Lucene search
+L

1064 matches found

attackerkb
attackerkb
•added 2021/05/03 12:00 a.m.•9 views

CVE-2021-21550

Dell EMC PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability can allow an authenticated user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges to escalate privileges...

7.2CVSS6.6AI score0.00272EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/05/03 12:00 a.m.•9 views

CVE-2021-21527

Dell PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability may allow an authenticated user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges to escalate privileges...

7.2CVSS6.6AI score0.00272EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/04/22 12:00 a.m.•9 views

Dell Technologies Dell PowerScale OneFS Encryption Issue Vulnerability

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An encryption issue vulnerability exists in Dell PowerScale OneFS versions 8.1.0 through 9.1.0, which stems from a vulnerability...

9.1CVSS6.7AI score0.0059EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/22 12:00 a.m.•18 views

Dell Technologies Dell PowerScale OneFS Operating System Command Injection Vulnerability

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An operating system command injection vulnerability exists in Dell PowerScale OneFS versions 8.1.0 through 9.1.0 that allows...

7.2CVSS8.1AI score0.00287EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/20 5:15 p.m.•37 views

CVE-2020-26197

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication...

9.1CVSS0.0059EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/20 5:15 p.m.•17 views

CVE-2020-26197

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication...

9.1CVSS5.8AI score0.0059EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/20 12:00 a.m.•18 views

PT-2021-11225 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.1.0 through 9.1.0 Description: The issue is related to the LDAP Provider's inability to connect over TLSv1.2, which may make it easier for a malicious actor to eavesdrop and decrypt traffic. This issue does no...

9.1CVSS9.2AI score0.0059EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•6 views

CVE-2020-26197: Inadequate Encryption Strength

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and decrypt such traffic for a malicious actor. Note: This does not affect clusters which are not relying on an LDAP server for the authentication...

9.1CVSS5.8AI score0.0059EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/04/20 12:00 a.m.•15 views

Dell Technologies Dell PowerScale OneFS 操作系统命令注入漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An operating system command injection vulnerability exists in Dell PowerScale OneFS versions 8.1.0 through 9.1.0 that allows...

7.2CVSS6.2AI score0.00287EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•4 views

CVE-2021-21526: Improper Neutralization of Special Elements used in an OS Command

Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root...

7.2CVSS6.3AI score0.00287EPSS
SaveExploits0References3
NVD
NVD
•added 2021/03/08 10:15 p.m.•45 views

CVE-2021-21506

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISIPRIVSYSSUPPORT and ISIPRIVLOGINPAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation...

8.8CVSS0.01076EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/08 10:15 p.m.•39 views

CVE-2021-21503

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

7.8CVSS0.0032EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/08 10:15 p.m.•32 views

Input validation

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISIPRIVSYSSUPPORT and ISIPRIVLOGINPAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation...

6.5CVSS8.6AI score0.01076EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/03/08 10:15 p.m.•33 views

Input validation

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

4.6CVSS7.5AI score0.0032EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/03/08 9:44 p.m.•41 views

CVE-2021-21506

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISIPRIVSYSSUPPORT and ISIPRIVLOGINPAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation...

8.8CVSS8.8AI score0.01076EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/03/08 9:44 p.m.•45 views

CVE-2021-21503

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

7.8CVSS7.8AI score0.0032EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/08 12:00 a.m.•5 views

CVE-2021-21503: Improper Neutralization of Special Elements used in an OS Command

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

7.8CVSS5.9AI score0.0032EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/08 12:00 a.m.•9 views

CVE-2021-21506: Improper Input Validation

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISIPRIVSYSSUPPORT and ISIPRIVLOGINPAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation...

8.8CVSS5.9AI score0.01076EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/03/08 12:00 a.m.•19 views

PowerScale OneFS 输入验证错误漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, USA. PowerScale OneFS operating system that provides horizontal scaling NAS. An input validation error vulnerability exists in PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 that allows unauthenticated ISIPRIVSYSSUPPOR...

8.8CVSS7.9AI score0.01076EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/02/26 12:00 a.m.•9 views

CVE-2021-21503

PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation...

7.8CVSS7.1AI score0.0032EPSS
SaveExploits0References2
Rows per page
Query Builder