CVE-2020-5341

CVE-2020-5341 describes a Deserialization of Untrusted Data vulnerability affecting Dell EMC Avamar Server and Dell EMC Integrated Data Protection Appliance. Affected Avamar Server versions: 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1, 19.2. Affected IDPA versions: 2.0, 2.1, 2.2, 2.3, 2.4, 2.4.1. The issue a...

CVE-2020-5341

Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated...

CVE-2020-5341: Deserialization of Untrusted Data

Deserialization of Untrusted Data Vulnerability Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 and 19.2 and Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 and 2.4.1 contain a Deserialization of Untrusted Data Vulnerability. A remote unauthenticated...

PT-2021-12395

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1, 19.2 Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4, 2.4.1 Description A Deserialization of Untrusted Data issue allows a remote unauthenticated...

IBM i2 Analyze Information Disclosure Vulnerability

IBM i2 Analyze is an integrated set of security services and stores from IBM USA that provides authorized users with the ability to search, analyze, and store intelligence data. IBM i2 Analyze is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to obtai...

CVE-2019-3752

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External EntityXXE Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this...

PT-2021-9107

Name of the Vulnerable Software and Affected Versions Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2, 19.1 Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1, 2.2, 2.3, 2.4 Description The issue is an XML External Entity XXE Injection vulnerability. A remote...

CVE-2019-3752: Improper Restriction of XML External Entity Reference

Dell EMC Avamar Server versions 7.4.1, 7.5.0, 7.5.1, 18.2 and 19.1 and Dell EMC Integrated Data Protection Appliance IDPA versions 2.0, 2.1, 2.2, 2.3 and 2.4. contain an XML External EntityXXE Injection vulnerability. A remote unauthenticated malicious user could potentially exploit this...

SQL Injection Vulnerability in Digital Campus Integrated Management System of Anhui Kexun Education Equipment Group Co.

Anhui Kexun Education Equipment Group Co., Ltd. is a comprehensive service provider dedicated to industry software research and development, promotion and service. There is a SQL injection vulnerability in the Digital Campus Management System of Anhui Kexun Education Equipment Group Co., Ltd, whi...

Unauthorized access vulnerability in Tilgin router of Hong Kong Broadband Network Ltd.

Hong Kong Broadband Network Limited is a leading provider of integrated telecommunications and technology solutions. An unauthorized access vulnerability exists in Hong Kong Broadband Network Limited's Tilgin router, which can be exploited by attackers to obtain sensitive information...

HPESBHF04146 rev.1 - HPE Synergy Composer2 using Integrated Lights-Out 5 (iLO 5), Multiple Remote and Local Vulnerabilities

Potential Security Impact: Local: Cross-Site Scripting XSS, Buffer Overflow; Remote: Carriage Return Line Feed CRLF Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView - Prior to version 6.2 - Applicable only to HPE Synergy Composer2 appliance CVSS Scores: | CVE ...

Weak Password Vulnerability in Zhongfu Information Security and Confidentiality Comprehensive Management Platform

Founded in 2002, CDF Information specializes in the research, development, sales and provision of total solutions for information security products. A weak password vulnerability exists in Zung Fu's comprehensive information security and confidentiality management platform, which can be exploited...

Cisco Integrated Management Controller Username Enumeration (cisco-sa-cimc-enum-CyheP3B7)

According to its self-reported version, Cisco Integrated Management Controller is affected by a vulnerability due to differences in authentication responses sent back from the application as part of an authentication attempt. An unauthenticated, remote attacker can exploit this, by by sending...

Cisco Integrated Management Controller Command Injection (cisco-sa-CIMC-CIV-pKDBe9x5)

According to its self-reported version, Cisco Integrated Management Controller IMC is affected by a vulnerability in the web UI that allows an authenticated, remote attacker to inject arbitrary code and execute arbitrary commands at the underlying operating system level. The vulnerability is due ...

SQL Injection Vulnerability in Intelligent Park Integrated Management Platform of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...

Ltd. T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera with Weak Password Vulnerability

Ltd. is China's leading R&D and manufacturer of intelligent terminal equipment for intelligent parking. Shenzhen Qianhai Huaxia Zhixin Data Technology Co., Ltd T83-CV102 Entrance and Exit License Plate Recognition HD Network Integrated Camera has a weak password vulnerability, which can be...

SQL Injection Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Co.(CNVD-2021-51489)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...

Weak Password Vulnerability in Intelligent Building Integrated Management Platform of Qingdao Neusoft Carrier Intelligent Electronics Co.

Qingdao Neusoft Carrier Intelligent Electronics Co., Ltd. is a high-tech enterprise integrating R&D, production, office and life. Qingdao Neusoft Carrier Intelligent Electronics Co., Ltd. intelligent building integrated management platform has a weak password vulnerability, which can be exploited...

Command Execution Vulnerability in Holographic AI Weak Network Comprehensive Operation and Maintenance Platform of Shenzhen Wannet Botong Investment Management Limited Partnership

Holographic AI weak electricity network integrated operation and maintenance platform is a weak electricity network integrated management platform that integrates computer network, security network, intelligent equipment network management and operation and maintenance. Shenzhen Wannet Botong...

Shenzhen HeWeiShun Network Technology Co., Ltd. IP-COM in-depth Internet behavior management there are information leakage vulnerabilities

Shenzhen HeWeiShun Network Technology Co., Ltd. business scope includes network products, communication products, computer software and hardware, integrated circuit technology development, etc.. Shenzhen HeWeiShun Network Technology Co., Ltd. IP-COM in-depth Internet behavior management informati...