6123 matches found
Sony XAV-AX5500 1.13 - Firmware Update Validation Remote Code Execution (RCE)
Exploit Title: Sony XAV-AX5500 Firmware Update Validation Remote Code Execution Date: 11-Feb-2025 Exploit Author: lkushinada Vendor Homepage: https://www.sony.com/et/electronics/in-car-receivers-players/xav-ax5500 Software Link: https://archive.org/details/xav-ax-5500-v-113 Version: 1.13 Tested o...
The vulnerability of the iommu_report_device_fault() function in the Linux kernel’s IOMMU support driver allows a attacker to trigger a service failure.
The vulnerability of the iommureportdevicefault function in the Linux kernel’s IOMMU support driver is related to deficiencies in exception handling. Exploiting this vulnerability can allow an attacker to cause a service failure...
AMD NPU driver 输入验证错误漏洞
AMD NPU driver is a driver for an NPU module from UltraMicroelectronics AMD. A security vulnerability exists in AMD NPU driver that stems from an integer overflow that could lead to an out-of-bounds write by a local attacker, affecting integrity and availability...
DEBIAN-CVE-2025-21972
In the Linux kernel, the following vulnerability has been resolved: net: mctp: unshare packets when reassembling Ensure that the fraglist used for reassembly isn't shared with other packets. This avoids incorrect reassembly when packets are cloned, and prevents a memory leak due to circular...
CVE-2025-21895
In the Linux kernel, the following vulnerability has been resolved: perf/core: Order the PMU list to fix warning about unordered pmuctxlist Syskaller triggers a warning due to prevepc-pmu != nextepc-pmu in perfeventswaptaskctxdata. vmcore shows that two lists have the same perfeventpmucontext, bu...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a PMU list ordering issue resulting in a warning about an unordered pmuctxlist...
The vulnerability of the dfe_unit_gb_dependant component in the Virtuoso-OpenSource web application development platform allows a attacker to trigger a service failure.
The vulnerability of the dfeunitgbdependant component in the virtuoso-opensource web application development platform is related to the improper elimination of special elements used in SQL commands. Exploiting this vulnerability allows an attacker to cause service interruptions by sending special...
Arteche saTECH BCU 安全漏洞
The Arteche saTECH BCU is a flight room control unit from Arteche. A security vulnerability exists in the Arteche saTECH BCU version 2.1.3, which stems from a stored cross-site scripting attack that could lead to malicious code execution...
Arteche saTECH BCU 跨站请求伪造漏洞
The Arteche saTECH BCU is a flight room control unit from Arteche. A cross-site request forgery vulnerability exists in the Arteche saTECH BCU version 2.1.3, which stems from a cross-site request forgery that could allow an unauthorized attacker to perform malicious actions using the administrato...
Arteche saTECH BCU 安全漏洞
The Arteche saTECH BCU is a flight room control unit from Arteche. A security vulnerability exists in the Arteche saTECH BCU version 2.1.3 that originates from the transmission of unencrypted sensitive data using the HTTP protocol, which could lead to credential disclosure...
Qualys TRU Discovers Three Bypasses of Ubuntu Unprivileged User Namespace Restrictions
The Qualys Threat Research Unit TRU recently disclosed three security bypasses in Ubuntu's unprivileged user namespace restrictions. Qualys responsibly disclosed these vulnerabilities to the Ubuntu Security Team on January 15, 2025, and has been working with Ubuntu since then. Qualys TRU uncovere...
Hitachi Energy RTU500 代码问题漏洞
Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. A code issue vulnerability exists in the Hitachi Energy RTU500 control station functionality that originates from the possibility that an authenticated and authorized attacker could perform a CMU...
Hitachi Energy RTU500 安全漏洞
Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Energy RTU500 that stems from a specific sequence of attacks that could result in a reboot of the affected CMU...
Hitachi Energy RTU500 代码问题漏洞
Hitachi Energy RTU500 is a series of industrial control components from Hitachi, Ltd Hitachi, Japan. A code issue vulnerability exists in the Hitachi Energy RTU500 that stems from a specially crafted message sequence that could lead to a denial of service in the RTU500 CMU application...
com.github.sakserv:hadoop-mini-clusters (=0.0.14), com.github.sakserv:hadoop-mini-clusters-oozie (>=0.1.1 <=0.1.16) +13 more potentially affected by CVE-2025-26796 via org.apache.oozie:oozie-core (>=4.1.0 <=5.2.1)
org.apache.oozie:oozie-core MAVEN version =4.1.0, =0.1.1, =1.0, =1.2, =4.2.0, =5.2.0, =4.1.0, =4.2.0, =4.1.0, =4.1.0, =4.1.0, =4.1.0, =5.2.1 - org.kitesdk:kite-data-oozie =1.1.0 Source cves: CVE-2025-26796 Source advisory: OSV:GHSA-FMXW-76XQ-CMQQ...
msm_npu Race Condition / Memory Corruption
msmnpu has a race condition between npuhostunloadnetwork and npuhostexecnetworkv2 that leads to memory corruption...
iio: imu: kmx61: fix information leak in triggered buffer
...
PT-2025-22230
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential lockup issue in the Linux kernel has been identified and resolved. The problem occurs in the st lsm6dsx read tagged fifo function when pattern len is equal to zero and the...
SUSE CVE-2024-58073
In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check dpuplaneatomicprintstate for valid sspp Similar to the rpipe sspp protect, add a check to protect the pipe state prints to avoid NULL ptr dereference for cases when the state is dumped without a corresponding...
SUSE CVE-2024-58079
In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix crash during unbind if gpio unit is in use We used the wrong device for the device managed functions. We used the usb device, when we should be using the interface device. If we unbind the driver from the usb...