Lucene search
+L

520 matches found

BDU FSTEC
BDU FSTEC
added 2024/04/19 12:0 a.m.7 views

The vulnerability of the svc_cifssupport utility in the Dell Unity Operating Environment (OE) system allows a malicious actor to execute arbitrary operating system commands with root privileges.

The vulnerability of the svccifssupport utility in the Dell Unity Operating Environment DELL Unity Operating Environment system exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to...

7.8CVSS7.5AI score0.00644EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/19 12:0 a.m.8 views

The vulnerability of the svc_oscheck utility in the microprogramming software for Dell Unity storage systems allows a attacker to execute commands with root privileges.

The vulnerability of the svcoscheck utility in Dell Unity storage systems exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows an attacker to execute commands with root privileges...

7.8CVSS7.3AI score0.00837EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.7 views

The vulnerability of the operating environment for managing and maintaining Dell Unity Operating Environment (OE) storage systems arises from the lack of measures taken to protect the structure of web pages. This allows attackers to disclose sensitive user session information or execute arbitrary code under the user’s identity.

The vulnerability of the Dell Unity Operating Environment’s operating environment for data storage management and functionality exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to disclose user session-related...

6.4CVSS6.1AI score0.00295EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.10 views

The vulnerability of the svc_supportassist utility in the operating system for managing and maintaining data storage in the Dell Unity Operating Environment allows a malicious actor to execute arbitrary commands with root privileges.

The vulnerability of the svcsupportassist utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment exists due to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this...

7.8CVSS7.5AI score0.01013EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.6 views

The vulnerability of the Dell Unity Operating Environment’s operating system for managing and maintaining data storage allows a malicious actor to gain unauthorized access to files stored in the server’s file system, with elevated privileges. This vulnerability is related to errors in processing the relative path to the directory, enabling unauthorized access to these files.

The vulnerability of the operating environment for managing and maintaining Dell Unity Operating Environment OE storage involves errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to write...

6.8CVSS6.6AI score0.00354EPSS
Exploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.7 views

The vulnerability of the svc_nas utility in the operating system for managing and maintaining data storage in the Dell Unity Operating Environment allows a malicious actor to execute arbitrary commands with root privileges.

The vulnerability of the svcnas utility in the operating system for managing and maintaining data storage in the Dell Unity Operating Environment exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability can allo...

7.8CVSS7.5AI score0.00883EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.8 views

The vulnerability of the svc_dc utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment allows a perpetrator to execute arbitrary commands with root privileges.

The vulnerability of the svcdc utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allo...

7.8CVSS7.5AI score0.00644EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/04/16 12:0 a.m.8 views

The vulnerability of the operating environment for managing and maintaining the Dell Unity Operating Environment (DELL Unity Operating Environment) relates to the lack of protection for SQL query structures, which allows attackers to exploit the protected information.

The vulnerability of the operating environment for managing and maintaining Dell Unity Operating Environment OE storage systems is related to the lack of protection for SQL query structures. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

6.8CVSS6.6AI score0.00421EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2024/02/22 12:0 a.m.21 views

Dell Unity Cross-Site Scripting Vulnerability

Dell Unity is a set of virtual Unity storage environments from Dell USA. A cross-site scripting vulnerability exists in Dell Unity versions prior to 5.4, which can be exploited by an attacker to obtain the victim's cookie-based authentication credentials...

5.7CVSS6.5AI score0.0032EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/22 12:0 a.m.6 views

Dell Unity SQL Injection Vulnerability

Dell Unity is a set of virtual Unity storage environments from Dell USA. A SQL injection vulnerability exists in Dell Unity prior to version 5.4, which stems from the inclusion of an operating system command injection vulnerability in its svccava utility. An attacker could exploit this...

6.5CVSS8AI score0.00421EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/22 12:0 a.m.14 views

Dell Unity Cross-Site Scripting Vulnerability (CNVD-2024-14586)

Dell Unity is a set of virtual Unity storage environments from Dell USA. A cross-site scripting vulnerability exists in Dell Unity prior to version 5.4, which stems from the inclusion of a cross-site scripting vulnerability. An attacker could exploit this vulnerability by inserting code to perfor...

6.4CVSS6.1AI score0.00295EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.10 views

Dell Unity Command Injection Vulnerability (CNVD-2024-09153)

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to execute arbitrary operating system commands with root privileges...

7.8CVSS7.9AI score0.01013EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.6 views

Dell Unity Command Injection Vulnerability (CNVD-2024-09159)

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to escape a restricted shell and execute arbitrary OS commands with root privileges...

7.8CVSS7.9AI score0.00837EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.15 views

Dell Unity Command Injection Vulnerability (CNVD-2024-09152)

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to execute commands with root privileges...

7.8CVSS7.6AI score0.00644EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.18 views

Dell Unity Command Injection Vulnerability (CNVD-2024-09155)

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to execute arbitrary commands with elevated privileges...

7.8CVSS7.9AI score0.01119EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.33 views

Dell Unity Command Injection Vulnerability

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to escape a restricted shell and execute arbitrary OS commands with root privileges...

7.8CVSS8.1AI score0.00883EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.20 views

Dell Unity Command Injection Vulnerability (CNVD-2024-09154)

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to execute arbitrary operating system commands with root privileges...

7.8CVSS7.9AI score0.00953EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.21 views

Dell Unity Command Injection Vulnerability (CNVD-2024-09160)

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to escape a restricted shell and execute arbitrary OS commands with root privileges...

7.8CVSS7.9AI score0.00644EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.10 views

Dell Unity Command Injection Vulnerability (CNVD-2024-09157)

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to execute commands with root privileges...

7.8CVSS7.5AI score0.00837EPSS
Exploits0References1
CNVD
CNVD
added 2024/02/19 12:0 a.m.8 views

Dell Unity Command Injection Vulnerability (CNVD-2024-09161)

Dell Unity is a unified hybrid storage array for general purpose workloads both locally and in the cloud. A command injection vulnerability exists in Dell Unity, which can be exploited by a local attacker to execute arbitrary operating system commands on the application's underlying operating...

7.8CVSS7.9AI score0.00897EPSS
Exploits0References1
Rows per page
Query Builder