23813 matches found
CVE-2025-59105 Unencrypted Flash Storage in dormakaba access manager
With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...
CVE-2025-59105
With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...
ROS-20260126-73-0036
A vulnerability in the f2fs component of the Linux operating system kernel is related to unchecked array indexing. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
PT-2026-4755
With physical access to the device and enough time an attacker can desolder the flash memory, modify it and then reinstall it because of missing encryption. Thus, essential files, such as "/etc/passwd", as well as stored certificates, cryptographic keys, stored PINs and so on can be modified and...
Dormakaba Access Manager security vulnerabilities
The Dormakaba Access Manager is a smart hardware controller developed by the Dormakaba company in the United States. The Dormakaba Access Manager has a security vulnerability, which stems from unencrypted flash memory. Physical access allows modification or reading of sensitive files, potentially...
PT-2026-4765
CVE-2026-24646 - Adobe Flash Player Unvalidated Redirect CVE ID : CVE-2026-24646 Published : Jan. 24, 2026, 4:15 a.m. | 1 hour, 8 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
The vulnerability of the f2fs_write_cache_pages() function in the fs/f2fs/data.c module of the F2FS file system support in Linux’s kernel allows a hacker to cause a service failure.
The vulnerability of the f2fswritecachepages function in the fs/f2fs/data.c module of the F2FS file system support in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the f2fs_recover_fsync_data() function in the fs/f2fs/super.c module of the F2FS file system support module for Linux operating systems allows a hacker to trigger a service failure.
The vulnerability of the f2fsrecoverfsyncdata function in the fs/f2fs/super.c module of the F2FS file system support for Linux operating systems is related to the lack of a check on the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-004856)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004856 advisory. In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in apflashinit offindmatchingnode returns a node pointer with refcou...
Azure Linux 3.0 Security Update: kernel (CVE-2025-38428)
"The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-38428 advisory. - In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu - check record size in...
Azure Linux 3.0 Security Update: kernel (CVE-2024-49859)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-49859 advisory. - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to check atomicfile in f2fs...
PT-2026-4341
CVE-2026-24022 - Adobe Flash Unvalidated Redirect CVE ID : CVE-2026-24022 Published : Jan. 21, 2026, 5:16 a.m. | 1 hour, 41 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
PT-2026-4332
CVE-2026-23911 - Adobe Flash Player Unserialize Buffer Overflow CVE ID : CVE-2026-23911 Published : Jan. 20, 2026, 5:16 a.m. | 1 hour, 29 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...
ROS-20260119-7329
A vulnerability in the ufsbsgremove function of the drivers/ufs/core/ufsbsg.c module of the Linux kernel's UFS Universal Flash Storage host controller support is related to the reuse of previously freed memory. Exploitation of the vulnerability could allow an attacker to affect the confidentialit...
MiracleLinux 7 : fltk-1.3.4-1.el7, tigervnc-1.8.0-1.el7 (AXSA:2017-2026:01)
The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2017-2026:01 advisory. fltk FLTK pronounced fulltick is a cross-platform C GUI toolkit. It provides modern GUI functionality without the bloat, and supports 3D graphics vi...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001103)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001103 advisory. The sanitycheckckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001548)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001548 advisory. An issue was discovered in the Linux kernel through 4.17.10. There is a NULL pointer dereference in fscryptdopagecrypto in fs/crypto/crypto.c when operating on a fil...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000661)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000661 advisory. In the Linux kernel before 4.9.6, there is an off by one in the drivers/mtd/spi-nor/cadence-quadspi.c cqspisetupflash function. There are CQSPIMAXCHIPSELECT elements...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004056)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004056 advisory. In the Linux kernel 5.0.21, mounting a crafted f2fs filesystem image can cause a NULL pointer dereference in f2fsrecoverfsyncdata in fs/f2fs/recovery.c. This is...
