CVE-2024-0401 ASUS OVPN RCE

ASUS routers supporting custom OpenVPN profiles are vulnerable to a code execution vulnerability. An authenticated and remote attacker can execute arbitrary operating system commands by uploading a crafted OVPN profile. Known affected routers include ASUS ExpertWiFi, ASUS RT-AX55, ASUS RT-AX58U,...

CVE-2024-0401

CVE-2024-0401 affects multiple ASUS routers that support custom OpenVPN profiles. An authenticated, remote attacker can execute arbitrary OS commands by uploading a crafted OVPN profile, with impact on confidentiality, integrity, and availability per the cited sources. Affected models include: AS...

CVE-2024-35997

In the Linux kernel, the following vulnerability has been resolved: HID: i2c-hid: remove I2CHIDREADPENDING flag to prevent lock-up The flag I2CHIDREADPENDING is used to serialize I2C operations. However, this is not necessary, because I2C core already has its own locking for that. More importantl...

PT-2024-26766 · Linux +2 · Linux Kernel +2

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue arises when a userland application is executing vector code and receives a signal. Upon returning from the signal handler using the rt sigreturn syscall, the live vector stat...

Critical Photon OS Security Update - PHSA-2024-5.0-0274

Updates of 'linux-secure', 'linux-esx', 'linux', 'linux-rt' packages of Photon OS have been released...

PT-2024-9789

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.37 Description: The vulnerability is related to a possible dead-lock in the nr rt ioctl function. It occurs when the nr node list lock is acquired before the nr node lock, leading to a circular locking...

Moderate: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 9 : kernel-rt (RHSA-2024:2846)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2846 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...

Critical Photon OS Security Update - PHSA-2024-4.0-0607

Updates of 'linux', 'linux-aws', 'linux-secure', 'linux-rt' packages of Photon OS have been released...

SUSE SLES15 Security Update : kernel RT (Live Patch 0 for SLE 15 SP5) (SUSE-SU-2024:1491-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:1491-1 advisory. This update for the Linux Kernel 5.14.21-15050011 fixes one issue. The following security issue was fixed: - CVE-2024-0775: Fixed a use-after-free flaw...

CVE-2023-33548

Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...

CLSA-2024-1715000325 kernel: Fix of 25 CVEs

IB/hfi1: Fix bugs with non-PAGESIZE-end multi-iovec user SDMA requests CVE-2023-52474 - afunix: Fix null-ptr-deref in unixstreamsendpage. CVE-2023-4622 - sched/rt: picknextrtentity: check listentry CVE-2023-1077 - RDMA/irdma: Prevent zero-length STAG registration CVE-2023-25775 - block: add check...

ASUS RT-AC51U 安全漏洞

ASUS RT-AC51U is a wireless router from Asus China. A security vulnerability exists in ASUS RT-AC51U version 3.0.0.4.380.8591 and prior versions. An attacker can exploit the vulnerability to run arbitrary code via the WPA pre-shared key field...

CVE-2023-33548

The ASUS RT-AC51U wireless router is vulnerable to a Cross-Site Scripting (XSS) vulnerability in firmware versions up to and including 3.0.0.4.380.8591 . An attacker can exploit the WPA Pre-Shared Key field to execute arbitrary code . A published proof-of-concept was sighted on March 26, 2025. No...

CVE-2023-33548

Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...

CVE-2023-33548

Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...

PT-2024-12434

Name of the Vulnerable Software and Affected Versions ASUS RT-AC51U versions up to and including 3.0.0.4.380.8591 Description A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the WPA Pre-Shared Key field. This enables attackers to execute malicious scripts, potentially...

CVE-2023-33548: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code via the WPA Pre-Shared Key field...

CVE-2024-34473

An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...

CVE-2024-34473: Improper Input Validation

An issue was discovered in appmgr in O-RAN Near-RT RIC I-Release. An attacker could register an unintended RMR message type during xApp registration to disrupt other service components...