Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
QsanStorage Manager

23 matches found

CVE
CVE•added 2021/07/07 2:15 p.m.•49 views

CVE-2021-32517

Improper access control vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files using particular parameter in download function. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

7.5CVSS7.6AI score0.00218EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•47 views

CVE-2021-32507

Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

6.5CVSS6.3AI score0.00235EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•47 views

CVE-2021-32525

The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions. The referred vulnerability has been s...

9.1CVSS7.4AI score0.0096EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•46 views

CVE-2021-32513

QsanTorture in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

9.8CVSS9.8AI score0.01174EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•45 views

CVE-2021-32516

Path traversal vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

7.5CVSS7.6AI score0.00304EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•44 views

CVE-2021-32511

QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to list arbitrary directories via the file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

4.3CVSS4.5AI score0.00121EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•44 views

CVE-2021-32526

Incorrect permission assignment for critical resource vulnerability in QSAN Storage Manager allows authenticated remote attackers to access arbitrary password files. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

6.5CVSS6.6AI score0.0017EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•42 views

CVE-2021-32519

Use of password hash with insufficient computational effort vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to recover the plain-text password by brute-forcing the MD5 hash. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.2...

9.8CVSS7.8AI score0.00102EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•41 views

CVE-2021-32514

Improper access control vulnerability in FirmwareUpgrade in QSAN Storage Manager allows remote attackers to reboot and discontinue the device. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

7.5CVSS7.6AI score0.00447EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•40 views

CVE-2021-32506

Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3 .

6.5CVSS6.3AI score0.00235EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•40 views

CVE-2021-32515

Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

5.3CVSS5.3AI score0.00178EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•40 views

CVE-2021-32527

Path traversal vulnerability in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files thru injecting file path in download function. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

7.5CVSS7.7AI score0.00718EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•39 views

CVE-2021-32521

Use of MAC address as an authenticated password in QSAN Storage Manager, XEVO, SANOS allows local attackers to escalate privileges. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

9.8CVSS8.5AI score0.00219EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•38 views

CVE-2021-32510

QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

4.3CVSS4.6AI score0.00121EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•38 views

CVE-2021-32522

Improper restriction of excessive authentication attempts vulnerability in QSAN Storage Manager, XEVO, SANOS allows remote attackers to discover users’ credentials and obtain access via a brute force attack. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

9.8CVSS9.6AI score0.00241EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•38 views

CVE-2021-32524

Command injection vulnerability in QSAN Storage Manager allows remote privileged users to execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

9.1CVSS7.6AI score0.00851EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•37 views

CVE-2021-32508

Absolute Path Traversal vulnerability in FileStreaming in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3...

6.5CVSS6.3AI score0.00208EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•37 views

CVE-2021-32509

Absolute Path Traversal vulnerability in FileviewDoc in QSAN Storage Manager allows remote authenticated attackers access arbitrary files by injecting the Symbolic Link following the Url path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3...

6.5CVSS6.4AI score0.00235EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•37 views

CVE-2021-32512

QuickInstall in QSAN Storage Manager does not filter special parameters properly that allows remote unauthenticated attackers to inject and execute arbitrary commands. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

9.8CVSS9.8AI score0.01174EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•37 views

CVE-2021-32518

A vulnerability in share_link in QSAN Storage Manager allows remote attackers to create a symbolic link then access arbitrary files. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

7.5CVSS7.5AI score0.00304EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•36 views

CVE-2021-32523

Improper authorization vulnerability in QSAN Storage Manager allows remote privileged users to bypass the access control and execute arbitrary commands. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

9.1CVSS7.5AI score0.00231EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•35 views

CVE-2021-32520

Use of hard-coded cryptographic key vulnerability in QSAN Storage Manager allows attackers to obtain users’ credentials and related permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

9.8CVSS9.5AI score0.00206EPSS
CVE
CVE•added 2021/07/07 2:15 p.m.•33 views

CVE-2021-32528

Observable behavioral discrepancy vulnerability in QSAN Storage Manager allows remote attackers to obtain the system information without permissions. Suggest contacting with QSAN and refer to recommendations in QSAN Document.

5.3CVSS5.2AI score0.00143EPSS