CVE-2025-69429

The ORICO NAS CD3510 version V1.9.12 and below contains an Incorrect Symlink Follow vulnerability that could be exploited by attackers to leak or tamper with the internal file system. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the...

CVE-2025-69430

An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 version equal to or prior to V1.9.12, DM3 version equal to or prior to V1.9.12, and DM200 version equal to or prior to V1.2.23 that could be exploited by attackers to leak or tamper with the intern...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the improper anchoring of the USB CAN driver in URB, potentially leading to memory leaks...

Linux Distros Unpatched Vulnerability : CVE-2026-23061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - can: kvaserusb: kvaserusbreadbulkcallback: fix URB memory leak Fix similar memory leak as in commit 7352e1d5932a can: gsusb: gsusbreceivebulkcallback: fix URB...

CVE-2025-69431

The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the NAS device's slot, and then access the USB drive's directory mounted on the NAS using the Sam...

CVE-2025-69430

An Incorrect Symlink Follow vulnerability exists in multiple Yottamaster NAS devices, including DM2 version equal to or prior to V1.9.12, DM3 version equal to or prior to V1.9.12, and DM200 version equal to or prior to V1.2.23 that could be exploited by attackers to leak or tamper with the intern...

PT-2026-5970

Name of the Vulnerable Software and Affected Versions ORICO NAS CD3510 versions V1.9.12 and below Description The ORICO NAS CD3510 is affected by an Incorrect Symlink Follow issue. This allows attackers to potentially leak or modify the internal file system. An attacker can format a USB drive to...

CVE-2025-69431

The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the NAS device's slot, and then access the USB drive's directory mounted on the NAS using the Sam...

CVE-2025-69429

The ORICO NAS CD3510 version V1.9.12 and below contains an Incorrect Symlink Follow vulnerability that could be exploited by attackers to leak or tamper with the internal file system. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the...

CVE-2025-69430

Multiple Yottamaster NAS devices are affected by an Incorrect Symlink Follow vulnerability, specifically models DM2 (version V1.9.12 and prior), DM3 (version V1.9.12 and prior), and DM200 (version V1.2.23 and prior). The root cause allows an attacker to gain unauthorized access to the internal fi...

CVE-2022-50976

A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...

CVE-2022-50976

A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...

CVE-2022-50976 Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB

A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...

CVE-2022-50976 Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB

A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...

EUVD-2022-55953

A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...

CVE-2026-23021

A flaw was found in the Linux kernel's net: usb: pegasus module. A local attacker with low privileges could exploit this vulnerability when the usbsubmiturb function fails during asynchronous writes to device registers. This can lead to a memory leak, potentially causing a Denial of Service DoS d...

kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing

A flaw was found in the Linux kernel's USB core configuration parsing. Specifically, the usbparsessendpointcompanion function incorrectly checks the descriptor type before its length, which can lead to reading data beyond the intended buffer. This out-of-bounds read vulnerability could allow a...

Innomic VibroLine Series 安全漏洞

The Innomic VibroLine Series is a professional vibration measurement and analysis system developed by the German company Innomic. The Innomic VibroLine Series has a security vulnerability: local attackers can reset the device’s password using an invalid reset file via USB, resulting in the comple...

PT-2026-5663

A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...

SUSE CVE-2026-23021

In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: fix memory leak in updateethregsasync When asynchronously writing to the device registers and if usbsubmiturb fail, the code fail to release allocated to this point resources...