Filtered by vendor Asustor
Subscriptions
Filtered by product Data Master
Subscriptions
Total
26 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2018-12310 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature. | ||||
| CVE-2018-12309 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| Directory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files to arbitrary locations by modifying the "path" URL parameter. NOTE: the "filename" POST parameter is covered by CVE-2018-11345. | ||||
| CVE-2018-12308 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| Encryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain the encryption key via the "encrypt_key" URL parameter. | ||||
| CVE-2018-12307 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parameter. | ||||
| CVE-2018-12306 | 1 Asustor | 2 As602t, Data Master | 2024-11-21 | N/A |
| Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter, a similar issue to CVE-2018-11344. | ||||
| CVE-2018-12305 | 1 Asustor | 1 Data Master | 2024-11-21 | N/A |
| Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript. | ||||