CVE-2020-5356

Dell PowerProtect Data Manager (PPDM) and PowerProtect X400 are affected by CVE-2020-5356 for versions prior to PPDM 19.4 and X400 3.2, where an improper authorization flaw allows a remote authenticated user to download any file from affected virtual machines. The issue is confirmed by multiple s...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-5356: Improper Authorization

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

PT-2020-18423

Name of the Vulnerable Software and Affected Versions Dell PowerProtect Data Manager PPDM versions prior to 19.4 Dell PowerProtect X400 versions prior to 3.2 Description The issue concerns an improper authorization vulnerability. A remote authenticated malicious user may download any file from th...

CVE-2020-5356

Dell PowerProtect Data Manager PPDM versions prior to 19.4 and Dell PowerProtect X400 versions prior to 3.2 contain an improper authorization vulnerability. A remote authenticated malicious user may download any file from the affected PowerProtect virtual machines...

CVE-2020-7585

A vulnerability has been identified in SIMATIC PCS 7 V8.2 and earlier All versions, SIMATIC PCS 7 V9.0 All versions V9.0 SP3, SIMATIC PDM All versions V9.2, SIMATIC STEP 7 V5.X All versions V5.6 SP2 HF3, SINAMICS STARTER containing STEP 7 OEM version All versions V5.4 HF2. A DLL Hijacking...

ASUSTOR AS6202T ADM Directory Traversal Vulnerability

ADM ASUSTOR Data Manager is the operating system and user interface for ASUSTOR NAS. A directory traversal vulnerability exists in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3. An attacker can exploit this vulnerability to navigate the file system via the filename parameter...

ASUSTOR AS6202T ADM Insecure Direct Object Reference Vulnerability

ADM ASUSTOR Data Manager is the operating system and user interface for ASUSTOR NAS. An insecure direct object reference vulnerability exists in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3. An attacker could use this vulnerability to reference the "downloadsyssettings" action to arbitrarily...

CVE-2018-2656

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Data Manager Server. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2656

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Data Manager Server. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2018-2656

CVE-2018-2656 affects Oracle E-Business Suite’s Oracle General Ledger component, specifically the Data Manager Server. Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3–12.2.7. The flaw is actionable by an unauthenticated attacker over HTTP with network access, enabling unauthorized creati...

CVE-2018-2656: Undefined Security Weakness

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Data Manager Server. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with...

Unspecified Vulnerability in Oracle E-Business Suite (CNVD-2018-02405)

Oracle E-Business Suite is based on the original Application ERP expansion, including ERP Enterprise Resource Planning, HR Human Resource Management, CRM Customer Relationship Management, and so on a variety of management software collection, is a seamless integration of a management suite. An...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

Design/Logic Flaw

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

CVE-2017-9944: Authentication Bypass Using an Alternate Path or Channel

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

CVE-2017-9944

A vulnerability has been identified in Siemens 7KT PAC1200 data manager 7KT1260 in all versions V2.03. The integrated web server port 80/tcp of the affected devices could allow an unauthenticated remote attacker to perform administrative operations over the network...

EMC ScaleIO for Linux Information Disclosure Vulnerability

EMC ScaleIO for Linux is a software-defined solution for converting DAS storage to shared data block storage based on the Linux platform from EMC. An information disclosure vulnerability exists in EMC ScaleIO version 2.0.1.x for Linux-based platforms, which originates when the program saves the...

Siemens 7KT PAC1200 Data Manager Authentication Bypass Vulnerability

The 7KT PAC1200 data manager 7KT1260 from the SENTRON portfolio is a fully integrated smart meter with a Web interface. An authentication bypass vulnerability exists in the 7KT PAC1200 data manager from the SENTRON portfolio, which could allow a remote attacker to bypass the authentication...