Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
CRITICAL 9.8
CVE-2019-16399EPSS 7%
Western Digital WD My Book World through II 1.02.12 suffers from Broken Authentication, which allows an attacker to access the /admin/ directory with…
Wd My Book Firmware
after 1.02.12
CRITICAL 9.8
CVE-2018-18472EPSS 30%
Western Digital WD My Book Live and WD My Book Live Duo (all versions) have a root Remote Command Execution bug via shell metacharacters in the /api/…
My Book Live Firmware
Mitigation only
HIGH 8.8
CVE-2019-9949
Western Digital My Cloud Cloud, Mirror Gen2, EX2 Ultra, EX2100, EX4100, DL2100, DL4100, PR2100 and PR4100 before firmware 2.31.183 are affected by a …
My Cloud Firmware
2.31.183+
CRITICAL 9.8
CVE-2019-9950
Western Digital My Cloud, My Cloud Mirror Gen2, My Cloud EX2 Ultra, My Cloud EX2100, My Cloud EX4100, My Cloud DL2100, My Cloud DL4100, My Cloud PR21…
My Cloud Firmware
2.31.174+
CRITICAL 9.8
CVE-2018-1151EPSS 8%
The web server on Western Digital TV Media Player 1.03.07 and TV Live Hub 3.12.13 allow unauthenticated remote attackers to execute arbitrary code or…
Tv Live Hub Firmware
No fix yet
CRITICAL 9.8
CVE-2018-9148
Western Digital WD My Cloud v04.05.00-320 devices embed the session token (aka PHPSESSID) in filenames, which makes it easier for attackers to bypass…
My Cloud Firmware
No fix yet
CRITICAL 9.8
CVE-2017-17560EPSS 73%
An issue was discovered on Western Digital MyCloud PR4100 2.30.172 devices. The web administration component, /web/jquery/uploader/multi_uploadify.ph…
My Cloud Pr4100 Firmware
Patch available
MEDIUM 5.4
CVE-2014-5876
The WD My Cloud (aka com.wdc.wd2go) application 4.0.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle…
Wd My Cloud
Mitigation only
HIGH 7.5
CVE-2014-2846EPSS 9%
Directory traversal vulnerability in opt/arkeia/wui/htdocs/index.php in the WD Arkeia virtual appliance (AVA) with firmware before 10.2.9 allows remo…
Arkeia Virtual Appliance Firmware
after 10.2.7