Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 45

Export CSV
CVE-2018-12309

Directory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files to arbitrary locations by modifying the "path" URL parameter. NOTE: the "filename" POST parameter is covered by CVE-2018-11345.

CVSS 3.0 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Asustor
Products
As602t Data Master
CVE-2018-12308

Encryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain the encryption key via the "encrypt_key" URL parameter.

CVSS 3.0 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Asustor
Products
As602t Data Master
CVE-2018-12307

OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parameter.

CVSS 3.0 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Asustor
Products
As602t Data Master
CVE-2018-12306

Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter, a similar issue to CVE-2018-11344.

CVSS 3.0 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Asustor
Products
As602t Data Master
CVE-2018-12305

Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Asustor
Products
Data Master