7519 matches found
CVE-2025-31703
A vulnerability found in Dahua NVR/XVR device. A third-party malicious attacker with physical access to the device may gain access to a restricted shell via the serial port, and bypasses the shell's authentication mechanism to escalate privileges...
CVE-2026-32724
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc1, a heap-use-after-free is detected in the MavlinkShell::available function. The issue is caused by a race condition between the MAVLink receiver thread which handles shell creation/destruction and the telemetry sender thre...
CVE-2019-25469
Folder Lock 7.7.9 contains a buffer overflow vulnerability in the serial number registration field that allows local attackers to crash the application by submitting an oversized payload. Attackers can paste a 6000-byte buffer of arbitrary data into the 'Serial Number and Registration Key' field ...
CVE-2026-32291
The GL-iNet Comet GL-RM1 KVM before 1.8.2 does not require authentication on the UART serial console. This attack requires physically opening the device and connecting to the UART pins...
CVE-2026-32706
PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, The crsfrc parser accepts an oversized variable-length known packet and copies it into a fixed 64-byte global buffer without a bounds check. In deployments where crsfrc is enabled on a CRSF serial port, an...
net: usb: kalmia: validate USB endpoints
...
can: usb: etas_es58x: correctly anchor the urb in the read bulk callback
...
can: usb: f81604: correctly anchor the urb in the read bulk callback
...
net: usb: pegasus: validate USB endpoints
...
can: usb: f81604: handle short interrupt urb messages properly
...
can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message
...
ALSA: usb-audio: Use correct version for UAC3 header validation
...
net: usb: kaweth: validate USB endpoints
...
CVE-2026-4346: Cleartext Storage of Sensitive Information
The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial interface remains enabled and protected by weak authentication. An attacker with physical access and the ability to connect to the...
PT-2026-36071
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.4 Wireshark versions 4.4.0 through 4.4.14 Description An infinite loop in the USB HID protocol dissector can lead to a denial of service. Recommendations Update Wireshark versions 4.6.0 through 4.6.4 to a...
The vulnerability of the pch_request_dma() function in the drivers/tty/serial/pch_uart.c module of the console TTY driver in the Linux kernel’s serial port allows a attacker to cause a service failure.
The vulnerability of the pchrequestdma function in the drivers/tty/serial/pchuart.c file of the TTY driver in the Linux kernel’s serial port module is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the lpuart_set_termios() function in the drivers/tty/serial/fsl_lpuart.c file of the console TTY driver in the Linux kernel’s serial port layer allows a attacker to cause a service failure.
The vulnerability of the lpuartsettermios function in the drivers/tty/serial/fsllpuart.c file of the console TTY driver in the Linux kernel’s serial port layer is related to the assignment of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the ata_tport_add() function in the drivers/ata/libata-transport.c file of the SATA/PATA driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the atatportadd function in the drivers/ata/libata-transport.c file of the Linux SATA/PATA driver kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
TP-Link TL-WR850N 安全漏洞
The TP-Link TL-WR850N is a WiFi router produced by the TP-Link company. The TP-Link TL-WR850N v3 has a security vulnerability. This vulnerability arises from the fact that, when the serial interface is enabled and under weak authentication protection, management credentials and Wi-Fi credentials...
The vulnerability in the `serial8250_register_ports()` function of the `drivers/tty/serial/8250/8250_core.c` file of the console support driver for the serial port in the Linux kernel allows a attacker to cause a service failure.
The vulnerability of the serial8250registerports function in the driver/tty/serial/8250/8250core.c file of the console support driver for the serial port in the Linux kernel relates to the exposure of confidential information. Exploiting this vulnerability could allow an attacker to cause a servi...