Lucene search
+L

153 matches found

CNNVD
CNNVD
•added 2022/09/27 12:00 a.m.•12 views

Western Digital My Cloud和SanDisk ibi缓冲区错误漏洞

Western Digital My Cloud is an easy-to-use personal cloud storage device. SanDisk ibi, a smart photo manager and media storage drive, is a buffer overflow vulnerability that could be exploited by attackers to gain local access to the system and read the /etc/version file...

6.7CVSS7AI score0.00311EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/04/16 12:00 a.m.•13 views

Western Digital My Cloud Home and ibi Websites Clickjacking Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. A security vulnerability exists in Western Digital My Cloud Home and ibi Websites versions prior to 2.2.0. An attacker could exploit the vulnerability to hijack click-through actions on the login page...

4.7CVSS6.7AI score0.00895EPSS
SaveExploits0References1
OSV
OSV
•added 2020/04/15 8:15 p.m.•9 views

CVE-2020-10951

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...

4.7CVSS5.8AI score0.00895EPSS
SaveExploits0References3
Prion
Prion
•added 2020/04/15 8:15 p.m.•20 views

Code injection

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...

4.3CVSS5.1AI score0.00895EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2020/04/15 7:48 p.m.•29 views

CVE-2020-10951

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...

5AI score0.00895EPSS
SaveExploits0References3
CVE
CVE
•added 2020/04/15 7:48 p.m.•60 views

CVE-2020-10951

CVE-2020-10951 affects Western Digital My Cloud Home and ibi devices (pre-2.2.0). The issue is a clickjacking vulnerability on sign-in pages, allowing an attacker to hijack sign-in interactions. Affected versions are prior to 2.2.0. Mitigation: upgrade to 2.2.0 or later (per PT/security advisorie...

4.7CVSS5AI score0.00895EPSS
SaveExploits0References3Affected Software2
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•15 views

PT-2020-12443 · Western Digital · Western Digital My Cloud Home +1

Name of the Vulnerable Software and Affected Versions: Western Digital My Cloud Home and ibi devices versions prior to 2.2.0 Description: The issue allows clickjacking on sign-in pages. Recommendations: For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue...

4.7CVSS4.8AI score0.00895EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/02/23 12:00 a.m.•8 views

Western Digital My Cloud Home and ibi Licensing Issues Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital. An authorization issue vulnerability exists in Western Digital My Cloud Home versions prior to 3.6.0 and ibi versions prior to 3.6.0. The vulnerability stems from a lack of authentication measures or insufficient...

9.1CVSS7.2AI score0.00997EPSS
SaveExploits0References1
NVD
NVD
•added 2020/02/20 10:15 p.m.•24 views

CVE-2020-8990

Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation...

9.1CVSS9.3AI score0.00997EPSS
SaveExploits0References2
OSV
OSV
•added 2020/02/20 10:15 p.m.•11 views

CVE-2020-8990

Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation...

9.1CVSS7.3AI score0.00997EPSS
SaveExploits0References2
Prion
Prion
•added 2020/02/20 10:15 p.m.•20 views

Session fixation

Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation...

6.4CVSS9.2AI score0.00997EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2020/02/20 9:59 p.m.•102 views

CVE-2020-8990

CVE-2020-8990 affects Western Digital My Cloud Home and ibi prior to 3.6.0, where a session fixation issue is present. The connected records confirm the affected products and versions, identifying the vulnerability type as session fixation but do not provide implementation details, exploit steps,...

9.1CVSS9.1AI score0.00997EPSS
SaveExploits0References2Affected Software2
xssed
xssed
•added 2008/08/02 12:00 a.m.•31 views

Unfixed XSS vulnerability at www.informationbuilders.com

Security researcher holisticinfosec, has submitted on 08/02/2008 a cross-site-scripting XSS vulnerability affecting www.informationbuilders.com, which at the time of submission ranked 212992 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

SaveExploits0References1
Rows per page
Query Builder