The vulnerability of Western Digital MyCloud OS, a network storage software, allows a hacker to execute arbitrary code.

The vulnerability of Western Digital MyCloud OS network storage software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2022-3191

Hitachi Ops Center Analyzer (Linux) is affected in the Virtual Storage Software Agent component. CVE-2022-3191 describes a vulnerability where sensitive information can be inserted into log files, enabling local users to access sensitive data. Affected versions are 10.8.1-00 through 10.9.0-00. Ro...

PT-2022-22866 · Sourcecodester · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cold Storage Management System version 1.0 Description: A vulnerability was found in the Avatar Handler component, affecting the file /csms/admin/?page=user/manage user. This issue leads to unrestricted upload and can be...

Dell SmartFabric storage software command injection vulnerability

Dell SmartFabric Storage Software is a stand-alone storage software solution from Dell USA. A command injection vulnerability exists in Dell SmartFabric storage software version 1.0.0, which arises from a failure of a network system or product to properly filter special characters, commands, etc...

CVE-2022-31232

SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access and perform actions on the affected system...

Command injection

SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access and perform actions on the affected system...

CVE-2022-31232

CVE-2022-31232 relates to Dell SmartFabric Storage software 1.0.0, where a Command-Injection flaw arises from improper input filtering that can enable a remote, unauthenticated attacker to execute arbitrary commands on the affected system. Affected product: SmartFabric storage software (Dell). Ro...

CVE-2022-31232: Improper Neutralization of Special Elements used in an OS Command

SmartFabric storage software version 1.0.0 contains a Command-Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access and perform actions on the affected system...

CVE-2018-19957

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS...

The vulnerability in the ImfMisc.cpp library of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from writing beyond the buffer boundaries. This allows an attacker to cause a service failure.

The vulnerability in the ImfMisc.cpp library of the OpenEXR image storage software lies in the handling of operations that exceed the allowable buffer data size. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of microprogrammed storage software for Intel SSDs lies in the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.

The vulnerability of microprogrammed solid-state storage devices like Intel SSDs lies in the lack of protection for operational data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...

IBM Tivoli Storage Productivity Center and IBM Spectrum Control Cross-Site Request Forgery Vulnerability

IBM Tivoli Storage Productivity Center and IBM Spectrum Control are both storage resource management software from IBM USA. A cross-site request forgery vulnerability exists in IBM Tivoli Storage Productivity Center versions 5.2.0 through 5.2.7.1 and IBM Spectrum Control versions 5.2.8 through...

EMC VPLEX GeoSynchrony会话超时验证安全限制绕过漏洞

Bugtraq ID:66516 CVE ID:CVE-2014-0633 EMC VPLEX GeoSynchrony是虚拟机数据存储软件。 VPLEX GeoSynchrony存在VPLEX GUI会话超时验证漏洞，远程攻击者可以利用漏洞绕过安全限制，获取敏感信息。 0 EMC VPLEX GeoSynchrony 4.0-5.2.1 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.emc.com/products-solutions/index.htm...

EMC VPLEX GeoSynchrony会话固定漏洞

Bugtraq ID:66514 CVE ID:CVE-2014-0635 EMC VPLEX GeoSynchrony是虚拟机数据存储软件。 VPLEX GeoSynchrony存在会话固定漏洞，远程攻击者可以利用漏洞劫持任意会话，未授权访问受影响应用。 0 EMC VPLEX GeoSynchrony 4.0-5.2.1 目前厂商已经发布了升级补丁以修复漏洞，请下载使用： http://www.emc.com/products-solutions/index.htm...