EUVD-2018-3121

Malware in sbrugna...

EUVD-2018-3092

Malware in sbrugna...

EUVD-2019-13400

Malware in sbrugna...

EUVD-2019-13387

Malware in sbrugna...

CVE-2020-5341

Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated...

CVE-2020-5341

CVE-2020-5341 describes a Deserialization of Untrusted Data vulnerability affecting Dell EMC Avamar Server and Dell EMC Integrated Data Protection Appliance. Affected Avamar Server versions: 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1, 19.2. Affected IDPA versions: 2.0, 2.1, 2.2, 2.3, 2.4, 2.4.1. The issue a...

CVE-2020-5341: Deserialization of Untrusted Data

Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated...

PT-2021-12395

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1, 19.2 Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.4.1 Description A Deserialization of Untrusted Data issue allows a remote unauthenticated...

CVE-2019-3752

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External EntityXXE Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this...

CVE-2019-3752: Improper Restriction of XML External Entity Reference

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External EntityXXE Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this...

PT-2021-9107

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1, 2.2, 2.3, 2.4 Description The issue is an XML External Entity XXE Injection vulnerability. A remote...

PT-2020-18421

Name of the Vulnerable Software and Affected Versions Dell EMC Integrated Data Protection Appliance versions 2.0 through 2.4 Description The issue concerns a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in...

CVE-2020-5350: Improper Neutralization of Special Elements used in an OS Command

Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM component. A remote authenticated malicious user with root privileges could inject parameters in the ACM component APIs that could lead to manipulation of passwords...

CVE-2019-3765: Incorrect Permission Assignment for Critical Resource

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1, 2.2, 2.3 and 2.4 contain an Incorrect Permission Assignment for Critical Resource vulnerability. A remote authenticated malicious user potentially could...

PT-2019-16702

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1, 2.2, 2.3, 2.4 Description The issue allows a remote authenticated malicious user to potentially exploit it an...

Multiple Dell EMC Products CVE-2019-3765 Remote Security Bypass Vulnerability

Description Multiple Dell EMC products are prone to a remote security-bypass vulnerability. An attacker can exploit this issue to obtain sensitive information, bypass security restrictions and perform unauthorized actions. This may aid in further attacks. The following products are vulnerable: De...

CVE-2019-3747

Dell EMC Integrated Data Protection Appliance (IDPA) versions prior to 2.3 are affected by a stored cross-site scripting vulnerability in the Cloud DR add-on field. A remote attacker with ACM admin privileges can store malicious HTML/JavaScript, which is then executed by victim users’ browsers in...

PT-2019-16688

Name of the Vulnerable Software and Affected Versions Dell EMC Integrated Data Protection Appliance versions prior to 2.3 Description The issue allows an authenticated remote user to launch a brute-force authentication attack against the ACM API, potentially gaining access to the system, due to t...

PT-2019-16680

Name of the Vulnerable Software and Affected Versions Dell EMC Integrated Data Protection Appliance versions prior to 2.3 Description The issue concerns a password storage vulnerability in the ACM component. A remote authenticated malicious user with root privileges may potentially use a support...

PT-2019-16689

Name of the Vulnerable Software and Affected Versions Dell EMC Integrated Data Protection Appliance versions prior to 2.3 Description The issue allows a remote malicious admin user to store malicious HTML or JavaScript code in a specific field. When victim users access the page, the malicious cod...