Terramaster Operating System vulnerabilities | LiveThreat CVE Feed

Product

Terramaster Operating System

by Terra-master · last CVE Aug 20, 2023

On CISA KEVExploited in the wildRansomware-linked

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities28 In the news0 Timeline

Severity mix

Critical 7High 9Medium 12Low 0

Severity

All severities28 Critical7 High9 Medium12 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Terramaster Operating System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-13355	6.5	1%	Nov 27	Incorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow attackers to create user groups without proper authorization Affected: 3.1.03
CVE-2018-13360	6.1	1%	Nov 27	Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "filename" URL parameter Affected: 3.1.03
CVE-2018-13349	6.1	1%	Nov 27	Cross-site scripting in the web application taskbar in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the user's username Affected: 3.1.03
CVE-2018-13333	6.1	1%	Nov 27	Cross-site scripting in File Manager in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript in the permissions window by placing JavaScript in users' usernames Affected: 3.1.03
CVE-2018-13331	6.1	1%	Nov 27	Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing users by placing JavaScript in their usernames Affected: 3.1.03
CVE-2018-13334	6.1	1%	Nov 27	Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "options[sysname]" parameter Affected: 3.1.03
CVE-2018-13329	6.1	1%	Nov 27	Cross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "lines" URL parameter Affected: 3.1.03
CVE-2018-13357	5.4	1%	Nov 27	Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing Shared Folders via JavaScript in Shared Folders' names Affected: 3.1.03
CVE-2018-13335	5.4	1%	Nov 27	Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript when viewing shared folders via their descriptions Affected: 3.1.03
CVE-2018-13337	5.4	1%	Nov 27	Session Fixation in the web application for TerraMaster TOS version 3.1.03 allows attackers to control users' session cookies via JavaScript Affected: 3.1.03
CVE-2018-13361	5.3	17%	Nov 27	User enumeration in usertable.php in TerraMaster TOS version 3.1.03 allows attackers to list all system users via the "modgroup" parameter Affected: 3.1.03
CVE-2018-13351	4.8	1%	Nov 27	Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the edit password form Affected: 3.1.03