PT-2019-16692

Name of the Vulnerable Software and Affected Versions Dell EMC Enterprise Copy Data Management eCDM versions 1.0, 1.1, 2.0, 2.1, and 3.0 Description The issue allows an unauthenticated remote attacker to potentially carry out a man-in-the-middle attack by supplying a crafted certificate. This cou...

CVE-2019-3751: Improper Certificate Validation

Dell EMC Enterprise Copy Data Management eCDM versions 1.0, 1.1, 2.0, 2.1, and 3.0 contain a certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and...

Dell EMC Enterprise Copy Data Management Certificate Validation Security Bypass Vulnerability

Description Dell EMC Enterprise Copy Data Management is prone to a security-bypass vulnerability because the application fails to properly validate certificates. Successfully exploiting this issue allows attackers to perform man-in-the-middle attacks or impersonate trusted servers, which will aid...

CVE-2018-14401

CopyData in AxmlParser.c in AXML Parser through 2018-01-04 has an out-of-bounds read...

The vulnerability of the Core component of the Oracle VM VirtualBox allows a malicious attacker from the guest operating system to execute certain commands or copy data from the host operating system.

The vulnerability of the Core hypervisor component in Oracle VM VirtualBox is related to access control deficiencies. Exploiting this vulnerability allows a malicious individual operating locally on the guest operating system to execute certain commands or copy data from the guest operating syste...

The vulnerability of Samba software allows a remote attacker to compromise the confidentiality of protected information.

The vulnerability exists in Samba under certain settings of shadow copying vfs. It stems from an improper initialization of the SRVSNAPSHOTARRAY field. Exploiting this vulnerability allows remote users who have passed authentication to access confidential information from the process’s memory,...

UBUNTU-CVE-2015-5299

The shadowcopy2getshadowcopydata function in modules/vfsshadowcopy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not verify that the DIRECTORYLIST access right has been granted, which allows remote attackers to access snapshots by visiting a shadow copy...

PT-2014-1429

Name of the Vulnerable Software and Affected Versions Samba versions 3.6.6 through 3.6.23 Samba versions 4.0.x before 4.0.18 Samba versions 4.1.x before 4.1.8 Description The issue is related to the improper initialization of the SRV SNAPSHOT ARRAY response field in Samba when a certain vfs shado...