2131 matches found
CVE-2017-7640
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges...
CVE-2017-7634
Cross-site scripting XSS vulnerability in QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to inject arbitrary web script or HTML. The injected code will only be triggered by a crafted link, not the normal page...
CVE-2017-7638
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS...
CVE-2017-7641
The CVE-2017-7641 entry documents a CSRF vulnerability in the QNAP NAS Media Streaming add-on. Affected versions include 421.1.0.2, 430.1.2.0, and earlier. Root cause: the add-on does not implement CSRF protections, which could allow an attacker to coerce an authenticated user to perform maliciou...
CVE-2017-7640
CVE-2017-7640 affects the QNAP NAS Media Streaming add-on for the firmware versions 421.1.0.2, 430.1.2.0, and earlier. The vulnerability allows remote attackers to execute arbitrary operating system commands with root privileges on the affected NAS devices. The connected documents confirm the aff...
CVE-2017-7634
CVE-2017-7634 is a cross-site scripting (XSS) vulnerability in the QNAP NAS application Media Streaming add-on (versions 421.1.0.2, 430.1.2.0, and earlier). The issue allows remote attackers to inject arbitrary web script or HTML when a user clicks a crafted link; the injected code is triggered o...
CVE-2017-7641
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections...
CVE-2017-7640
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges...
CVE-2017-7638
CVE-2017-7638 affects QNAP NAS Media Streaming add-on (versions 421.1.0.2, 430.1.2.0 and earlier). The vulnerability is that the add-on does not authenticate requests properly, which could allow an attacker to change Media Streaming settings and access sensitive information on the NAS. Connected ...
CVE-2017-15519
Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation...
Design/Logic Flaw
Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation...
CVE-2017-15519
Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation...
CVE-2017-15519
NetApp SnapCenter Server (versions 2.0–3.0.1) is affected by a vulnerability via the NAS File Services plug-in that allows unauthenticated remote attackers to view and modify backup-related data. The root cause is exposure through the Plug-in for NAS File Services, enabling data exposure and back...
CVE-2017-15519
Versions of SnapCenter 2.0 through 3.0.1 allow unauthenticated remote attackers to view and modify backup related data via the Plug-in for NAS File Services. All users are urged to move to version 3.0.1 and perform the mitigation steps or upgrade to 4.0 following the product documentation...
Information disclosure
QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device...
CVE-2017-7633
QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device...
Seagate BlackArmor NAS Remote Code Execution Vulnerability
Seagate BlackArmor NAS is a network storage server from Seagate USA that provides layered protection, data incremental and system backup and recovery of business critical data. A security vulnerability exists in the Seagate BlackArmor NAS. A remote attacker can exploit the vulnerability by sendin...
Seagate BlackArmor NAS Hardcoded Credentials Vulnerability
Seagate BlackArmor NAS is a network storage server from Seagate USA that provides layered protection, data incremental and system backup and recovery of business critical data. A security vulnerability exists in the backupmgt/preconnectcheck.php file in Seagate BlackArmor NAS, which stems from th...
Code injection
Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...