55 matches found
CVE-2025-30097
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...
Qualys Policy Compliance Notification: Policy Library Updates (June)
Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from OS an...
CVE-2017-14385
An issue was discovered in EMC Data Domain DD OS 5.7 family, versions prior to 5.7.5.6; EMC Data Domain DD OS 6.0 family, versions prior to 6.0.2.9; EMC Data Domain DD OS 6.1 family, versions prior to 6.1.0.21; EMC Data Domain Virtual Edition 2.0 family, all versions; EMC Data Domain Virtual...
CVE-2017-4983
EMC Data Domain OS 5.2 through 5.7 before 5.7.3.0 and 6.0 before 6.0.1.0 is affected by a privilege escalation vulnerability that may potentially be exploited by attackers to compromise the affected system...
CVE-2016-8216
EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...
Command injection
EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...
CVE-2016-8216
EMC Data Domain OS DD OS 5.4 all versions, EMC Data Domain OS DD OS 5.5 family all versions prior to 5.5.5.0, EMC Data Domain OS DD OS 5.6 family all versions prior to 5.6.2.0, EMC Data Domain OS DD OS 5.7 family all versions prior to 5.7.2.10 has a command injection vulnerability that could...
EMC Data Domain OS Local Command Injection Vulnerability (ESA-2016-160)
EMC Data Domain OS is prone to a local command injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2016-0912
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 allows remote authenticated users to bypass intended password-change restrictions by leveraging access to 1 a different account with the same role as a target account or 2 an account's session at an unattended workstation...
CVE-2016-0910
EMC Data Domain OS 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0 stores session identifiers of GUI users in a world-readable file, which allows local users to hijack arbitrary accounts via unspecified vectors...
CVE-2016-0910
The CVE-2016-0910 entry concerns EMC Data Domain OS. Affected versions are 5.5 before 5.5.4.0, 5.6 before 5.6.1.004, and 5.7 before 5.7.2.0. The vulnerability arises because GUI session identifiers are stored in a world-readable file, enabling a local attacker to hijack arbitrary accounts via uns...
Command injection
The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...
CVE-2007-1836
The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...
CVE-2007-1836
Affected product/summary: Data Domain OS
CVE-2007-1836
The command line administration interface in Data Domain OS before 4.0.3.6 allows remote authenticated users to execute arbitrary commands via shell metacharacters in certain arguments to various commands, as demonstrated by the interface argument to the 1 ifconfig and 2 ping commands...