63 matches found
CVE-2023-43070
Dell SmartFabric Storage Software versions v1.4 and earlier are affected by a Path Traversal vulnerability in the HTTP interface. The issue allows a remote authenticated attacker to modify or write arbitrary files to arbitrary locations within the license container due to insufficient input filte...
CVE-2023-4401
Dell SmartFabric Storage Software (Dell) vulnerability CVE-2023-4401: OS command injection in the CLI using the more command affects v1.4 and earlier, enabling root-level access for authenticated users (local/remote). Root cause: command injection via CLI command parsing. Impact: potential full s...
Dell SmartFabric Storage Software 操作系统命令注入漏洞
Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. Dell SmartFabric Storage Software suffers from an operating system command injection vulnerability that can be exploited by an attacker to execute arbitrary commands...
Dell SmartFabric Storage Software 安全漏洞
Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. Dell SmartFabric Storage Software version 1.4 suffers from an HTML injection vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...
Dell SmartFabric Storage Software 访问控制错误漏洞
Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. Dell SmartFabric Storage Software suffers from an Access Control Error vulnerability that stems from an incorrect access control vulnerability contained in the CLI. An attacker could exploit this...
Dell SmartFabric Storage Software 输入验证错误漏洞
Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. An elevation of privilege vulnerability exists in Dell SmartFabric Storage Software that originates from the inclusion of incorrect input validation. An attacker could exploit the vulnerability to elevate...
Dell SmartFabric Storage Software 操作系统命令注入漏洞
Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. Dell SmartFabric Storage Software suffers from an operating system command injection vulnerability that can be exploited by an attacker to execute arbitrary commands with root privileges on the system...
Dell SmartFabric Storage Software 操作系统命令注入漏洞
Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. Dell SmartFabric Storage Software suffers from an operating system command injection vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...
CVE-2022-45112
Improper access control in some IntelR VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable escalation of privilege via local access...
IBM Cloud Object System 跨站脚本漏洞
IBM Cloud Object System is a data cloud storage software from International Business Machines IBM. A security vulnerability exists in IBM Cloud Object System version 3.15.8.97, which stems from susceptibility to a stored cross-site scripting attack that allows a user to embed arbitrary JavaScript...
The vulnerability of Western Digital MyCloud OS, a network storage software, allows a hacker to execute arbitrary code.
The vulnerability of Western Digital MyCloud OS network storage software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2022-3191
Hitachi Ops Center Analyzer (Linux) is affected in the Virtual Storage Software Agent component. CVE-2022-3191 describes a vulnerability where sensitive information can be inserted into log files, enabling local users to access sensitive data. Affected versions are 10.8.1-00 through 10.9.0-00. Ro...
PT-2022-22866 · Sourcecodester · Simple Cold Storage Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cold Storage Management System version 1.0 Description: A vulnerability was found in the Avatar Handler component, affecting the file /csms/admin/?page=user/manage user. This issue leads to unrestricted upload and can be...
Dell SmartFabric storage software command injection vulnerability
Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. A command injection vulnerability exists in Dell SmartFabric storage software version 1.0.0, which arises from a failure of a network system or product to properly filter special characters, commands, etc...
CVE-2022-31232
SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access and perform actions on the affected system...
Command injection
SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access and perform actions on the affected system...
CVE-2022-31232
CVE-2022-31232 relates to Dell SmartFabric Storage software 1.0.0, where a Command-Injection flaw arises from improper input filtering that can enable a remote, unauthenticated attacker to execute arbitrary commands on the affected system. Affected product: SmartFabric storage software (Dell). Ro...
CVE-2018-19957
A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS...
The vulnerability in the ImfMisc.cpp library of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from writing beyond the buffer boundaries. This allows an attacker to cause a service failure.
The vulnerability in the ImfMisc.cpp library of the OpenEXR image storage software lies in the handling of operations that exceed the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of microprogrammed storage software for Intel SSDs lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of microprogrammed solid-state storage devices like Intel SSDs lies in the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...