EUVD-2018-3096

Malware in sbrugna...

EUVD-2020-26568

Malware in sbrugna...

EUVD-2020-26499

Malware in sbrugna...

Dell EMC ECS 数据伪造问题漏洞

The Dell EMC ECS is a storage device from Dell USA. A cryptographic issue vulnerability exists in Dell EMC ECS versions prior to 3.8.0.2, which stems from incorrect validation of cryptographic signatures. An attacker exploiting this vulnerability could modify the subject data of a request...

Dell GeoDrive Path Traversal Vulnerability

Dell GeoDrive is a free application from Dell, Inc. It provides access to Dell EMC ECS and Atmos storage from Microsoft Windows desktops and servers. A path traversal vulnerability exists in Dell GeoDrive versions prior to 2.2.3. The vulnerability stems from a failure of a networked system or...

Dell GeoDrive DLL Hijacking Vulnerability

Dell GeoDrive is a free application from Dell Inc. It provides access to Dell EMC ECS and Atmos storage from Microsoft Windows desktops and servers. A DLL hijacking vulnerability exists in Dell GeoDrive versions prior to 2.2.3, which can be exploited by an attacker to execute arbitrary code on a...

Dell EMC ECS Exposes Resource Vulnerability

Dell EMC Elastic Cloud Storage ECS is a suite of scalable, software-defined object storage solutions from Dell, USA. An exposed resource vulnerability exists in Dell EMC ECS versions prior to 3.5, which arises from improper management of system resources e.g., memory, disk space, files, etc. by a...

CVE-2020-5386

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT Directory Table objects of all internally running services and gain knowledge of sensitive data of the system...

Code injection

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT Directory Table objects of all internally running services and gain knowledge of sensitive data of the system...

CVE-2020-5386

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT Directory Table objects of all internally running services and gain knowledge of sensitive data of the system...

Dell EMC ECS Cross-Site Scripting Vulnerability

DELL EMC ELASTIC CLOUD STORAGE ECS software-defined object storage, designed for legacy and next-generation workloads, offers excellent scalability, flexibility and resiliency. Dell EMC ECS cross-site scripting vulnerability. The vulnerability stems from a lack of proper validation of client data...

CVE-2020-5317

Dell EMC ECS versions prior to 3.4.0.1 contain an XSS vulnerability. A remote authenticated malicious user could exploit this vulnerability to store malicious HTML or JavaScript code in a trusted application data store. When victim users access the data store through their browsers, the malicious...

CVE-2019-3766

Dell EMC ECS versions prior to 3.4.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated remote attacker may potentially perform a password brute-force attack to gain access to the targeted accounts...

CVE-2019-3766

Dell EMC ECS CVE-2019-3766 affects Dell EMC ECS versions prior to 3.4.0.0 and is due to an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could perform a password brute-force to gain access to targeted accounts. The vulnerability is rated HIGH/CRITIC...

Dell EMC ECS CVE-2019-3766 Authentication Bypass Vulnerability

Description Dell EMC ECS is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and aid in brute-force attacks; other attacks may also be possible. Versions prior to Dell EMC ECS 3.4.0.0 are vulnerable. Technologies Affected...

openSUSE Security Update : xtrabackup (openSUSE-2017-132)

This update for xtrabackup fixes the following issues : - CVE-2016-6225: xbcrypt encryption IV not being set properly boo1019858 In addition, XtraBackup was updated to 2.3.6 to include the following improvements : - now supports SHA256 passwords - new supports command options for secure connectio...