91 matches found
PT-2021-4218
Name of the Vulnerable Software and Affected Versions Dell VNX2 OE for File versions 8.1.21.266 and earlier Description The issue is related to weaknesses in the authentication mechanism of the Dell VNX2 storage system. This can allow a remote attacker to gain unauthorized access to protected...
CVE-2021-36289
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit this vulnerability to read sensitive information and use it...
SQL Injection Vulnerability in OE***.ashx Page of Nanjing Pintech Medical Online Exam System
Nanjing Pintech medical online examination system enables users to realize the organization and management of online examination work. SQL injection vulnerability exists in the OE.ashx page of Nanjing Pinde Technology Medical Online Examination System, which can be exploited by attackers to obtai...
Release Notes for Veeam Backup & Replication 9.5 Update 4b
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge Release Notes for Veeam Backup & Replication 9.5 Update 4b Cause Please confirm that you are running version 9.0 Update 2 build 9.0.0.1715 or later prior to...
Command injection
VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this...
CVE-2019-3704
VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this...
PT-2019-16651
Name of the Vulnerable Software and Affected Versions Dell EMC VNX2 OE for File versions prior to 8.1.9.236 Description The issue is related to an OS command injection vulnerability in VNX Control Station. A local authenticated malicious user could potentially execute arbitrary OS commands as roo...
CVE-2019-3704: Improper Neutralization of Special Elements used in an OS Command
VNX Control Station in Dell EMC VNX2 OE for File versions prior to 8.1.9.236 contains OS command injection vulnerability. Due to inadequate restriction configured in sudores, a local authenticated malicious user could potentially execute arbitrary OS commands as root by exploiting this...
Fedora 29 : binutils (2019-ba3cbcfd20)
Bug fixes for binutils including one that is preventing Yocot/oe-core from building properly Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as...
CVE-2018-11064
Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result ...
Design/Logic Flaw
Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result ...
CVE-2018-11064
Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result ...
CVE-2018-11064
The CVE-2018-11064 entry applies to Dell EMC Unity OE (4.3.0.x, 4.3.1.x) and UnityVSA OE (4.3.0.x, 4.3.1.x). A local, authenticated attacker can exploit an Incorrect File Permissions flaw to alter multiple library files in the service tools, potentially enabling arbitrary code execution with elev...
CVE-2018-11064: Incorrect Permission Assignment for Critical Resource
Dell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to alter multiple library files in service tools that might result ...
PT-2018-10278
Name of the Vulnerable Software and Affected Versions Dell EMC Unity OE versions 4.3.0.x through 4.3.1.x Dell EMC UnityVSA OE versions 4.3.0.x through 4.3.1.x Description The issue is related to incorrect file permissions, allowing a locally authenticated malicious user to potentially alter...
CVE-2018-1250
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based...
CVE-2018-1250
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based...
CVE-2018-1250: Incorrect Authorization
Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 contains an Authorization Bypass vulnerability. A remote authenticated user could potentially exploit this vulnerability to read files in NAS server by directly interacting with certain APIs of Unity OE, bypassing Role-Based...
PT-2018-11220
Name of the Vulnerable Software and Affected Versions Dell EMC Unity and UnityVSA versions prior to 4.3.1.1525703027 Description The issue allows a remote authenticated user to potentially bypass authorization and read files on a NAS server. This is achieved by directly interacting with certain...