CVE-2022-49572 tcp: Fix data-races around sysctl_tcp_slow_start_after_idle.

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpslowstartafteridle. While reading sysctltcpslowstartafteridle, it can be changed concurrently. Thus, we need to add READONCE to its readers...

CVE-2022-49572

In the Linux kernel, the following vulnerability has been resolved: tcp: Fix data-races around sysctltcpslowstartafteridle. While reading sysctltcpslowstartafteridle, it can be changed concurrently. Thus, we need to add READONCE to its readers...

CVE-2022-49322 tracing: Fix sleeping function called from invalid context on RT kernel

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix sleeping function called from invalid context on RT kernel When setting bootparams="traceevent=initcall:initcallstart tpprintk=1" in the cmdline, the outputprintk was called, and the spinlockirqsave was called in the...

CVE-2022-49149 rxrpc: Fix call timer start racing with call destruction

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix call timer start racing with call destruction The rxrpccall struct has a timer used to handle various timed events relating to a call. This timer can get started from the packet input routines that are run in softirq...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a call timer start and call destroy contention...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from ipgrexmit not properly validating csumstart, which could result in a buffer overflow...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stk1160 does not return the buffer state correctly when startstreaming fails...

Siemens APOGEE PXC and TALON TC Series Out-of-Bounds Read (CVE-2024-54090)

Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium MED or higher privileges to cause the device to enter an insecure cold start state. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...

BDCOM Behavior Management and Auditing System 操作系统命令注入漏洞

BDCOM Behavior Management and Auditing System is a behavior management and auditing system from BDCOM China. An operating system command injection vulnerability exists in BDCOM Behavior Management and Auditing System version 20250210 and prior versions, which stems from a system command injection...

PT-2025-7526

Name of the Vulnerable Software and Affected Versions BDCOM Behavior Management and Auditing System up to 20250210 Description A critical vulnerability has been found in the BDCOM Behavior Management and Auditing System. The issue affects the log operate clear function of the file...

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from Taiwan, China-based D-Link. The D-Link DSL-3782 suffers from a buffer overflow vulnerability that originates in the sstartip, sendip, dstartip, and dendip parameters, which can be exploited by an attacker to cause a denial of service...

CVE-2024-54090

A vulnerability has been identified in APOGEE PXC Series BACnet All versions, APOGEE PXC Series P2 Ethernet All versions, TALON TC Series BACnet All versions. Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium MED or higher...

Tenda AC18 Router Data Compromise

The vulnerability of the formSetPPTPServer function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the startIP parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of th...

Qardio Heart Health 安全漏洞

Qardio Heart Health is a heart monitoring management software from Qardio, Inc. in the United States. A security vulnerability exists in Qardio Heart Health that stems from the use of a specially crafted Python script that sends successive startMeasurement commands to an affected device over an...

CVE-2024-54090

A vulnerability has been identified in APOGEE PXC Series BACnet All versions, APOGEE PXC Series P2 Ethernet All versions, TALON TC Series BACnet All versions. Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium MED or higher...

CVE-2024-54090

CVE-2024-54090 affects APOGEE PXC Series (BACnet and P2 Ethernet) and TALON TC Series (BACnet). Affected devices contain an out-of-bounds read in the memory dump function, enabling a MED+ attacker with network access to drive the device into an insecure cold start state. CVSS metrics indicate MED...

CVE-2024-54090

A vulnerability has been identified in APOGEE PXC Series BACnet All versions, APOGEE PXC Series P2 Ethernet All versions, TALON TC Series BACnet All versions. Affected devices contain an out-of-bounds read in the memory dump function. This could allow an attacker with Medium MED or higher...

Astra Linux – Vulnerability in Firefox, Thunderbird

Unexpected marking operations at the beginning of the sweeping process could lead to a use-after-free vulnerability. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: userial: Fixed the issue where gsstartio crashed due to accessing a null pointer. In some extreme cases, when the uSerial driver is accessed by multiple threads, Thread A executes the open operation and calls gsOpen...

PT-2025-6199 · Unknown · Apogee Pxc Series +1

Name of the Vulnerable Software and Affected Versions: APOGEE PXC Series BACnet All versions APOGEE PXC Series P2 Ethernet All versions TALON TC Series BACnet All versions Description: A vulnerability has been identified that contains an out-of-bounds read in the memory dump function. This could...