CVE-2024-28170

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-33848

Uncaught exception in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-32666

NULL pointer dereference in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-4328

Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Windows...

CVE-2023-4345

Broadcom RAID Controller web interface is vulnerable client-side control bypass leads to unauthorized data access for low privileged user...

CVE-2020-8687

Uncontrolled search path in the installer for IntelR RSTe Software RAID Driver for the IntelR Server Board M10JNP2SB before version 4.7.0.1119 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8688

Improper input validation in the IntelR RAID Web Console 3 for Windows may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2019-0173

Authentication bypass in the web console for IntelR Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially enable disclosure of information via network access...

CVE-2013-0706

NEC Universal RAID Utility 1.40 Rev 680 and earlier, 2.31 Rev 1492 and earlier, and 2.5 Rev 2244 and earlier does not provide access control, which allows remote attackers to perform arbitrary RAID disk operations via unspecified vectors...

CVE-2008-6161

Cross-site scripting XSS vulnerability in WOW Raid Manager WRM before 3.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2024-8201

Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer RAID Agent component.This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00; Hitachi Ops Center Analyzer: from 10.9.0-00 before 11.0.4-00...

CVE-2024-8201 Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer

Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer RAID Agent component.This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00; Hitachi Ops Center Analyzer: from 10.9.0-00 before 11.0.4-00...

CVE-2024-8201 Cross-Site WebSocket Hijacking Vulnerability in Hitachi Ops Center Analyzer

Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer RAID Agent component.This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00; Hitachi Ops Center Analyzer: from 10.9.0-00 before 11.0.4-00...

CVE-2024-8201: Missing Origin Validation in WebSockets

Cross-Site WebSocket Hijacking vulnerability in Hitachi Ops Center Analyzer RAID Agent component.This issue affects Hitachi Ops Center Analyzer: from 10.8.0-00 before 11.0.4-00; Hitachi Ops Center Analyzer: from 10.9.0-00 before 11.0.4-00...

PT-2025-21617 · Hitachi · Hitachi Ops Center Analyzer

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Analyzer versions 10.8.0-00 through 11.0.4-00 Hitachi Ops Center Analyzer versions 10.9.0-00 through 11.0.4-00 Description: The issue is related to a Cross-Site WebSocket Hijacking problem in the RAID Agent component of...

kernel: dm-raid: Fix WARN_ON_ONCE check for sync_thread in raid_resume

In the Linux kernel, the following vulnerability has been resolved: dm-raid: Fix WARNONONCE check for syncthread in raidresume rm-raid devices will occasionally trigger the following warning when being resumed after a table load because DMRECOVERYRUNNING is set: WARNING: CPU: 7 PID: 5660 at...

kernel: md/raid5: avoid BUG_ON() while continue reshape after reassembling

A flaw was found in the Linux kernel's MD Multiple Device RAID5 implementation. A local attacker, with privileges to manage RAID arrays, could trigger a kernel panic by reassembling a RAID5 array after an aborted reshape operation. This occurs due to an inconsistency between the raiddisks and...

kernel: md/raid10: fix null ptr dereference in raid10_size()

A flaw was found in the Linux kernel's md/raid10 component. A local attacker could trigger a null pointer dereference in the raid10size function. This occurs when an internal function returns zero, but a critical data structure remains uninitialized, leading to a system crash. This vulnerability...

kernel: scsi: aacraid: Fix double-free on probe failure

A flaw was found in the Linux kernel. Specifically, a double-free vulnerability exists in the aacraid SCSI driver. This occurs during probe failure when the aacinitadapter function frees memory for aacdev::queues but fails to clear the pointer, leading aacprobeone to attempt a second free of the...

SUSE CVE-2025-37827

In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: return EIO on RAID1 block group write pointer mismatch There was a bug report about a NULL pointer dereference in btrfsaddfreespacezoned that ultimately happens because a conversion from the default metadata profile...