60224 matches found
CVE-2026-45198 GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
CVE-2026-45198
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
CVE-2026-45198 GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
EUVD-2026-54346
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
CVE-2026-45198
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
EUVD-2026-54185
A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...
CVE-2026-49007: Use of Hard-coded Credentials
By accessing unencrypted information in the device firmware, an attacker can obtain the initial login credentials for the device's web interface...
CVE-2026-49006: Use of Hard-coded Cryptographic Key
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to TLS transmission...
HPESBHF05068 rev.1 - HPE Cray XD670 Server Using AMI BIOS, Multiple Vulnerabilities
Potential Security Impact: Local: Arbitrary Code Execution, Denial of Service DoS, Disclosure of Information, Escalation of Privilege, Unauthorized Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 HFP 2026.05.00 CVSS Scores: | CVE | CVS...
CVE-2026-49008: Use of Hard-coded Cryptographic Key
By accessing unencrypted information in the device firmware, an attacker can obtain credentials related to the integrity verification of a specific application function on the device...
CVE-2026-45198: Untrusted Pointer Dereference
Kernel software from a non-secure operating system on a platform with Trusted Execution Environment support, may cause GPU Firmware to boot up using data from non-secure memory. The GPU thread of control Firmware uses a pointer from non-secure memory belonging to the Rich Execution Environment RE...
CVE-2026-49005: Use of Password Hash With Insufficient Computational Effort
The root password hash of the device can be obtained through unencrypted information in the firmware...
HPESBHF05066 rev.1 - HPE Cray XD670 Server Using Certain Intel Processors, INTEL-SA-01396, 2026.1 IPU, Intel Processor Firmware Advisory, Local Escalation of Privilege Vulnerability
Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray XD670 - Prior to 2.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2025-31648 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N | 3.9 |...
SUSE CVE-2026-64587
In the Linux kernel, the following vulnerability has been resolved: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/TX interrupts are enabled later, in arcemacopen, so probe should not see interrupt delivery in the usual case. However, hardware may still present stale...
CVE-2026-19061
A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...
Exploit for Signal Handler Race Condition in Sonicwall Sma_6200_Firmware
C...
CVE-2026-19061 Insta InstaKNXServiceApp Firmware Update CreateWebClientAndDownloadFileList data authenticity
A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...
CVE-2026-19061
CVE-2026-19061 affects Insta InstaKNXServiceApp 1.2.3.1469, specifically the Firmware Update Handler’s CreateWebClientAndDownloadFileList function. The issue is insufficient verification of data authenticity, with exploitation described as remote and technically complex. No remediation or version...
CVE-2026-19061 Insta InstaKNXServiceApp Firmware Update CreateWebClientAndDownloadFileList data authenticity
A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected by this issue is the function CreateWebClientAndDownloadFileList of the component Firmware Update Handler. Executing a manipulation can lead to insufficient verification of data authenticity. It is possible to launch the attac...
