CVE-2018-1239

Dell EMC Unity Operating Environment (OE) versions prior to 4.3.0.1522077968 are affected by multiple OS command injection vulnerabilities. A remote application admin user could potentially exploit these vulnerabilities to execute arbitrary OS commands as root on the affected system. The provided...

PT-2018-11147

Name of the Vulnerable Software and Affected Versions Dell EMC Unity Operating Environment OE versions prior to 4.3.0.1522077968 Description The issue allows a remote application admin user to potentially execute arbitrary OS commands as system root on the system where Dell EMC Unity is installed...

CVE-2018-1183: Improper Restriction of XML External Entity Reference

In Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, Dell EMC VASA Provider Virtual Appliance versions prior to 8.4.0.512, Dell EMC SMIS versions prior to 8.4.0.6, Dell EMC VMAX Embedded Management...

CVE-2017-5785

A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found...

Information disclosure

A remote information disclosure vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-5780

CVE-2017-5780 concerns a remote clickjacking vulnerability in Hewlett Packard Enterprise’s HPE Matrix Operating Environment (MEO) software. Connected data confirms the affected components are HPE Matrix Operating Environment Software (v7.6) and Systems Insight Manager (SIM) Software (v7.6). The r...

CVE-2017-5782

A missing HSTS Header vulnerability in HPE Matrix Operating Environment version v7.6 was found...

CVE-2017-4987

The CVE-2017-4987 entry affects EMC VNX1/VNX2 OE for File prior to the stated versions, where a local authenticated user can place a malicious file on the search path, potentially enabling arbitrary code execution on the VNX Control Station due to an uncontrolled search path vulnerability. The pu...

Arbitrary Code Execution Vulnerability in Multiple EMC Products

EMC VNX2 File OE and others are hybrid storage platforms from EMC Corporation USA. A security vulnerability exists in the SMB server implementation of several EMC products, which can be exploited to execute arbitrary code and read or write files by sending a series of authentication requests...

CVE-2016-0917

The SMB service in EMC VNXe VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100/3150/3300 Operating Environment prior to 2.4.4.22638, VNX1 File OE before 7.1.80.3, VNX2 File OE before 8.1.9.155, and Celerra all supported versions does not prevent duplicate NTLM challenge-response...

PT-2016-4471

Name of the Vulnerable Software and Affected Versions EMC VNXe3200 Operating Environment versions prior to 3.1.5.8711957 EMC VNXe3100/3150/3300 Operating Environment versions prior to 2.4.4.22638 VNX1 File OE versions prior to 7.1.80.3 VNX2 File OE versions prior to 8.1.9.155 Celerra all supporte...

CVE-2016-2029

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-4358...

CVE-2016-4358

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2029...

jsite 1.0 oe (sql/lfi) Multiple Vulnerabilities

No description provided by source. --==+================================================================================+==-- --==+ jSite 1.0 OE Multiple Remote SQL/LFI Vulnerbility +==-- --==+================================================================================+==--...

CVE-2013-3444

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

Design/Logic Flaw

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

CVE-2013-3444: Improper Neutralization of Special Elements used in an OS Command

The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Softwar...

Sql injection

SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-7301

CVE-2008-7301 is a SQL injection vulnerability affecting jSite 1.0 OE in admin/login.php, exploitable via the username parameter to execute arbitrary SQL. The CVSSv2 base score is 7.5 (HIGH) with Network access and low attack complexity; impacts to confidentiality, integrity, and availability are...

CVE-2008-7301

SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...