Security Bulletin: There is a vulnerability in the systemd used in IBM Elastic Storage System

Summary There is a security vulnerability in versions of systemd that are shipped with versions of IBM Elastic Storage System. A fix for this vulnerability is available. Vulnerability Details CVEID: CVE-2021-33910 DESCRIPTION: Systemd is vulnerable to a denial of service, caused by a memory...

dhl-ess.com Improper Access Control vulnerability OBB-2298588

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-39995

The CVE-2021-39995 issue affects Huawei devices using OpenHpi for hardware management. A parsing function on data returned by OpenHpi has an out-of-bounds read that can lead to a denial of service. Affected products and versions include: eCNS280_TD V100R005C10; eSE620X vESS V100R001C10SPC200, V10...

CVE-2021-22396

Affecting Huawei products (eCNS280_TD V100R005C00/C10; eSE620X vESS V100R001C10SPC200/V100R001C20SPC200), CVE-2021-22396 is a local privilege-escalation vulnerability caused by improper privilege management. A local attacker with basic privileges can access certain files, enabling privilege escal...

Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by a vulnerability in IBM Spectrum Scale (CVE-2015-7488)

Summary There is a vulnerability in IBM Spectrum Scale packaged with IBM Spectrum Scale RAID for the Elastic Storage Server and the GPFS Storage Server. Vulnerability Details CVEID: CVE-2015-7488 DESCRIPTION: IBM Spectrum Scale could allow a local, unprivileged user or a user with network access ...

Security Bulletin: Vulnerability in IBM Java SDK affect IBM Spectrum Scale RAID/IBM GPFS Native RAID (CVE-2015-7575)

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 8 that is used by IBM Spectrum Scale RAID/IBM GPFS Native RAID. This vulnerability, commonly referred to as “SLOTH”, was disclosed as part of the IBM Java SDK updates in January 2016. Vulnerability Details CVEID:...

Security Bulletin: The Elastic Storage Server and the GPFS Storage Server are affected by vulnerabilities in IBM Spectrum Scale (CVE-2016-0263, CVE2016-0361)

Summary There are vulnerabilities in IBM Spectrum Scale packaged with IBM Spectrum Scale RAID for the Elastic Storage Server and the GPFS Storage Server. Vulnerability Details CVEID: CVE-2016-0263 DESCRIPTION: IBM General Parallel File System could allow a local user under special circumstances t...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Security Bulletin: A vulnerability in IBM Java SDK affects in IBM Elastic Storage Server (CVE-2020-2654)

Summary There is a vulnerability in IBM SDK Java Technology Edition, Version 8 used by IBM Elastic Storage Server. This issue was disclosed as part of the IBM Java SDK updates in Jan 2020. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTION: An unspecified vulnerability in Java SE related to t...

CVE-2020-9288

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

CVE-2020-9288

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

Cross site scripting

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

CVE-2020-9288

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

CVE-2020-9288: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input vulnerability in FortiWLC 8.5.1 allows a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

PT-2020-6795

Name of the Vulnerable Software and Affected Versions FortiWLC version 8.5.1 Description The issue is related to the lack of protection of the web page structure in the ESS profile and Radius microprogram software of FortiWLC wireless access controllers. This can be exploited by a remote attacker...

XSS vulnerability in the ESS Profile and Radius Profile of FortiWLC

An improper neutralization of input vulnerability in FortiWLC may allow a remote authenticated attacker to perform a stored cross site scripting attack XSS via the ESS profile or the Radius Profile...

PT-2020-7969

Name of the Vulnerable Software and Affected Versions: Samsung mobile devices with L5.0/5.1 with USB OTG MyFile2014 L ESS support software Description: An issue was discovered that allows for a Factory Reset Protection FRP bypass. Recommendations: For Samsung mobile devices with L5.0/5.1 with USB...

Mitsubishi FX5-8EYT/ESS Digital I/O Module Detection

Binary data 751981.prm...

Security Vulnerability in ESS ExpressVote Touchscreen Voting Computer

Of course the ESS ExpressVote voting computer will have lots of security vulnerabilities. It's a computer, and computers have lots of vulnerabilities. This particular vulnerability is particularly interesting because it's the result of a security mistake in the design process. Someone didn't thin...

Barracuda Cloud ESS 2.x - Multiple XSS Web Vulnerabilities

Document Title: =============== Barracuda Cloud ESS 2.x - Multiple XSS Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=742 Barracuda Networks Security ID: BNSEC-671 Release Date: ============= 2018-07-22 Vulnerability Laboratory ID...