CVE-2021-42850

Lenovo Personal Cloud Storage devices are described as vulnerable due to a weak default administrator password for the web interface and serial port, which could allow unauthorized device access from physical or local network access. Root cause stated: insecure default credentials. Impact implied...

CVE-2021-42850

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access...

CVE-2021-42849

Lenovo Personal Cloud Storage is affected by CVE-2021-42849 due to a weak default password on the serial port, enabling unauthorized device access with physical access. Public details across connected docs confirm the issue but do not specify a vendor fix or affected versions. One entry notes no ...

CVE-2021-42848

Technical details about CVE-2021-42848 are not publicly available in the provided documents. Monitor for updates from Lenovo and CVE feeds for affected products, versions, and remediation.

CVE-2021-42848

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details...

Lenovo Personal Cloud Storage 授权问题漏洞

Lenovo Personal Cloud Storage is a cloud storage platform from Lenovo, a Chinese company. Lenovo Personal Cloud Storage is vulnerable to a trust management issue that stems from a weak default password for the serial port in the device, which could be exploited by an attacker to gain physical...

Lenovo Personal Cloud Storage 操作系统命令注入漏洞

Lenovo Personal Cloud Storage is a cloud storage platform from Lenovo China.Lenovo Personal Cloud Storage is vulnerable to command injection. An attacker could use the vulnerability to execute operating system commands by sending spoofed packets to the device...

Lenovo Personal Cloud Storage 安全漏洞

Lenovo Personal Cloud Storage is a cloud storage platform from Lenovo, a Chinese company. Lenovo Personal Cloud Storage is vulnerable to information disclosure, which could be exploited by attackers to retrieve device and network details...

PT-2022-11704 · Lenovo · Lenovo Personal Cloud Storage

Name of the Vulnerable Software and Affected Versions: Lenovo Personal Cloud Storage devices affected versions not specified Description: A weak default password for the serial port was reported, which could allow unauthorized device access to an attacker with physical access. Recommendations: At...

PT-2022-11707 · Lenovo · Lenovo Personal Cloud Storage

Name of the Vulnerable Software and Affected Versions: Lenovo Personal Cloud Storage devices affected versions not specified Description: A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account...

The vulnerability of the VMware vCloud Director platform, a cloud storage management platform, allows a attacker to execute arbitrary code.

The vulnerability of the VMware vCloud Director platform for managing cloud storage repositories is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

payload-plugin-cloud-storage (>=0.0.1, <=1.1.0), payload-plugin-form-builder (1.0.0) potentially affected by CVE-2022-27952 via payload (>=0.8.2, <=0.14.0)

payload NPM version =0.8.2, =0.0.1, =1.1.0 - payload-plugin-form-builder 1.0.0 Source cves: CVE-2022-27952 Source advisory: OSV:GHSA-W8XH-93QH-35VW...

GHSA-2Q6V-32MR-8P8X Null Byte Injection in Plug.Static

Plug.Static is used for serving static assets, and is vulnerable to null byte injection. If file upload functionality is provided, this can allow users to bypass filetype restrictions. We recommend all applications that provide file upload functionality and serve those uploaded files locally with...

Owncloud ownCloud Access Control Error Vulnerability

Owncloud is a personal cloud storage solution from Owncloud, a U.S. company. versions prior to Owncloud 2.20 contain an access control error vulnerability that could be exploited by attackers to access the application's internal files...

CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

UBUNTU-CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

CVE-2021-45103

HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1 contains a vulnerability where an attacker can access files stored in S3 that a user asked HTCondor to transfer. Affected version range: HTCondor 9.0.x prior to 9.0.10 and 9.1.x prior to 9.5.1. Impact: partial confidentiality and partial integri...

CVE-2021-45103

An issue was discovered in HTCondor 9.0.x before 9.0.10 and 9.1.x before 9.5.1. An attacker can access files stored in S3 cloud storage that a user has asked HTCondor to transfer...

HTCondor 日志信息泄露漏洞

HTCondor is a workload management system at the University of Wisconsin-Madison USA. The system provides job queuing mechanisms, scheduling policies, prioritization schemes, resource monitoring and resource management. A security vulnerability exists in HTCondor versions 9.0.x through 9.0.10 and...