PT-2025-50702

In aocc read of aoc channel dev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48618

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2025-201749

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48618

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48618

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48618

In processLaunchBrowser of CommandParamsFactory.java, there is a possible browser interaction from the lockscreen due to improper locking. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-48618

CVE-2025-48618 is an Android framework elevation-of-privilege vulnerability. In CommandParamsFactory.java, processLaunchBrowser could allow a browser interaction from the lockscreen due to improper locking, enabling physical escalation of privilege without user interaction. Impact is described as...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause an elevation of physical privileges...

The vulnerability of the rtl8150_start_xmit() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the rtl8150startxmit function in the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cpuset_write_resmask() function in the kernel/cgroup/cpuset.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the cpusetwriteresmask function in the kernel/cgroup/cpuset.c module of the Linux operating system is related to improper locking of resources. Exploiting this vulnerability can allow a attacker to cause service failures...

PUB-A-419088687

In aoccread of aocchanneldev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

The vulnerability of the spi_add_device() function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver allows a attacker to cause a service failure.

The vulnerability of the spiadddevice function in the drivers/spi/spi.c module of the Linux kernel’s SPI device support driver relates to improper locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Siemens SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-46791)

can: mcp251x: fix deadlock if an interrupt occurs during mcp251xopen The mcp251xhwwake function is called with the mpclock mutex held and disables the interrupt handler so that no interrupts can be processed while waking the device. This plugin only works with Tenable.ot. Please visit...

Siemens SCALANCE and RUGGEDCOM Devices Improper Locking (CVE-2024-44952)

driver core: vulnerability due to a potential deadlock due to improper handling of device attributes and driver detachment, which has been fixed by using synchronizercu to prevent race conditions. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

CVE-2025-10151

Improper locking vulnerability in Softing Industrial Automation GmbH gateways allows infected memory and/or resource leak exposure.This issue affects smartLink HW-PN: from 1.02 through 1.03 smartLink HW-DP: 1.31...

Siemens SIMATIC Devices Improper Locking (CVE-2024-38780)

In the Linux kernel, the following vulnerability has been resolved: dma-buf/sw-sync: don't enable IRQ from syncprintobj. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; ...

Siemens SIMATIC Devices Improper Locking (CVE-2024-38598)

In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Siemens SIMATIC and SCALANCE Devices Improper Locking (CVE-2025-21694)

fs/proc: softlockup in readvmcore This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503774; scriptversion"1.2";...

SmartLink HW-PN和SmartLink HW-DP 安全漏洞

SmartLink HW-PN and SmartLink HW-DP are both edge gateway products for industrial automation from SmartLink USA. A security vulnerability exists in SmartLink HW-PN version 1.03 and earlier and SmartLink HW-DP version 1.31, which stems from improper locking and could result in a memory or resource...

Siemens SIMATIC Devices Improper Locking (CVE-2024-27072)

In the Linux kernel, the following vulnerability has been resolved: media: usbtv: Remove useless locks in usbtvvideofree Remove locks calls in usbtvvideofree because are useless and may led to a deadlock as reported here: https://syzkaller.appspot.com/x/bisect.txt?x=166dc872180000 Also remove...