EUVD-2011-1425

Malware in sbrugna...

EUVD-2016-9059

Malware in sbrugna...

EUVD-2018-3092

Malware in sbrugna...

EUVD-2017-16972

Malware in sbrugna...

EUVD-2019-8329

Malware in sbrugna...

EUVD-2012-4541

Malware in sbrugna...

EUVD-2017-16973

Malware in sbrugna...

EUVD-2011-1741

Malware in sbrugna...

CVE-2012-4616

Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor DPA 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2022-45102

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

CVE-2022-45102: Improper Neutralization of HTTP Headers for Scripting Syntax

Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary \u2018Host\u2019 header values to poison a web cache or trigger redirections...

EMC Data Protection Advisor < 19.7 Build B4 XSS (DSA-2022-107)

According to its self-reported version, the application is below version 19.7 Build B4. It is, therefore, affected by a stored cross-site scripting vulnerability. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context ...

CVE-2022-33935: Improper Neutralization of Input During Web Page Generation

Dell EMC Data Protection Advisor versions 19.6 and earlier, contains a Stored Cross Site Scripting, an attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaScript codes in a trusted application data store. When a victim user accesses the data stor...

CVE-2022-34367: Cross-Site Request Forgery (CSRF)

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

PT-2022-22147

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central versions 19.1 through 19.6 Description The issue allows a remote unauthenticated attacker to potentially exploit a Cross-Site Request Forgery vulnerability, leading to the processing of unintended server...

Input validation

Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2021-43588: Improper Input Validation

Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2021-36349: Server-Side Request Forgery (SSRF)

Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts...

PT-2022-10509

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central versions 19.5 and prior Description The issue is related to a Server Side Request Forgery vulnerability in the DPC DNS client processing. This could allow a remote malicious user to potentially exploit the...

PT-2022-11870

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central version 19.5 Description The issue is related to an Improper Input Validation, which could be exploited by a remote unauthenticated attacker, potentially leading to denial of service. Recommendations For Dell E...