97 matches found
EUVD-2020-21356
Malware in sbrugna...
EUVD-2021-26644
Malware in sbrugna...
EUVD-2020-21328
Malware in sbrugna...
EUVD-2022-34161
Malicious code in bioql PyPI...
EUVD-2023-26926
Malicious code in bioql PyPI...
EUVD-2022-34159
Malicious code in bioql PyPI...
EUVD-2022-34160
Malicious code in bioql PyPI...
EUVD-2023-26928
Malicious code in bioql PyPI...
EUVD-2023-26931
Malicious code in bioql PyPI...
EUVD-2023-26927
Malicious code in bioql PyPI...
EUVD-2022-39047
Malicious code in bioql PyPI...
EUVD-2022-34158
Malicious code in bioql PyPI...
EUVD-2022-39042
Malicious code in bioql PyPI...
CVE-2023-22814
An authentication bypass issue via spoofing was discovered in the token-based authentication mechanism that could allow an attacker to carry out an impersonation attack. This issue affects My Cloud OS 5 devices: before 5.26.202...
CVE-2023-22819
An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi a...
CVE-2023-22816
A post-authentication remote command injection vulnerability in a CGI file in Western Digital My Cloud OS 5 devices that could allow an attacker to build files with redirects and execute larger payloads. This issue affects My Cloud OS 5 devices: before 5.26.300...
CVE-2022-29840
Server-Side Request Forgery SSRF vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL to exploit other vulnerabilities on the local server.This...
CVE-2022-36326
An uncontrolled resource consumption vulnerability issue that could arise by sending crafted requests to a service to consume a large amount of memory, eventually resulting in the service being stopped and restarted was discovered in Western Digital My Cloud Home, My Cloud Home Duo, SanDisk ibi a...
CVE-2021-3310
Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...
CVE-2022-29842
Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability that could allow an attacker to execute code in the context of the root user on a vulnerable CGI file was discovered in Western Digital My Cloud OS 5 devicesThis issue affects My Cloud OS 5: before...