Lucene search
+L

6277 matches found

OSV
OSV
•added 2021/03/02 4:15 p.m.•14 views

CVE-2021-21513

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

9.8CVSS7.4AI score0.05942EPSS
SaveExploits1References2
NVD
NVD
•added 2021/03/02 4:15 p.m.•44 views

CVE-2021-21513

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

9.8CVSS0.05942EPSS
SaveExploits1References2
NVD
NVD
•added 2021/03/02 4:15 p.m.•35 views

CVE-2021-21514

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

4.9CVSS0.05358EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/02 4:15 p.m.•28 views

Authentication flaw

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

7.5CVSS9.7AI score0.05942EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2021/03/02 4:15 p.m.•23 views

Path traversal

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

4CVSS5.2AI score0.05358EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/03/02 4:00 p.m.•70 views

CVE-2021-21514

Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and earlier are affected by a path traversal vulnerability that allows a remote attacker with administrator privileges to view arbitrary files via a specially crafted URL request. This is due to a flaw in OMSA prior to 9.5, as detailed ...

4.9CVSS5.2AI score0.05358EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/03/02 4:00 p.m.•43 views

CVE-2021-21514

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

4.9CVSS5.5AI score0.05358EPSS
SaveExploits0References1
CVE
CVE
•added 2021/03/02 4:00 p.m.•87 views

CVE-2021-21513

Dell EMC OpenManage Server Administrator (OMSA) 9.5 on Windows with Distributed Web Server (DWS) enabled contains an authentication bypass vulnerability that could allow a remote unauthenticated attacker to gain administrator access. Root cause details are not provided beyond the bypass descripti...

9.8CVSS9.7AI score0.05942EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2021/03/02 4:00 p.m.•47 views

CVE-2021-21513

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

8.6CVSS10AI score0.05942EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/03/02 12:00 a.m.•19 views

PT-2021-14570 · Dell Emc · Dell Openmanage Server Administrator

Name of the Vulnerable Software and Affected Versions: Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior Description: The issue allows a remote user with admin privileges to potentially view arbitrary files on the target system by sending a specially crafted URL request. This c...

4.9CVSS5.5AI score0.05358EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/02 12:00 a.m.•8 views

CVE-2021-21513: Improper Authentication

Dell EMC OpenManage Server Administrator OMSA version 9.5 Microsoft Windows installations with Distributed Web Server DWS enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on t...

9.8CVSS6.1AI score0.05942EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/03/02 12:00 a.m.•16 views

Dell EMC OpenManage Server Administrator 路径遍历漏洞

OpenManage Server Administrator OMSA is a software agent that provides a comprehensive, one-to-one system management solution in two ways: first, through an integrated, Web browser-based graphical user interface GUI; and second, through a command line interface CLI displayed by the operating...

4.9CVSS6AI score0.05358EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/03/02 12:00 a.m.•2 views

PT-2021-2345

Name of the Vulnerable Software and Affected Versions Dell EMC OpenManage Server Administrator OMSA version 9.5 Description The issue is related to an authentication bypass vulnerability in the Dell EMC OpenManage Server Administrator OMSA when Distributed Web Server DWS is enabled. This...

9.8CVSS0.05942EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2021/03/02 12:00 a.m.•15 views

Dell EMC OpenManage Server Administrator 授权问题漏洞

DELL Dell EMC OpenManage Server Administrator is a set of system management solutions from DELL, USA. The program supports online diagnostics, system operation detection, device management, etc. Microsoft Windows is a desktop operating system from Microsoft Corporation. The Dell EMC OpenManage...

9.8CVSS5.8AI score0.05942EPSS
SaveExploits1References4
CNVD
CNVD
•added 2021/03/02 12:00 a.m.•22 views

Dell EMC SourceOne Cross-Site Scripting Vulnerability

Dell EMC SourceOne is a powerful archiving solution for handling email, documents and data from disparate collaboration and messaging systems. A stored cross-site scripting vulnerability exists in Dell EMC SourceOne 7.2SP10 and earlier versions. A remote, low-privilege attacker could exploit this...

9CVSS6AI score0.00846EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/02 12:00 a.m.•6 views

CVE-2021-21514: Improper Limitation of a Pathname to a Restricted Directory

Dell EMC OpenManage Server Administrator OMSA versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request...

4.9CVSS8.3AI score0.05358EPSS
SaveExploits0References3
OSV
OSV
•added 2021/03/01 9:15 p.m.•17 views

CVE-2021-21515

Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server...

5.4CVSS6.2AI score0.00846EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/01 9:15 p.m.•33 views

CVE-2021-21515

Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server...

9CVSS0.00846EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/01 9:15 p.m.•27 views

Cross site scripting

Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server...

3.5CVSS5.3AI score0.00846EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/03/01 8:25 p.m.•60 views

CVE-2021-21515

CVE-2021-21515 affects Dell EMC SourceOne, versions 7.2SP10 and earlier. The vulnerability is a Stored Cross-Site Scripting (XSS) flaw that could be exploited by a remote, low-privileged attacker to hijack user sessions or coerce a victim application user into sending arbitrary requests to the se...

9CVSS5.3AI score0.00846EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder