7529 matches found
EUVD-2026-5283
The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...
CVE-2026-24932 An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...
PT-2026-5970
Name of the Vulnerable Software and Affected Versions ORICO NAS CD3510 versions V1.9.12 and below Description The ORICO NAS CD3510 is affected by an Incorrect Symlink Follow issue. This allows attackers to potentially leak or modify the internal file system. An attacker can format a USB drive to...
CVE-2025-69431
The ZSPACE Q2C NAS contains a vulnerability related to incorrect symbolic link following. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the NAS device's slot, and then access the USB drive's directory mounted on the NAS using the Sam...
PT-2026-5764
Name of the Vulnerable Software and Affected Versions ADM versions 4.1.0 through 4.3.3.ROF1 ADM versions 5.0.0 through 5.1.1.RCI1 Description The DDNS update function does not properly validate the hostname of the DDNS server’s TLS/SSL certificate. Despite using HTTPS, improper validation allows ...
CVE-2025-69429
The ORICO NAS CD3510 version V1.9.12 and below contains an Incorrect Symlink Follow vulnerability that could be exploited by attackers to leak or tamper with the internal file system. Attackers can format a USB drive to ext4, create a symbolic link to its root directory, insert the drive into the...
The vulnerability of the `ssip_pn_open()` function in the `drivers/hsi/clients/ssi_protocol.c` file of the Linux kernel’s high-speed synchronous serial interface driver allows a hacker to cause a service failure.
The vulnerability of the ssippnopen function in the drivers/hsi/clients/ssiprotocol.c file of the Linux kernel’s High-Speed Synchronous Serial Interface driver is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
CVE-2025-69430
Multiple Yottamaster NAS devices are affected by an Incorrect Symlink Follow vulnerability, specifically models DM2 (version V1.9.12 and prior), DM3 (version V1.9.12 and prior), and DM200 (version V1.2.23 and prior). The root cause allows an attacker to gain unauthorized access to the internal fi...
CVE-2022-50976
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...
EUVD-2022-55956
An unauthenticated adjacent attacker could potentially disrupt operations by switching between multiple configuration presets via Modbus RS485...
CVE-2022-50976
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...
CVE-2022-50976 Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...
CVE-2022-50976 Innomic VibroLine Configurator and avibia Configurator allow unintended device reset via USB
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...
EUVD-2022-55953
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...
CVE-2026-23021
A flaw was found in the Linux kernel's net: usb: pegasus module. A local attacker with low privileges could exploit this vulnerability when the usbsubmiturb function fails during asynchronous writes to device registers. This can lead to a memory leak, potentially causing a Denial of Service DoS d...
kernel: Linux kernel: Denial of Service via out-of-bounds read in USB configuration parsing
A flaw was found in the Linux kernel's USB core configuration parsing. Specifically, the usbparsessendpointcompanion function incorrectly checks the descriptor type before its length, which can lead to reading data beyond the intended buffer. This out-of-bounds read vulnerability could allow a...
PT-2026-5663
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...
Innomic VibroLine Series 安全漏洞
The Innomic VibroLine Series is a professional vibration measurement and analysis system developed by the German company Innomic. The Innomic VibroLine Series has a security vulnerability: local attackers can reset the device’s password using an invalid reset file via USB, resulting in the comple...
Innomic VibroLine Series 访问控制错误漏洞
The Innomic VibroLine Series is a professional vibration measurement and analysis system developed by the German company Innomic. The Innomic VibroLine Series has a security access control vulnerability; this vulnerability arises from unverified neighboring attackers who can potentially switch...
SUSE CVE-2026-23021
In the Linux kernel, the following vulnerability has been resolved: net: usb: pegasus: fix memory leak in updateethregsasync When asynchronously writing to the device registers and if usbsubmiturb fail, the code fail to release allocated to this point resources...