CVE-2025-62065

creationtimestamp| type| source ---|---|--- 2025-11-06 22:00:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4yksy7iet2s...

EUVD-2025-38049

On Elspec G5 devices through 1.2.2.19, a person with physical access to the device can reset the Admin password by inserting a USB drive containing a publicly documented reset string into a USB port...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990600)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990600 advisory. In the Linux kernel, the following vulnerability has been resolved: can: mcbausb: properly check endpoint type Syzbot reported warning in usbsubmiturb which is cause...

CVE-2025-59392

The Elspec G5 multifunctional digital fault recorder, specifically versions through 1.2.2.19 , contains a vulnerability that allows an attacker with physical access to reset the Admin password . The root cause is the acceptance of a publicly documented reset string when a USB drive is inserted in...

PT-2025-45256

Name of the Vulnerable Software and Affected Versions Elspec G5 versions through 1.2.2.19 Description A person with physical access to the device can reset the Admin password by inserting a USB drive containing a publicly documented reset string into a USB port. Recommendations Versions prior to...

CVE-2025-21073

Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability...

CVE-2025-21073

Insecure default configuration in USB connection mode prior to SMR Nov-2025 Release 1 allows privileged physical attackers to access user data. User interaction is required for triggering this vulnerability...

WSO2多款产品 安全漏洞

WSO2 API Manager and other products are products of WSO2 Corporation, USA.WSO2 API Manager is a set of API lifecycle management solutions.WSO2 Identity Server IS is an identity server.WSO2 Enterprise Integrator is a set of open source hybrid integration platform. A security vulnerability exists i...

WSO2多款产品 安全漏洞

WSO2 API Manager and other products are products of WSO2 Corporation, USA.WSO2 API Manager is a set of API lifecycle management solution.WSO2 Identity Server IS is an identity server.WSO2 Enterprise Integrator is a set of open source hybrid integration platform. A security vulnerability exists in...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988906)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988906 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: ffs: Fix use-after-free for epfile Consider a case where ffsfuncepsdisable is called from...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989065)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989065 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: xhci-plat: fix crash when suspend if remote wake enable Crashed at i.mx8qm platform when...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990104)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990104 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: Prevent buffer overflow in setup handler Setup function uvcfunctionsetup permit...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988905)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988905 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path Commit 7c75bde329d7 usb: musb: musbdsps: requestirq aft...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989141)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989141 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2hcdinit usbcreatehcd will alloc memory for hcd, and we should...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988969)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988969 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: dwc3-meson-g12a: fix usb2 PHY glue init when phy0 is disabled When only PHY1 is used for...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990089 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: chipidea: cihdrcimx: Also search for 'phys' phandle When passing 'phys' in the devicetree to...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989187)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989187 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fix bug in pipe direction for control transfers The syzbot fuzzer reported a minor b...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung cell phone applications. A security vulnerability exists in versions prior to SAMSUNG SMR Nov-2025 Release 1, which stems from the presence of an insecure default configuration for...

Linux USB Bulk Buffer Overflow DoS

Vulnerability of the procbulk function in the drivers/usb/core/devio.c module – The driver for USB devices in Linux kernels is vulnerable due to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989571)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989571 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: cancel vdm and state machine hrtimer when unregister tcpm port A pending hrtime...