Dell Vnx2 Oe For File Elevation of Privilege Vulnerability

Dell Vnx2 Oe For File is an operating environment of Dell, Inc. A security vulnerability exists in Dell Vnx2 Oe For File versions 8.1.21.266 and earlier, which could be exploited by an attacker to conduct an attack and gain elevated privileges...

Dell Vnx2 Oe For File Security Feature Issue Vulnerability

Dell Vnx2 Oe For File is an operating environment from Dell USA. A security signature issue vulnerability exists in Dell Vnx2 Oe For File that originates from an error in the processing of authentication requests. A remote attacker could use this vulnerability to bypass the authentication process...

Dell Vnx2 Oe For File OS Command Injection Vulnerability

Dell Vnx2 Oe For File is an operating environment from Dell USA. The Dell Vnx2 Oe For File suffers from an operating system command injection vulnerability that originates from incorrect input validation. A remote attacker could use this vulnerability to send a special request and execute arbitra...

entfrm-bpmn (>=8.6.2, <=8.6.6), entfrm-flowable-designer (>=1.0.0, <=1.2.6) +4 more potentially affected by CVE-2021-23460 via min-dash (3.5.2)

min-dash NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on min-dash and may be impacted: - entfrm-bpmn =8.6.2, =1.0.0, =2.2.0, =1.0.0, =1.1.3 Source cves: CVE-2021-23460 Source advisory: OSV:GHSA-2M53-83F3-562J...

Remote code execution

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system...

Information disclosure

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it...

CVE-2021-36296

CVE-2021-36296 affects Dell VNX2 OE for File (versions ≤ 8.1.21.266). The vulnerability is an authenticated OS command injection/remote code execution in the VNX2 OS Command Handling, allowing a privileged, authenticated attacker to run commands on the affected system. The CVSSv3.1 base metrics i...

CVE-2021-36295

CVE-2021-36295 affects Dell VNX2 OE for File versions 8.1.21.266 and earlier. The vulnerability is an authenticated remote code execution flaw that allows a remote attacker with privileges to execute commands on the system. The available connected sources confirm this impact but do not provide an...

CVE-2021-36294

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as any user...

CVE-2021-36294

Dell VNX2 OE for File vulnerable versions: 8.1.21.266 and earlier. Root cause: authentication bypass by forging a cookie to login as arbitrary user. Impact: remote unauthenticated access with high risk (credentials/session compromise). Affected component: authentication mechanism in Dell VNX2 OE ...

CVE-2021-36289

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it...

CVE-2021-36289

Dell VNX2 OE for File (versions ≤ 8.1.21.266) contains a local information-disclosure vulnerability. The underlying issue is an over-collection/export of data by the application, allowing a local attacker to read sensitive information. The affected component is the VNX2 OE for File software, with...

CVE-2021-36296: Improper Neutralization of Special Elements used in an OS Command

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system...

CVE-2021-36295: Improper Neutralization of Special Elements used in an OS Command

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system...

PT-2022-10504

Name of the Vulnerable Software and Affected Versions Dell VNX2 OE for File versions 8.1.21.266 and earlier Description The issue allows a remote malicious user with privileges to execute commands on the system, due to an authenticated remote code execution vulnerability. Recommendations For...

PT-2022-10499

Name of the Vulnerable Software and Affected Versions Dell VNX2 OE for File versions 8.1.21.266 and earlier Description The issue allows a local malicious user to exploit a sensitive information disclosure vulnerability, potentially reading and utilizing sensitive information. Recommendations For...

CVE-2021-36294: Insufficient Entropy

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as any user...

CVE-2021-36289: Insertion of Sensitive Information into Log File

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it...

PT-2022-10503

Name of the Vulnerable Software and Affected Versions Dell VNX2 OE for File versions 8.1.21.266 and earlier Description The issue allows a remote malicious user with privileges to execute commands on the system, due to an authenticated remote code execution vulnerability. Recommendations For...

entfrm-bpmn (>=8.6.2, <=8.6.6), entfrm-flowable-designer (>=1.0.0, <=1.2.6) +4 more potentially affected by CVE-2021-23460 via min-dash (3.5.2)

min-dash NPM version 3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on min-dash and may be impacted: - entfrm-bpmn =8.6.2, =1.0.0, =2.2.0, =1.0.0, =1.1.3 Source cves: CVE-2021-23460 Source advisory: SNYK:JS-MINDASH-2340605...