6277 matches found
CVE-2016-0908
EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 are affected by CVE-2016-0908. The vulnerability allows a local attacker with administrative privileges to obtain root shell access by exploiting privilege escalation within the Isilon OneFS environment. The description confirms local...
CVE-2016-0908: Undefined Security Weakness
EMC Isilon OneFS 7.1.x before 7.1.1.9 and 7.2.x before 7.2.1.2 allows local users to obtain root shell access by leveraging administrative privileges...
PT-2016-4462
Name of the Vulnerable Software and Affected Versions EMC Isilon OneFS versions 7.1.x through 7.1.1.8 EMC Isilon OneFS versions 7.2.x through 7.2.1.1 Description The issue allows local users to obtain root shell access by leveraging administrative privileges. Recommendations For EMC Isilon OneFS...
Code injection
EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a...
CVE-2016-0907
EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a...
CVE-2016-0907
EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a...
CVE-2016-0907
CVE-2016-0907 affects EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3, and 8.0.x before 8.0.0.1, plus IsilonSD Edge OneFS 8.0.x before 8.0.0.1. The issue is that SMB signing is not required within a DCERPC session over ncacn_np, enabling a man-in-the-middle attacker to spoof SMB clients by modify...
CVE-2016-0907
EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a...
PT-2016-4461
Name of the Vulnerable Software and Affected Versions EMC Isilon OneFS versions 7.1.x through 7.2.x before 7.2.1.3 EMC Isilon OneFS versions 8.0.x before 8.0.0.1 IsilonSD Edge OneFS versions 8.0.x before 8.0.0.1 Description The issue allows man-in-the-middle attackers to spoof SMB clients by...
CVE-2016-0907: Undefined Security Weakness
EMC Isilon OneFS 7.1.x and 7.2.x before 7.2.1.3 and 8.0.x before 8.0.0.1, and IsilonSD Edge OneFS 8.0.x before 8.0.0.1, does not require SMB signing within a DCERPC session over ncacnnp, which allows man-in-the-middle attackers to spoof SMB clients by modifying the client-server data stream, a...
EMC RSA Authentication Manager < 8.1 SP1 Patch 14 Multiple Vulnerabilities
The version of EMC RSA Authentication Manager running on the remote host is prior to 8.1 SP1 Patch 14. It is, therefore, affected by multiple vulnerabilities : - Multiple cross-site scripting vulnerabilities exist due to a failure to properly validate input before returning it to users. An...
CVE-2016-0902
CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...
CVE-2016-0901
Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900...
CVE-2016-0901
Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900...
CVE-2016-0900
Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901...
Cross site scripting
Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0900...
Crlf injection
CRLF injection vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901...
CVE-2016-0902
EMC RSA Authentication Manager before 8.1 SP1 Patch 14 is affected by a CRLF injection vulnerability (CVE-2016-0902) that could allow an unauthenticated attacker to inject arbitrary HTTP headers and perform HTTP response splitting in unspecified vectors. Connected sources consistently identify th...
CVE-2016-0900
Cross-site scripting XSS vulnerability in EMC RSA Authentication Manager before 8.1 SP1 P14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-0901...