EUVD-2019-13358

Malware in sbrugna...

EUVD-2020-26503

Malware in sbrugna...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5370

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

PT-2021-12400

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.4 Description The issue allows a remote authenticated malicious user with high privileges to potentially exploit an arbitrary file overwrite vulnerability. This can be achieved via directo...

CVE-2020-5370: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...

CVE-2020-5323

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an injection vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to gain access to sensitive...

PT-2021-12391

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.2 Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue is related to improper input validation, which could be exploited by a remote authenticated...

PT-2021-12392

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue allows a remote authenticated malicious user with high privileges to potentially execute arbitrary shell commands on the affected system. This is...

PT-2021-12390

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.2 Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue is a SQL injection vulnerability that could be exploited by a remote authenticated malicious...

PT-2021-12393

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Enterprise OME versions prior to 3.2 Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 Description The issue concerns an injection vulnerability that could be exploited by a remote authenticated malicio...

CVE-2020-5323: Improper Restriction of XML External Entity Reference

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an injection vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability to gain access to sensitive...

CVE-2020-5322: Improper Neutralization of Special Elements used in an OS Command

Dell EMC OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a command injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit the vulnerability to execute arbitrary shell commands on the affected system...

CVE-2020-5321: Improper Input Validation

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain an improper input validation vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to spawn tasks wit...

CVE-2020-5320: Improper Neutralization of Special Elements used in an SQL Command

Dell EMC OpenManage Enterprise OME versions prior to 3.2 and OpenManage Enterprise-Modular OME-M versions prior to 1.10.00 contain a SQL injection vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to execute SQL commands to...

One-to-one Dell EMC OpenManage Server Administrator Authentication Bypass

The vulnerability of the software for managing systems in the One-to-one Dell EMC OpenManage Server Administrator mode is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the administrator’s...

CVE-2021-21513

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

CVE-2021-21513: Improper Authentication

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

CVE-2021-21514: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

PT-2021-2345

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Server Administrator OMSA version 9.5 Description The issue is related to an authentication bypass vulnerability in the Dell EMC OpenManage Server Administrator OMSA when Distributed Web Server DWS is enabled. This...