3627 matches found
CVE-2007-3732: Undefined Security Weakness
In Linux 2.6 before 2.6.23, the TRACEIRQSON function in iretexc calls a C function without ensuring that the segments are set properly. The kernel's %fs needs to be restored before the call in TRACEIRQSON and before enabling interrupts, so that "current" references work. Without this, "current"...
PT-2019-6466
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.2 Description The issue is related to the mishandling of ext4 expand extra isize in the Linux kernel, which can lead to use-after-free errors in ext4 expand extra isize and ext4 xattr set entry. This is...
TerraMaster FS-210 Elevation of Privilege Vulnerability
TerraMaster FS-210 is a NAS Network Attached Storage device from TerraMaster, a Shenzhen, China based company. An elevation of privilege vulnerability exists in TerraMaster FS-210 version 4.0.19, which can be exploited to elevate privileges with the help of the 1.user.php file...
CVE-2019-18195
An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation...
CVE-2019-18195
An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation...
Privilege escalation
An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation...
CVE-2019-18195
TerraMaster FS-210 (firmware 4.0.19) contains an elevation-of-privilege flaw where normal users can leverage 1.user.php to gain higher privileges. Documented impact is network-accessible via the vulnerability with high severity (CVSS 3.1 base score 8.8, HIGH). Root cause details are not elaborate...
CVE-2019-18195
An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation...
CVE-2019-18195: Undefined Security Weakness
An issue was discovered on TerraMaster FS-210 4.0.19 devices. Normal users can use 1.user.php for privilege elevation...
PT-2019-15266
Name of the Vulnerable Software and Affected Versions TerraMaster FS-210 version 4.0.19 Description An issue was discovered that allows normal users to elevate their privileges. This is achieved by utilizing the "1.user.php" endpoint for privilege elevation. Recommendations For TerraMaster FS-210...
CVE-2019-18384
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=public%25252FadminOnlyRead.txt substring...
CVE-2019-18385
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring...
CVE-2019-18385
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring...
CVE-2019-18383
An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramasterTNAS-00E43Aconfigbackup.bin without permission...
CVE-2019-18383
An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramasterTNAS-00E43Aconfigbackup.bin without permission...
Code injection
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring...
Design/Logic Flaw
An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramasterTNAS-00E43Aconfigbackup.bin without permission...
Design/Logic Flaw
An issue was discovered on TerraMaster FS-210 4.0.19 devices. An authenticated remote non-administrative user can read unauthorized shared files, as demonstrated by the filename=public%25252FadminOnlyRead.txt substring...
CVE-2019-18383
TerraMaster FS-210 devices running firmware 4.0.19 are affected by CVE-2019-18383, an information-disclosure flaw that allows remote retrieval of the backup file terramaster_TNAS-00E43A_config_backup.bin without authentication. The issue is documented across multiple sources (NVD/Red Hat/CNVD/etc...