Dell Vnx2 Oe For File OS Command Injection Vulnerability

Dell Vnx2 Oe For File is an operating environment from Dell USA. The Dell Vnx2 Oe For File suffers from an operating system command injection vulnerability that originates from incorrect input validation. A remote attacker could use this vulnerability to send a special request and execute arbitra...

Remote code execution

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with privileges may exploit this vulnerability to execute commands on the system...

Information disclosure

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it...

CVE-2021-36296

CVE-2021-36296 affects Dell VNX2 OE for File (versions ≤ 8.1.21.266). The vulnerability is an authenticated OS command injection/remote code execution in the VNX2 OS Command Handling, allowing a privileged, authenticated attacker to run commands on the affected system. The CVSSv3.1 base metrics i...

CVE-2021-36295

CVE-2021-36295 affects Dell VNX2 OE for File versions 8.1.21.266 and earlier. The vulnerability is an authenticated remote code execution flaw that allows a remote attacker with privileges to execute commands on the system. The available connected sources confirm this impact but do not provide an...

CVE-2021-36294

Dell VNX2 OE for File vulnerable versions: 8.1.21.266 and earlier. Root cause: authentication bypass by forging a cookie to login as arbitrary user. Impact: remote unauthenticated access with high risk (credentials/session compromise). Affected component: authentication mechanism in Dell VNX2 OE ...

CVE-2021-36294

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit this vulnerability by forging a cookie to login as any user...

CVE-2021-36289

Dell VNX2 OE for File (versions ≤ 8.1.21.266) contains a local information-disclosure vulnerability. The underlying issue is an over-collection/export of data by the application, allowing a local attacker to read sensitive information. The affected component is the VNX2 OE for File software, with...

CVE-2021-36289

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it...

entfrm-bpmn (>=8.6.2 <=8.6.6), entfrm-flowable-designer (>=1.0.0 <=1.2.6) +4 more potentially affected by CVE-2021-23460 via min-dash (=3.5.2)

min-dash NPM version =3.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on min-dash and may be impacted: - entfrm-bpmn =8.6.2, =1.0.0, =2.2.0, =1.0.0, =1.1.3 Source cves: CVE-2021-23460 Source advisory: SNYK:JS-MINDASH-2340605...

CVE-2021-36289

Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it...

SQL Injection Vulnerability in OE***.ashx Page of Nanjing Pintech Medical Online Exam System

Nanjing Pintech medical online examination system enables users to realize the organization and management of online examination work. SQL injection vulnerability exists in the OE.ashx page of Nanjing Pinde Technology Medical Online Examination System, which can be exploited by attackers to obtai...

Release Notes for Veeam Backup & Replication 9.5 Update 4b

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 4b Cause Please confirm that you are running version 9.0 Update 2 build 9.0.0.1715 or later prior to...

Command injection

VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this...

CVE-2019-3704

VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this...

Fedora 29 : binutils (2019-ba3cbcfd20)

Bug fixes for binutils including one that is preventing Yocot/oe-core from building properly Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...

Design/Logic Flaw

Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result ...

CVE-2018-11064

Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result ...

CVE-2018-11064

Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result ...

CVE-2018-11064

The CVE-2018-11064 entry applies to Dell EMC Unity OE (4.3.0.x, 4.3.1.x) and UnityVSA OE (4.3.0.x, 4.3.1.x). A local, authenticated attacker can exploit an Incorrect File Permissions flaw to alter multiple library files in the service tools, potentially enabling arbitrary code execution with elev...