CVE-2021-32515

Directory listing vulnerability in sharelink in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

Path traversal

Path traversal vulnerability in sharelink in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

CVE-2021-32517

Improper access control vulnerability in sharelink in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

CVE-2021-32516

Path traversal vulnerability in sharelink in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3...

PT-2021-19743

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3 Description: A vulnerability in the share link component of QSAN Storage Manager allows remote attackers to create a symbolic link and then access arbitrary files. Recommendations: For versions pri...

PT-2021-19741

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3 Description: A path traversal issue exists in the share link component of QSAN Storage Manager, allowing remote attackers to download arbitrary files. Recommendations: For versions prior to 3.3.3,...

PT-2021-19740

Name of the Vulnerable Software and Affected Versions: QSAN Storage Manager versions prior to 3.3.3 Description: A directory listing issue in the share link component of QSAN Storage Manager allows attackers to list arbitrary directories, potentially accessing credential information...

QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. A directory traversal vulnerability exists in sharelink in QSAN Storage Manager 3.3.1 and earlier versions. An attacker could use this vulnerability to list arbitrary directories and further access...

QSAN Storage Manager 安全漏洞

QSAN Storage Manager is a NAS operating system from Quantium Technologies Incorporated QSAN. An improper access control vulnerability exists in sharelink in QSAN Storage Manager 3.3.1 and earlier versions. A remote attacker could exploit this vulnerability to download arbitrary files via specific...

CVE-2020-12848

In Pydio Cells 2.0.4, once an authenticated user shares a file selecting the create a public link option, a hidden shared user account is created in the backend with a random username. An anonymous user that obtains a valid public link can get the associated hidden account username and password a...

CVE-2020-8119

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app...

Authorization

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app...

PT-2020-19956

Name of the Vulnerable Software and Affected Versions Nextcloud server version 17.0.0 Description The issue is related to improper authorization in the Nextcloud server, which causes previews and files to be leaked when a file-drop share link is opened via the gallery app. Recommendations For...

CVE-2020-8119: Improper Authorization

Improper authorization in Nextcloud server 17.0.0 causes leaking of previews and files when a file-drop share link is opened via the gallery app...

CVE-2017-7631

Cross-site scripting XSS vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML...

PT-2018-8410

Name of the Vulnerable Software and Affected Versions QNAP versions 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier Description A cross-site scripting XSS issue exists in the share link function of File Station, allowing remote attackers to inject arbitrary web script or HTML. This...

CVE-2017-7631: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML...

CVE-2017-2429

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the "FinderKit" component. It allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging unexpected permission changes during an iCloud Sharing...