Lucene search
+L

583 matches found

Positive Technologies
Positive Technologies
•added 2024/06/26 12:00 a.m.•19 views

PT-2024-22781 · Dell · Dell Powerprotect Data Domain

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Domain versions prior to 7.13.0.0 Dell PowerProtect Data Domain LTS 7.7.5.40 Dell PowerProtect Data Domain LTS 7.10.1.30 Description: The issue is related to a weak cryptographic algorithm. A remote unauthenticated...

5.9CVSS7.1AI score0.0026EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/06/26 12:00 a.m.•18 views

PT-2024-22783 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 8.0 Dell PowerProtect DD LTS 7.13.1.0 Dell PowerProtect DD LTS 7.10.1.30 Dell PowerProtect DD LTS 7.7.5.40 Description: A disclosure of temporary sensitive information issue exists, allowing a remote hig...

2.7CVSS6.9AI score0.00296EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/06/26 12:00 a.m.•30 views

Dell PowerProtect Data Domain Directory Traversal Vulnerability

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A directory traversal vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause an application to send unauthorized...

6.8CVSS6.7AI score0.00401EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/06/26 12:00 a.m.•28 views

Dell PowerProtect Data Domain Log Information Disclosure Vulnerability

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A log information disclosure vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause reuse of publicly available...

2.7CVSS6.6AI score0.00296EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/06/26 12:00 a.m.•22 views

Dell PowerProtect Data Domain Buffer Overflow Vulnerability

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A buffer overflow vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause an application to crash or execute...

8.8CVSS8.1AI score0.00642EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/06/26 12:00 a.m.•24 views

Dell PowerProtect Data Domain 缓冲区错误漏洞

Dell PowerProtect Data Domain is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell USA. A buffer overflow vulnerability exists in Dell PowerProtect Data Domain, which could be exploited by an attacker to cause an application to crash or execute...

8.8CVSS7.8AI score0.00642EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/05/20 12:00 a.m.•14 views

The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 allows a intruder to perform arbitrary actions.

The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 exists due to the lack of measures taken to neutralize the special elements used in the operating system command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

8.3CVSS7.5AI score0.01589EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/05/20 12:00 a.m.•15 views

Vulnerabilities of the software for the centralized management of PowerProtect Data Domain Management Centers, the data protection software for corporate environments – PowerProtect Data Protection; the data protection software for data backup through PowerProtect Data Domain; the operating system EMC Data Domain OS; the data protection software for corporate environments using cloud technologies – APEX Protection Storage. These vulnerabilities allow attackers to exploit them to disclose protected information.

The vulnerabilities of the PowerProtect Data Domain Management Center software, a data protection tool for corporate environments, and the PowerProtect Data Protection software for data backup purposes are related to the lack of protection for SQL query structures. Exploiting these vulnerabilitie...

4.3CVSS5.7AI score0.00569EPSS
SaveExploits0References4Affected Software5
BDU FSTEC
BDU FSTEC
•added 2024/05/06 12:00 a.m.•34 views

The software of the centralized backup and disaster recovery system of Dell PowerProtect Data Manager is vulnerable due to a flaw in the mechanism for recovering forgotten passwords. This vulnerability allows an intruder to gain unauthorized access to the application.

The software of the centralized backup and disaster recovery system Dell PowerProtect Data Manager has a vulnerability due to a flaw in the mechanism for recovering forgotten passwords. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to the...

10CVSS7.6AI score0.0056EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
•added 2024/04/01 12:00 a.m.•51 views

Dell PowerProtect Data Manager XML External Entity Injection Vulnerability

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. Dell PowerProtect Data Manager suffers from an XML external entity injection vulnerability that can be exploited by...

6.5CVSS6AI score0.00565EPSS
SaveExploits0References1
CVE
CVE
•added 2024/03/28 6:43 p.m.•91 views

CVE-2024-25971

CVE-2024-25971 affects Dell PowerProtect Data Manager, version 19.15. The issue is an XML External Entity Injection that could be exploited remotely by a high-privilege attacker to cause information disclosure and denial of service. Exploitation details are not provided beyond the vendor/product ...

6.5CVSS5.4AI score0.00565EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/03/28 6:43 p.m.•29 views

CVE-2024-25971

Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to information disclosure, denial-of-service...

5.5CVSS5.7AI score0.00565EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/28 6:43 p.m.•21 views

CVE-2024-25971

Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to information disclosure, denial-of-service...

5.5CVSS6.8AI score0.00565EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/03/28 12:00 a.m.•12 views

Dell PowerProtect Data Manager 代码问题漏洞

Dell PowerProtect Data Manager PPDM is a data protection solution from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. Dell PowerProtect Data Manager suffers from an XML external entity injection vulnerability that can be exploited by...

6.5CVSS6.7AI score0.00565EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•3 views

CVE-2024-25971: Improper Restriction of XML External Entity Reference

Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to information disclosure, denial-of-service...

6.5CVSS6AI score0.00565EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/03/05 12:00 a.m.•27 views

The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500, caused by buffer overflow in the queue, allows an attacker to trigger an emergency shutdown of the application or execute arbitrary code.

The vulnerability of the microprogramming software of the Dell PowerProtect Data Manager DM5500 backup device is caused by buffer overflow in the queue. Exploiting this vulnerability can allow an attacker, operating remotely, to cause the application to crash or execute arbitrary code...

8.1CVSS8.4AI score0.01047EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2024/02/22 12:00 a.m.•56 views

Dell PowerProtect Data Manager Operating System Command Injection Vulnerability

Dell PowerProtect Data Manager PPDM is a set of data protection solutions from Dell USA. The product supports features such as data backup, virtual machine backup and database protection. An operating system command injection vulnerability exists in Dell PowerProtect Data Manager version 19.15 an...

7.2CVSS7.3AI score0.01439EPSS
SaveExploits0References1
OSV
OSV
•added 2024/02/13 8:16 a.m.•12 views

CVE-2024-22454

Dell PowerProtect Data Manager, version 19.15 and prior versions, contain a weak password recovery mechanism for forgotten passwords. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to unauthorized access to the application with privileges of the compromise...

8.8CVSS5.8AI score0.0056EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/13 8:16 a.m.•34 views

CVE-2024-22445

Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privilege...

7.2CVSS7.3AI score0.01439EPSS
SaveExploits0References1
Prion
Prion
•added 2024/02/13 8:16 a.m.•30 views

Command injection

Dell PowerProtect Data Manager, version 19.15 and prior versions, contain an OS command injection vulnerability. A remote high privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privilege...

5.8CVSS8AI score0.01439EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder