CVE-2021-42852: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an authenticated user to execute operating system commands by sending a crafted packet to the device...

CVE-2021-42850: Use of Hard-coded Credentials

A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices that could allow unauthorized device access to an attacker with physical or local network access...

CVE-2021-42848: Missing Authorization

An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to retrieve device and networking details...

PT-2022-11703

Name of the Vulnerable Software and Affected Versions Lenovo Personal Cloud Storage devices affected versions not specified Description An information disclosure issue was reported in some Lenovo Personal Cloud Storage devices. This could allow an unauthenticated user to retrieve device and...

PT-2022-11708

Name of the Vulnerable Software and Affected Versions Lenovo Personal Cloud Storage devices affected versions not specified Description A command injection issue was reported in Lenovo Personal Cloud Storage devices. This could allow an authenticated user to execute operating system commands by...

PT-2022-11706

Name of the Vulnerable Software and Affected Versions Lenovo Personal Cloud Storage devices affected versions not specified Description A weak default administrator password for the web interface and serial port was reported in some Lenovo Personal Cloud Storage devices. This could allow...

Lenovo Personal Cloud Storage security vulnerabilities

Lenovo Personal Cloud Storage Lenovo Personal Cloud Storage is a personal cloud storage from Lenovo, a Chinese company. Lenovo Personal Cloud Storage has a security vulnerability that could be exploited to allow an unauthenticated user to create a standard user account...

PT-2022-11707 · Lenovo · Lenovo Personal Cloud Storage

Name of the Vulnerable Software and Affected Versions: Lenovo Personal Cloud Storage devices affected versions not specified Description: A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account...

CVE-2021-42851: Missing Authorization

A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to create a standard user account...

Owncloud ownCloud Access Control Error Vulnerability

Owncloud is a personal cloud storage solution from Owncloud, a U.S. company. versions prior to Owncloud 2.20 contain an access control error vulnerability that could be exploited by attackers to access the application's internal files...

CVE-2021-32801

Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions may have resulted in logging potentially sensitive key material for the Nextcloud Encryption-at-Rest functionality. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4...

CVE-2021-32802

Nextcloud server is an open source, self hosted personal cloud. Nextcloud supports rendering image previews for user provided file content. For some image types, the Nextcloud server was invoking a third-party library that wasn't suited for untrusted user-supplied content. There are several...

Code injection

Nextcloud server is an open source, self hosted personal cloud. In affected versions logging of exceptions may have resulted in logging potentially sensitive key material for the Nextcloud Encryption-at-Rest functionality. It is recommended that the Nextcloud Server is upgraded to 20.0.12, 21.0.4...

OwnCloud Code Issues Vulnerabilities

Owncloud OwnCloud is a suite of personal cloud storage solutions from OwnCloud USA. A code issue vulnerability exists in OwnCloud that stems from a server-side request forgery vulnerability in the service. No detailed vulnerability details are available at this time...

Western Digital My Cloud OS 5 Licensing Issue Vulnerability

Western Digital My Cloud is a personal cloud storage device from Western Digital, Inc. An authorization issue vulnerability exists in versions prior to Western Digital My Cloud OS 5.07.118, which could be exploited by attackers to gain access to the device...

CVE-2019-6178

An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their...

CVE-2019-6178

An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their...

Information disclosure

An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their...

CVE-2019-6178

CVE-2019-6178 affects Iomega and LenovoEMC NAS products with Personal Cloud enabled. The vulnerability permits information leakage of device details (e.g., share names) via the device API without granting access to underlying file systems or contents. There is no published patch for CVE-2019-6178...

CVE-2019-6178

An information leakage vulnerability in Iomega and LenovoEMC NAS products could allow disclosure of some device details such as Share names through the device API when Personal Cloud is enabled. This does not allow read, write, delete, or any other access to the underlying file systems and their...