Lucene search
+L

27 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/26 12:00 a.m.•10 views

CVE-2018-11077: Improper Neutralization of Special Elements used in an OS Command

'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1 and 2.2 is affected by an OS command injection vulnerability. A malicious Avamar admin user may potentially...

7.2CVSS7AI score0.01005EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/11/20 12:00 a.m.•10 views

PT-2018-2864

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.2.0 through 7.5.1 and version 18.1 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0 through 2.2 Description The issue is related to an OS command injection vulnerability in the 'getlogs' utility...

7.2CVSS0.01005EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
•added 2018/03/06 12:00 a.m.•20 views

Media Server Arbitrary Command Execution

The vulnerability of the uploadTelemetry and getLogs functions /usr/lib/djangohost/seagatemediaserver/views.py of the Media Server component of the software-defined networking storage device Seagate Personal Cloud relates to the absence of measures to neutralize special elements used in commands...

10CVSS5.8AI score0.54163EPSS
SaveExploits5References4
NVD
NVD
•added 2018/01/12 1:29 a.m.•30 views

CVE-2018-5347

Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled...

10CVSS9.9AI score0.54163EPSS
SaveExploits5References2
Cvelist
Cvelist
•added 2018/01/12 1:00 a.m.•38 views

CVE-2018-5347

Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled...

9.9AI score0.54163EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/01/12 12:00 a.m.•7 views

CVE-2018-5347: Improper Neutralization of Special Elements used in an OS Command

Seagate Media Server in Seagate Personal Cloud has unauthenticated command injection in the uploadTelemetry and getLogs functions in views.py because .psp URLs are handled by the fastcgi.server component and shell metacharacters are mishandled...

10CVSS8.2AI score0.54163EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2017/10/16 12:00 a.m.•5 views

PT-2017-3506

Name of the Vulnerable Software and Affected Versions Seagate Personal Cloud affected versions not specified Description The issue is related to the Media Server component of Seagate Personal Cloud, specifically with the uploadTelemetry and getLogs functions in views.py. It is caused by the failu...

10CVSS0.54163EPSS
SaveExploits5References4
Rows per page
Query Builder