CVE-2023-43633

On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the file exists, it overrides the existing configuration on the device on boot. This allows an attacker to change the system’s configuration, which also includes some debug functions...

CVE-2021-41096

Rucky is a USB HID Rubber Ducky Launch Pad for Android. Versions 2.2 and earlier for release builds and versions 425 and earlier for nightly builds suffer from use of a weak cryptographic algorithm RSA/ECB/PKCS1Padding. The issue will be patched in v2.3 for release builds and 426 onwards for...

CVE-2020-7819

A SQL-Injection vulnerability in the nTracker USB Enterprisesecure USB management solution allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information...

Siemens Ruggedcom ROX Classic Buffer Overflow (CVE-2022-48948)

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Prevent buffer overflow in setup handler Setup function uvcfunctionsetup permits control transfer requests with up to 64 bytes of payload UVCMAXREQUESTSIZE, data stage handler for OUT transfer uses memcpy to cop...

PIONEER USB DAC Amplifier和PIONEER Stellanova 代码问题漏洞

PIONEER USB DAC Amplifier and PIONEER Stellanova are both products of PIONEER Corporation, Japan.PIONEER USB DAC Amplifier is a line of hi-fi audio devices.PIONEER Stellanova is a line of audio systems. A code issue vulnerability exists in PIONEER USB DAC Amplifier and PIONEER Stellanova, which...

CVE-2025-1369

A vulnerability classified as critical was found in MicroWord eScan Antivirus 7.0.32 on Linux. Affected by this vulnerability is an unknown functionality of the component USB Password Handler. The manipulation leads to os command injection. The attack needs to be approached locally. The complexit...

CVE-2019-16650

On Supermicro X10 and X11 products, a client's access privileges may be transferred to a different client that later has the same socket file descriptor number. In opportunistic circumstances, an attacker can simply connect to the virtual media service, and then connect virtual USB devices to the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000477)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000477 advisory. drivers/media/usb/dvb-usb/technisat-usb2.c in the Linux kernel through 5.2.9 has an out-of-bounds read via crafted USB device traffic which may be remote via usbip o...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000430)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000430 advisory. In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device with zero interfaces tha...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000364)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000364 advisory. An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb....

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000262 advisory. parseaudiomixerunit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access. Tenable has extract...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000533)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000533 advisory. An issue was discovered in the Linux kernel before 5.2.1. There is a use-after-free caused by a malicious USB device in the drivers/net/wireless/intersil/p54/p54usb....

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000411)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000411 advisory. usbsgcancel in drivers/usb/core/message.c in the Linux kernel before 5.6.8 has a use-after-free because a transfer occurs without a reference, aka CID-056ad39ee925...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000385 advisory. An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000307)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000307 advisory. A memory leak in the ath10kusbhiftxsg function in drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.3.11 allows attackers to cause a denial of...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000222)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000222 advisory. An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the sound/usb/line6/driver.c driver...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000288 advisory. drivers/net/wireless/rsi/rsi91xusb.c in the Linux kernel through 5.2.9 has a Double Free via crafted USB device traffic which may be remote via usbip or usbredir...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000206)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000206 advisory. In the Linux kernel before 5.3.11, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/net/can/usb/mcbausb.c driver, aka...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000344)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000344 advisory. A memory leak in the gscanopen function in drivers/net/can/usb/gsusb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service memory...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000479)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000479 advisory. An issue was discovered in the Linux kernel before 4.20.2. An out-of-bounds access exists in the function buildaudioprocunit in the file sound/usb/mixer.c. Tenable h...