33 matches found
Dell EMC AppSync Data Storage Privilege Escalation
The vulnerability of the Dell EMC AppSync data storage and protection software is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow attackers to enhance their privileges...
Dell EMC AppSync Data Storage Symbolic Link
The vulnerability of the Dell EMC AppSync data storage and protection software is related to deficiencies in the mechanism for handling symbolic links. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informatio...
EUVD-2024-20008
Malicious code in bioql PyPI...
EUVD-2022-27698
Malicious code in bioql PyPI...
EUVD-2022-27697
Malicious code in bioql PyPI...
Dell EMC AppSync XML External Object Disclosure
The vulnerability of the Dell EMC AppSync data storage and protection software is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability could allow an attacker to disclose protected information...
Dell EMC AppSync Data Storage Unrestricted File Loading
The vulnerability of the Dell EMC AppSync data storage and protection software is related to the unlimited download of malicious files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Dell EMC AppSync Log Information Disclosure Vulnerability
Dell EMC AppSync is a replication data management software from Dell, Inc. It provides an SLA-driven, simple self-service approach to protecting, recovering, and cloning critical Microsoft and Oracle applications as well as VMware environments. A log information disclosure vulnerability exists in...
CVE-2024-22464: Insertion of Sensitive Information into Log File
Dell EMC AppSync, versions from 4.2.0.0 to 4.6.0.0 including all Service Pack releases, contain an exposure of sensitive information vulnerability in AppSync server logs. A high privileged remote attacker could potentially exploit this vulnerability, leading to the disclosure of certain user...
Dell EMC AppSync 日志信息泄露漏洞
Dell EMC AppSync is a replication data management software from Dell, Inc. It provides an SLA-driven, simple self-service approach to protecting, recovering, and cloning critical Microsoft and Oracle applications as well as VMware environments. A log information disclosure vulnerability exists in...
Dell EMC AppSync Access Control Error Vulnerability
Dell EMC AppSync is a replication data management software from Dell, Inc. It provides a simple self-service, SLA-driven approach to protecting, recovering and cloning critical Microsoft and Oracle applications and VMware environments. An Access Control Error vulnerability exists in Dell EMC...
Dell EMC AppSync 访问控制错误漏洞
Dell EMC AppSync is a replication data management software from Dell, Inc. It provides a simple self-service, SLA-driven approach to protecting, recovering and cloning critical Microsoft and Oracle applications and VMware environments. An Access Control Error vulnerability exists in Dell EMC...
CVE-2022-24424
Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web...
PT-2022-16687
Name of the Vulnerable Software and Affected Versions Dell EMC AppSync versions 3.9 through 4.3 Description The issue allows a remote unauthenticated attacker to potentially gain unauthorized read access to files stored on the server filesystem with the privileges of the running web application,...
CVE-2022-24424: Improper Limitation of a Pathname to a Restricted Directory
Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web...
DELL EMC AppSync 路径遍历漏洞
DELL EMC AppSync is a replicated data management software from Dell, Inc. It provides an SLA-driven, simple self-service approach to protecting, recovering and cloning critical Microsoft and Oracle applications and VMware environments. A path traversal vulnerability exists in Dell EMC AppSync,...
CVE-2022-24424
Dell EMC AppSync versions from 3.9 to 4.3 contain a path traversal vulnerability in AppSync server. A remote unauthenticated attacker may potentially exploit this vulnerability to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web...
DELL EMC AppSync has an unspecified vulnerability
DELL EMC AppSync is a replication data management software from Dell USA Inc. The security vulnerability in DELL EMC AppSync stems from the fact that Dell EMC AppSync versions 3.9 through 4.3 contain an "over-authentication Improper Attempt Limitation" vulnerability, which can be exploited from t...
Unspecified vulnerability in DELL EMC AppSync (CNVD-2022-06705)
DELL EMC AppSync is a replication data management software from Dell USA Inc. A security vulnerability exists in DELL EMC AppSync due to the use of the GET request method with sensitive query strings in DELL EMC AppSync versions 3.9 through 4.3. . An attacker could use this vulnerability to hijac...
CVE-2022-22551
DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session...