Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: westerndigital'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2020-8959 4.4 Western Digital WesternDigitalSSDDashboardSetup.exe before 3.0.2.0 allows DLL Hijacking. 2020-02-27 19:55:00
CVE-2018-7928 3.6 There is a security vulnerability which could lead to Factory Reset Protection (FRP) bypass in the MyCloud APP with the versions before 8.1.2.303 installed on some Huawei smart phones. When re-configuring the mobile phone using the FRP function, an a 2020-02-24 15:02:00
CVE-2014-5876 5.4 The WD My Cloud (aka com.wdc.wd2go) application 4.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. 2020-02-24 15:02:00
CVE-2014-2846 7.5 Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remote attackers to read arbitrary files and execute arbitrary PHP code via a ..././ (dot dot dot slash d 2020-02-24 15:02:00
CVE-2013-5006 4.3 main_internet.php on the Western Digital My Net N600 and N750 with firmware 1.03.12 and 1.04.16, and the N900 and N900C with firmware 1.05.12, 1.06.18, and 1.06.28, allows remote attackers to discover the cleartext administrative password by reading 2020-02-24 15:02:00
CVE-2019-18930 9.0 Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest account) to remotely execute arbitrary code via a stack-based buffer overflow. There is no size verification logic in one of functions in libscheddl.so, and downlo 2019-11-15 20:08:00
CVE-2019-18929 9.0 Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users (including guest accounts) to remotely execute arbitrary code via a download_mgr.cgi stack-based buffer overflow. 2019-11-15 20:06:00
CVE-2019-18931 9.0 Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer (EIP) control via crafted GET/POST parameters. 2019-11-15 20:02:00
CVE-2019-9949 9.0 Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a code execution (as root, starting from a low-privilege user session) vulnerability. The cgi-bin/webfi 2019-05-29 01:08:00
CVE-2017-17560 10.0 An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.php, provides multipart upload functionality that is accessible without authentication and can be used 2019-05-28 15:08:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/8
Zapisa po stranici: