setSyslogCfg function located in the...