CVE-2017-6779

CVE-2017-6779 affects multiple Cisco VOS-based products (Emergency Responder, Finesse, UCM family, Unity Connection, UIC, SME, UCCx, MediaSense, Prime products, and related). Root cause: system log file has no maximum size limit, enabling an unauthenticated, remote attacker to cause high disk uti...

CVE-2017-6779

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

CVE-2017-6779

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

[SECURITY] Fedora 27 Update: sqlite-3.20.1-3.fc27

SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a single disk file. The API is designed for convenience and ease of use. Applications that link against SQLite can enjoy the power and flexibility of an SQL databas...

The vulnerability of the diffoscope file and directory comparison tool lies in the lack of necessary checks during the analysis of archives. This allows a malicious actor to write data into arbitrary areas of disk space.

The vulnerability of the diffoscope file and directory comparison tool lies in the lack of necessary checks during the analysis of archives. Exploiting this vulnerability allows a malicious actor, operating remotely, to write data to arbitrary areas of disk space using a specially crafted archive...

Cisco Wide Area Application Services (WAAS) Software Elevation of Privilege Vulnerability

Cisco Wide Area Application Services WAAS Software is a suite of WAN link acceleration software from Cisco, U.S.A. Disk Check Tool disk-check.sh is one of the disk checking tools. A privilege-lifting vulnerability exists in Disk Check Tool disk-check.sh in Cisco WAAS Software, which stems from th...

Multiple Cisco Products Disk Utilization Denial of Service Vulnerability

Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration products that could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occu...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15633)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Storage Group" method in Quest DR Series Disk Backup Software before 4.0.3.1. The vulnerability can be exploited to execute system commands via the 'name' parameter...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15625)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setBandwidthLimit method in Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15617)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the get usage method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15875)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the registerDR2000v method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'LicenseServer',...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15885)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Email Alerts" method in versions of Quest DR Series disk backup software prior to version 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15864)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the updateRegisterDR2000v method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15874)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "License Delete" method of Quest DR Series disk backup software prior to version 4.0.3.1. The vulnerability can be exploited to execute commands via a specially crafted 'serviceTag'...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15628)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the deactivatereplicaVTLcontainer method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands via the container name...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15887)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Duplicates" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15873)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setcompression method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15903)

The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability via perl to elevate privileges from web server user to root...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15888)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setencryptionsettings method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute arbitrary system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15627)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Start Copy" method in Quest DR Series Disk Backup Software before 4.0.3.1. The vulnerability can be exploited to execute arbitrary commands via the 'name' parameter...