Login Request a demo
SE
Vendor
Seagate
17 products with CVEs on record
43
CVEs
0
On KEV
0
New 30D
Products
NO
Nas OS
Seagate
9.8
10 CVEs0 on KEV0 new
BN
Blackarmor Nas 220 Firmware
Seagate
9.8
5 CVEs0 on KEV0 new
GS
Goflex Sattelite
Seagate
9.8
3 CVEs0 on KEV0 new
SF
St500lt015 Firmware
Seagate
4.2
3 CVEs0 on KEV0 new
WM
Wireless Mobile Storage
Seagate
9.8
3 CVEs0 on KEV0 new
WP
Wireless Plus Mobile Storage
Seagate
9.8
3 CVEs0 on KEV0 new
BN
Blackarmor Nas 110 Firmware
Seagate
9.8
2 CVEs0 on KEV0 new
BN
Blackarmor Nas 220
Seagate
–
2 CVEs0 on KEV0 new
PC
Personal Cloud Firmware
Seagate
9.8
2 CVEs0 on KEV0 new
SF
St500lt025 Firmware
Seagate
4.2
2 CVEs0 on KEV0 new
TO
Toolkit
Seagate
7.0
2 CVEs0 on KEV0 new
BN
Blackarmor Nas
Seagate
–
1 CVEs0 on KEV0 new
BN
Business Nas Firmware
Seagate
9.8
1 CVEs0 on KEV0 new
CS
Cortx-s3 Server
Seagate
7.5
1 CVEs0 on KEV0 new
SF
Stcg2000300 Firmware
Seagate
9.8
1 CVEs0 on KEV0 new
SF
Stcg3000300 Firmware
Seagate
9.8
1 CVEs0 on KEV0 new
SF
Stcg4000300 Firmware
Seagate
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-9267
TO
Toolkit
Seagate
7.0
0%
Sep 26In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current working directory without…
CVE-2025-9043
TO
Toolkit
Seagate
6.7
0%
Aug 14The service executable path in Seagate Toolkit on Versions prior to 2.34.0.33 on Windows allows an attacker with Admin privileges to exploit a vulnerability as classified under…
CVE-2020-6627
SF
Stcg2000300 Firmware
Seagate
9.8
13%
Dec 6The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_backend_launch in…
CVE-2021-43429
CS
Cortx-s3 Server
Seagate
7.5
1%
Apr 7A Denial of Service vulnerability exists in CORTX-S3 Server as of 11/7/2021 via the mempool_destroy method due to a failture to release locks pool->lock
CVE-2018-12304
NO
Nas OS
Seagate
6.1
1%
May 13Cross-site scripting in Application Manager in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via multiple application metadata fields: Short Description,…
CVE-2018-12303
NO
Nas OS
Seagate
5.4
1%
May 13Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via directory names
CVE-2018-12302
NO
Nas OS
Seagate
6.1
1%
May 13Missing HTTPOnly flag on session cookies in the Seagate NAS OS version 4.3.15.1 web application allows attackers to steal session tokens via cross-site scripting
CVE-2018-12301
NO
Nas OS
Seagate
7.5
1%
May 13Unvalidated URL in Download Manager in Seagate NAS OS version 4.3.15.1 allows attackers to access the loopback interface via a Download URL of 127.0.0.1 or localhost
CVE-2018-12300
NO
Nas OS
Seagate
6.1
3%
May 13Arbitrary Redirect in echo-server.html in Seagate NAS OS version 4.3.15.1 allows attackers to disclose information in the Referer header via the 'state' URL parameter
CVE-2018-12299
NO
Nas OS
Seagate
5.4
1%
May 13Cross-site scripting in filebrowser in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via uploaded file names
CVE-2018-12298
NO
Nas OS
Seagate
7.5
2%
May 13Directory Traversal in filebrowser in Seagate NAS OS 4.3.15.1 allows attackers to read files within the application's container via a URL path
CVE-2018-12297
NO
Nas OS
Seagate
6.1
1%
May 13Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names
CVE-2018-12296
NO
Nas OS
Seagate
7.5
11%
May 13Insufficient access control in /api/external/7.0/system.System.get_infos in Seagate NAS OS version 4.3.15.1 allows attackers to obtain information about the NAS without…
CVE-2018-12295
NO
Nas OS
Seagate
9.8
1%
May 13SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter
CVE-2017-18263
PC
Personal Cloud Firmware
Seagate
7.5
3%
Apr 28Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url
CVE-2014-3206
BN
Blackarmor Nas 220 Firmware
Seagate
9.8
51%
Feb 23Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the auth_name parameter to…
CVE-2014-3205
BN
Blackarmor Nas 220 Firmware
Seagate
9.8
3%
Feb 23backupmgt/pre_connect_check.php in Seagate BlackArmor NAS contains a hard-coded password of '!~@##$$%FREDESWWSED' for a backdoor user
CVE-2018-5347
PC
Personal Cloud Firmware
Seagate
9.8
54%
Jan 12Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the…
CVE-2015-7267
SF
St500lt015 Firmware
Seagate
4.2
0%
Nov 27Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when in sleep mode and operating in Opal or eDrive mode on Lenovo ThinkPad…
CVE-2015-7269
SF
St500lt015 Firmware
Seagate
4.2
0%
Nov 27Seagate ST500LT015 hard disk drives, when operating in eDrive mode on Lenovo ThinkPad W541 laptops with BIOS 2.21, allow physically proximate attackers to bypass self-encrypting…
CVE-2015-7268
SF
St500lt015 Firmware
Seagate
4.2
0%
Nov 27Samsung 850 Pro and PM851 solid-state drives and Seagate ST500LT015 and ST500LT025 hard disk drives, when used on Windows and operating in Opal mode on Lenovo ThinkPad T440s…
CVE-2013-6924
BN
Blackarmor Nas 220 Firmware
Seagate
9.8
15%
Oct 11Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to…
CVE-2014-8687
BN
Business Nas Firmware
Seagate
9.8
44%
Jun 8Seagate Business NAS devices with firmware before 2015.00322 allow remote attackers to execute arbitrary code with root privileges by leveraging use of a static encryption key to…
CVE-2015-2876
WM
Wireless Mobile Storage
Seagate
8.8
3%
Dec 31Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware…
CVE-2015-2875
GS
Goflex Sattelite
Seagate
7.5
3%
Dec 31Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware…
CVE-2015-2874
WM
Wireless Mobile Storage
Seagate
9.8
4%
Dec 31Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of…
CVE-2013-6922
BN
Blackarmor Nas 220 Firmware
Seagate
–
1%
Jan 21Multiple cross-site request forgery (CSRF) vulnerabilities in the Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to hijack the…
CVE-2013-6923
BN
Blackarmor Nas 220 Firmware
Seagate
–
3%
Jan 9Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to inject arbitrary web script or…
CVE-2012-2568
BN
Blackarmor Nas
Seagate
–
4%
May 25d41d8cd98f00b204e9800998ecf8427e.php in the management web server on the Seagate BlackArmor device allows remote attackers to change the administrator password via unspecified…