PT-2013-1511

Name of the Vulnerable Software and Affected Versions IBM Scale Out Network Attached Storage SONAS versions 1.3 through 1.3.2.3 excluding 1.3.2.3 and later Description The issue allows attackers to potentially obtain sensitive server information by leveraging root access to a client machine, due ...

VulnCheck KEV: CVE-2013-0158

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

User Authentication Vulnerability in Operational Management Function of Cosminexus

Overview The operational management function of Cosminexus does not properly require authentication for manipulation of an operational management portal, which allows remote attackers to delete and replace applications which other users attached. Impact A remote attacker could delete and replace...

Microsoft Word UNC Path Injector

This module modifies a .docx file that will, upon opening, submit stored netNTLM credentials to a remote host. It can also create an empty docx file. If emailed the receiver needs to put the document in editing mode before the remote server will be contacted. Preview and read-only mode do not wor...

jenkins: remote unauthenticated retrieval of master cryptographic key (Jenkins Security Advisory 2013-01-04)

Unspecified vulnerability in Jenkins before 1.498, Jenkins LTS before 1.480.2, and Jenkins Enterprise 1.447.x before 1.447.6.1 and 1.466.x before 1.466.12.1, when a slave is attached and anonymous read access is enabled, allows remote attackers to obtain the master cryptographic key via unknown...

Buffalo TeraStation TS-Series Command Execution

Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: [email protected] Web: http://www.andreafabrizi.it Twitter: @andreaf83 Status: unpatched...

CVE-2012-1103

emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message...

CVE-2012-2163

CVE-2012-2163 affects IBM SONAS 1.1–1.3.1, where an error in the Command Line Interface and Graphical User Interface allows an administrative user to execute arbitrary Linux commands as root via code injection. The IBM flash notes a base CVSS score of 9 and describes impact as enabling command ex...

PT-2012-3847

Name of the Vulnerable Software and Affected Versions IBM Scale Out Network Attached Storage SONAS versions 1.1 through 1.3.1 Description The issue allows remote authenticated administrators to execute arbitrary Linux commands, related to a code injection problem. This can be achieved via the...

CVE-2012-2163: Undefined Security Weakness

IBM Scale Out Network Attached Storage SONAS 1.1 through 1.3.1 allows remote authenticated administrators to execute arbitrary Linux commands via the 1 Command Line Interface or 2 Graphical User Interface, related to a "code injection" issue...

SEC Consult SA-20120618-0 :: Western Digital ShareSpace WEB GUI Sensitive Data Disclosure

SEC Consult Vulnerability Lab Security Advisory 20120618-0 ======================================================================= title: WD ShareSpace WEB GUI Sensitive Data Disclosure product: WD ShareSpace network storage system vulnerable version: WD ShareSpace = v2.3.02 D and E series fixed...

http-qnap-nas-info NSE Script

Attempts to retrieve the model, firmware version, and enabled services from a QNAP Network Attached Storage NAS device. Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline, http.pipeline,...

FreeNAS Detection

This host is running FreeNAS, an embedded open source NAS Network-Attached Storage distribution based on FreeBSD. OpenVAS Vulnerability Test $Id: gbfreenasdetect.nasl 6701 2017-07-12 13:04:06Z cfischer $ FreeNAS Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH...

Oracle Secure Backup Administration preauth Variable Command Injection (CVE-2010-0906)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allowsfor single point of management of data present on network attached storage NAS devices and distributed hostswhich may have different operating systems. A command execution vulnerability...

Synology Disk Station Code Execution / Cross Site Request Forgery / Cross Site Scripting

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Web commands injection through FTP Login in Synology Disk Station CVE-2010-2453 INTRODUCTION Synology Inc develops high-performance, reliable, versatile, and environmentally-friendly Network...

Oracle Secure Backup observiced.exe Buffer Overflow (CVE-2010-0072)

Oracle Secure Backup is a backup solution allowing for centralized tape backup management. The server allowsfor single point of management of data present on network attached storage NAS devices and distributed hostswhich may have different operating systems. A stack buffer overflow vulnerability...

TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra NAS appliance

Trustwave's SpiderLabs Security Advisory TWSL2010-003: Unauthorized access to root NFS export on EMC Celerra Network Attached Storage NAS appliance https://www.trustwave.com/spiderlabs/advisories/TWSL2010-003.txt Published: 2010-07-29 Version: 1.0 Vendor: EMC http://www.emc.com Product: Celerra...

CVE-2010-2860

The EMC Celerra Network Attached Storage NAS appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests...

Code injection

The EMC Celerra Network Attached Storage NAS appliance accepts external network traffic to IP addresses intended for an intranet network within the appliance, which allows remote attackers to read, create, or modify arbitrary files in the user data directory via NFS requests...

CVE-2010-2860

EMC Celerra NAS is affected by CVE-2010-2860. The NFS server exports the root ("/") and accepts internal IPs on the private network from external sources, enabling an attacker to read, create, or modify files in the user data directory via NFS requests. Exploitation in Trustwave/EMC advisories in...