395 matches found
PT-2026-33339
Name of the Vulnerable Software and Affected Versions Yamaha SR-B30A version 2.40 Description An issue in the Bluetooth Low Energy BLE control interface allows remote attackers within BLE radio range to connect without authentication via the Sound Bar Remote protocol. Recommendations At the momen...
CVE-2026-37100
An issue in the Bluetooth Low Energy BLE control interface of the Yamaha SR-B30A sound bar firmware 2.40 Mobile App: Sound Bar Remote / version: 2.40 allows remote attackers within BLE radio range to connect without authentication via the Sound Bar Remote protocol...
EUVD-2026-18634
In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...
CVE-2026-23418
In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...
CVE-2026-23418 drm/xe/reg_sr: Fix leak on xa_store failure
In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...
CVE-2026-1392 SR WP Minify HTML <= 2.1 - Cross-Site Request Forgery to Settings Update
The SR WP Minify HTML plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.1. This is due to missing nonce validation on the srminifyhtmltheme function. This makes it possible for unauthenticated attackers to update plugin settings via a forged...
MiracleLinux 9 : kernel-5.14.0-611.9.1.el9_7 (AXSA:2025-11506:95)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11506:95 advisory. kernel: firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails CVE-2022-50087 kernel: sunrpc: fix client side handling of tls alerts...
CVE-2025-0980
Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials...
CVE-2022-0184
Insufficiently protected credentials vulnerability in 'TEPRA' PRO SR5900P Ver.1.080 and earlier and 'TEPRA' PRO SR-R7900P Ver.1.030 and earlier allows an attacker on the adjacent network to obtain credentials for connecting to the Wi-Fi access point with the infrastructure mode...
CVE-2025-0980
Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials...
CVE-2025-0980 JSON RPC authentication bypass in Nokia SR Linux
Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials...
CVE-2025-0980
Nokia SR Linux contains an authentication bypass in its JSON-RPC service. The vulnerability arises from invalid validation that allows access to JSON-RPC without valid credentials, enabling unauthorized access locally. Affected product: Nokia SR Linux (JSON-RPC interface); underlying issue: flawe...
CVE-2025-0980 JSON RPC authentication bypass in Nokia SR Linux
Nokia SR Linux is vulnerable to an authentication vulnerability allowing unauthorized access to the JSON-RPC service. When exploited, an invalid validation allows JSON RPC access without providing valid authentication credentials...
PT-2026-1577
Name of the Vulnerable Software and Affected Versions Nokia SR Linux affected versions not specified Description An authentication issue exists in Nokia SR Linux that permits unauthorized access to the JSON-RPC service. A flawed validation process allows access to the service without requiring...
Nokia SR Linux 安全漏洞
Nokia SR Linux is a network operating system from the Finnish company Nokia. A security vulnerability exists in Nokia SR Linux that originates from improper authentication and could lead to unauthorized access to JSON-RPC services...
CVE-2023-54070 igb: clean up in all error paths when enabling SR-IOV
In the Linux kernel, the following vulnerability has been resolved: igb: clean up in all error paths when enabling SR-IOV After commit 50f303496d92 "igb: Enable SR-IOV after reinit", removing the igb module could hang or crash depending on the machine when the module has been loaded with the maxv...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989732)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989732 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe platformgetresource ma...
EUVD-2015-1143
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987049)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987049 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe platformgetresource ma...