Hitachi ABB Power Grids System Data Manager 加密问题漏洞

Hitachi ABB Power Grids System Data Manager is a system data manager from Hitachi, Japan. Hitachi ABB Power Grids System Data Manager is vulnerable to an encryption issue that stems from the fact that the application does not encrypt backup files. A local operating system user can modify the back...

CVE-2021-35526

Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information. This issue affects: Hitachi ABB Power Grids System Data Manager – SDM600 1.2 versions prior to FP2 HF6 Build Nr. 1.2.14002.257...

Dell PowerProtect Data Manager and PowerProtect X400 Licensing Issues Vulnerability

Dell PowerProtect Data Manager PPDM and PowerProtect X400 are both products from Dell, U.S.A. Dell PowerProtect Data Manager is a data protection solution. It supports data backup, virtual machine backup and database protection.PowerProtect X400 is a data management appliance. An authorization...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

Authorization

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-5356

Dell PowerProtect Data Manager (PPDM) and PowerProtect X400 are affected by CVE-2020-5356 for versions prior to PPDM 19.4 and X400 3.2, where an improper authorization flaw allows a remote authenticated user to download any file from affected virtual machines. The issue is confirmed by multiple s...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-7585

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A DLL Hijacking...

ASUSTOR AS6202T ADM Directory Traversal Vulnerability

ADM ASUSTOR Data Manager is the operating system and user interface for ASUSTOR NAS. A directory traversal vulnerability exists in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3. An attacker can exploit this vulnerability to navigate the file system via the filename parameter...

ASUSTOR AS6202T ADM Insecure Direct Object Reference Vulnerability

ADM ASUSTOR Data Manager is the operating system and user interface for ASUSTOR NAS. An insecure direct object reference vulnerability exists in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3. An attacker could use this vulnerability to reference the "downloadsyssettings" action to arbitrarily...

CVE-2018-2656

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Data Manager Server. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2656

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Data Manager Server. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2656

CVE-2018-2656 affects Oracle E-Business Suite’s Oracle General Ledger component, specifically the Data Manager Server. Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.7. The flaw is actionable by an unauthenticated attacker over HTTP with network access, enabling unauthorized creati...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-02405)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

Design/Logic Flaw

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

EMC ScaleIO for Linux Information Disclosure Vulnerability

EMC ScaleIO for Linux is a software-defined solution for converting DAS storage to shared data block storage based on the Linux platform from EMC. An information disclosure vulnerability exists in EMC ScaleIO version 2.0.1.x for Linux-based platforms, which originates when the program saves the...

Siemens 7KT PAC1200 Data Manager Authentication Bypass Vulnerability

The 7KT PAC1200 data manager 7KT1260 from the SENTRON portfolio is a fully integrated smart meter with a Web interface. An authentication bypass vulnerability exists in the 7KT PAC1200 data manager from the SENTRON portfolio, which could allow a remote attacker to bypass the authentication...