98 matches found
Dell Emc Streaming Data Platform 安全漏洞
Dell Emc Streaming Data Platform is a Dell platform for ingesting, storing and analyzing continuous streaming data in real time. A security vulnerability exists in the Dell Emc Streaming Data Platform that originates from the inclusion of an indirect object reference, which can be exploited by an...
CVE-2021-36330: Insufficient Session Expiration
Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user...
Dell Emc Streaming Data Platform 安全漏洞
Dell Emc Streaming Data Platform is a platform for ingesting, storing and analyzing continuous streaming data in real time from Dell USA. communication to an unencrypted format...
CVE-2021-36328: Use of GET Request Method With Sensitive Query Strings
Dell EMC Streaming Data Platform versions before 1.3 contain a SQL Injection Vulnerability. A remote malicious user may potentially exploit this vulnerability to execute SQL commands to perform unauthorized actions and retrieve sensitive information from the database...
CVE-2021-36326: Selection of Less-Secure Algorithm During Negotiation
Dell EMC Streaming Data Platform, versions prior to 1.3 contain an SSL Strip Vulnerability in the User Interface UI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to a downgrade in the communications between the client and server into an unencrypted forma...
PT-2021-21229
Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote unauthenticated attacker to potentially exploit it and perform port scanning of internal networks. It also enables the attacker to make HTTP requests ...
PT-2021-21228
Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote unauthenticated attacker to potentially exploit an SSL Strip Vulnerability in the User Interface UI, leading to a downgrade in the communications...
PT-2021-21233
Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote unauthenticated attacker to potentially reuse old session artifacts and impersonate a legitimate user due to insufficient session expiration...
PT-2021-21231
Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote malicious user to potentially exploit it and gain sensitive information due to an Indirect Object Reference Vulnerability. Recommendations For version...
PT-2021-21230
Name of the Vulnerable Software and Affected Versions Dell EMC Streaming Data Platform versions prior to 1.3 Description The issue allows a remote malicious user to potentially execute SQL commands, performing unauthorized actions and retrieving sensitive information from the database...
CVE-2021-36329: Authorization Bypass Through User-Controlled Key
Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information...
CVE-2021-36329
Dell EMC Streaming Data Platform versions before 1.3 contain an Indirect Object Reference Vulnerability. A remote malicious user may potentially exploit this vulnerability to gain sensitive information...
CVE-2021-36330
Dell EMC Streaming Data Platform versions before 1.3 contain an Insufficient Session Expiration Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to reuse old session artifacts to impersonate a legitimate user...
USN-3598-1 curl vulnerabilities
Phan Thanh discovered that curl incorrectly handled certain FTP paths. An attacker could use this to cause a denial of service or possibly execute arbitrary code. CVE-2018-1000120 Dario Weisser discovered that curl incorrectly handled certain LDAP URLs. An attacker could possibly use this issue t...
CVE-2014-0075
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service resource consumption via a malformed chunk size in chunke...
CVE-2014-0075
Integer overflow in the parseChunkHeader function in java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat before 6.0.40, 7.x before 7.0.53, and 8.x before 8.0.4 allows remote attackers to cause a denial of service resource consumption via a malformed chunk size in chunke...
Microsoft Media Player HeaderExtensionObject Heap Overflow (MS09-052; CVE-2009-2527)
A remote code execution vulnerability exists in the way that Windows Media Player 6.4 handles specially crafted ASF files. Windows Media Player is an application for Windows that supports numerous video, audio, and image formats. ASF Advanced Systems Format is a file format that stores audio and...
