Western Digital My Cloud Home 安全漏洞

Western Digital My Cloud Home is an easy-to-use personal cloud storage device from Western Digital. It plugs directly into your Wi-Fi router to protect your digital life. A security vulnerability exists in Western Digital My Cloud Home prior to version 9.4.0-191 and My Cloud Home Duo prior to...

Western Digital My Cloud Home 安全漏洞

Western Digital My Cloud Home is an easy-to-use personal cloud storage device from Western Digital. It plugs directly into your Wi-Fi router to protect your digital life. A security vulnerability exists in Western Digital My Cloud Home versions prior to 9.4.0-191 and My Cloud Home Duo versions...

CVE-2023-25536

CVE-2023-25536 affects Dell PowerScale OneFS 9.4.0.x. The vulnerability is an information disclosure where an authenticated local user could exploit certificate management to obtain sensitive data, potentially leading to a system takeover. The CVSS vector (LOCAL, HIGH privileges, no user interact...

Design/Logic Flaw

Dell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability to overwrite arbitrary files causing denial of service...

CVE-2023-25540

Dell PowerScale OneFS 9.4.0.x is affected by an authorization issue caused by incorrect default privileges, allowing a local attacker to overwrite arbitrary files and cause a denial of service. The vulnerability is local, with low attack complexity and requires low privileges, and it can impact a...

CVE-2023-25540

Dell PowerScale OneFS 9.4.0.x contains an incorrect default permissions vulnerability. A local malicious user could potentially exploit this vulnerability to overwrite arbitrary files causing denial of service...

PT-2023-20149 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS version 9.4.0.x Description: The issue is related to incorrect default permissions, allowing a local malicious user to potentially overwrite arbitrary files, which could cause a denial of service. Recommendations: For De...

K59448931: BIND vulnerability CVE-2017-3142

Security Advisory Description An attacker who is able to send and receive messages to an authoritative DNS server and who has knowledge of a valid TSIG key name may be able to circumvent TSIG authentication of AXFR requests via a carefully constructed request packet. A server that relies solely o...

Xxe

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...

Design/Logic Flaw

An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow a local attacker with database access to recover user passwords...

Authorization

An improper authorization vulnerability CWE-285 in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests...

CVE-2022-38375

An improper authorization vulnerability CWE-285 in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative operations over the FortiNAC instance via crafted HTTP POST requests...

Fortinet FortiNAC 安全漏洞

Fortinet FortiNAC is a zero-trust access solution from Fortinet, Inc. A security vulnerability exists in Fortinet FortiNAC versions 9.4.0 through 9.4.1, prior to 9.2.6, which stems from improper authorization...

CVE-2022-34444

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to cause data leak...

PT-2023-3022 · Telegram · Telegram

Name of the Vulnerable Software and Affected Versions: Telegram versions 9.3.1 through 9.4.0 Description: The issue is related to insufficient access control in Telegram, allowing remote attackers to access restricted files, the microphone, or video recording. This is achieved via the DYLD INSERT...

Information disclosure

Dell PowerScale OneFS 9.0.0.x-9.4.0.x contain an insertion of sensitive information into log file vulnerability in cloudpool. A low privileged local attacker could potentially exploit this vulnerability, leading to sensitive information disclosure...

CVE-2023-22572

Dell PowerScale OneFS is affected (versions 9.1.0.x–9.4.0.x). The issue is that the change password API can insert sensitive information into log files, enabling a low-privilege local attacker to potentially take over the system. Affected component: change password API; root cause: sensitive data...

Denial of service

Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2022-46679

Dell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2022-45098

Dell PowerScale OneFS (9.0.0.x–9.4.0.x) has a vulnerability in the S3 component where sensitive information can be stored in cleartext. An authenticated local attacker could potentially exploit this, leading to information disclosure. The issue is documented across multiple sources (e.g., CVE-202...