268 matches found
CVE-2017-8012
The CVE pertains to Dell EMC/VNX Monitoring and Reporting (RMI Registry) deserialization vulnerability that can be exploited remotely to cause a DoS. The attack path involves the exposed RMI registry (default port 52569) accepting untrusted data; authentication exists but can be bypassed per the ...
CVE-2017-8007
In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R Watch4Net for SAS Solution Packs, the Webservice Gateway is affected by a directory traversal vulnerability. Attackers with knowledge of Webservice Gateway credentials could potentially exploit this vulnerability to access unauthorized information, a...
The vulnerabilities of the components of Webservice Gateway and RMI JMX software solutions for monitoring, visualization, analysis, and optimization of storage resources in EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, and EMC M&R SAS Solution Packs allow attackers to launch arbitrary web services and trigger certain procedures.
The vulnerability of the components of Webservice Gateway and RMI JMX software solutions for monitoring, visualization, analysis, and optimization of storage resources for EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, and EMC M&R for SAS Solution Packs is related to the use of fixed system accounts...
CVE-2017-12077
CVE-2017-12077 affects Synology Router Manager (SRM) prior to 1.1.4-6509, specifically the SYNO.Core.PortForwarding.Rules component. The vulnerability allows a remote authenticated attacker to trigger uncontrolled resource consumption, exhausting memory resources and leading to denial of service....
CVE-2017-8011
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R Watch4Net for SAS Solution Packs all versions contain undocumented accounts with default passwords for Webservice Gateway and RMI J...
CVE-2017-8011
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R Watch4Net for SAS Solution Packs all versions contain undocumented accounts with default passwords for Webservice Gateway and RMI J...
CVE-2017-8011
CVE-2017-8011 is substantiated by connected disclosures indicating default/undocumented accounts with passwords in EMC/VNX monitoring products, enabling remote execution when the Webservice Gateway/RMI JMX are targeted. ZDI-17-505 details a remote code execution path via static credentials in the...
CVE-2017-8011
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R Watch4Net for SAS Solution Packs all versions contain undocumented accounts with default passwords for Webservice Gateway and RMI J...
XSS in SAP NetWeaver AS Java SRM
Application: SAP SRM Versions Affected: SAP SRM 701 – 714 Vendor URL: SAP Bug: XSS Reported: 17.05.2017 Vendor response: 18.05.2017 Date of Public Advisory: 08.08.2017 Reference: SAP Security Note 2493099 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class: XSS Risk: Medium Impact:...
Information disclosure in SAP NW AS Java SRM package
Application: SAP SRM Versions Affected: SAP SRM 701 – 714 Vendor URL: SAP Bug: Information Disclosure Reported: 17.05.2017 Vendor response: 18.05.2017 Date of Public Advisory: 08.08.2017 Reference: SAP Security Note 2493099 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class:...
Threat Outbreak Alert RuleID25329: Email Messages Distributing Malicious Software on October 6, 2016
Medium Alert ID: 49211 First Published: 2016 October 6 13:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25329 may contain the following files: Name |...
SolarWinds Storage Resource Monitor (SRM) < 6.2.3 Multiple SQLi Vulnerabilities
SolarWinds Storage Resource Monitor SRM is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...
SolarWinds Storage Resource Monitor (SRM) Detection (HTTP)
HTTP based detection of SolarWinds Storage Resource Monitor SRM. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2016-6647
Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-6647
Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-6647
Cross-site scripting XSS vulnerability in EMC ViPR SRM before 4.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-6647
EMC ViPR SRM is affected by a cross-site scripting (XSS) vulnerability in versions before 4.0.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. The description does not specify the underlying root cause, affected components, or exact ex...