SoftNAS Cloud OS Command Injection Vulnerability

Exploit for php platform in category web applications SoftNAS Cloud OS Command Injection 1. Advisory Information Title: SoftNAS Cloud OS Command Injection Advisory ID: CORE-2018-0009 Advisory URL: http://www.coresecurity.com/advisories/softnas-cloud-OS-command-injection Date published: 2018-07-26...

Security Bulletin: Apache Commons Collection Java Deserialization Vulnerability in Multiple N series Products

Summary Multiple N series products incorporate the Apache Commons Collection library. Versions of Apache Commons Collection before 3.2.2 and including 4.0 are susceptible to a vulnerability that could be exploited to allow remote attackers to execute arbitrary commands on the system. Multiple N...

NetApp Virtual Storage Console for VMware vSphere Man-in-the-Middle Attack Vulnerability

NetApp Virtual Storage Console VSC for VMwarev Sphere is an American NetApp product that provides end-to-end comprehensive virtual storage management capabilities for VMware infrastructures. A security vulnerability exists in NetApp VSC for VMwarev Sphere versions prior to 6.2.1. A remote attacke...

CVE-2016-5711

NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors...

CVE-2016-5711

NetApp Virtual Storage Console for VMware vSphere is affected by CVE-2016-5711. Before version 6.2.1, it uses a non-unique certificate, enabling remote attackers to perform man-in-the-middle attacks via unspecified vectors. The connected sources confirm the vulnerable version range and the MITM r...

CVE-2016-5711: Undefined Security Weakness

NetApp Virtual Storage Console for VMware vSphere before 6.2.1 uses a non-unique certificate, which allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors...

PT-2017-8748

Name of the Vulnerable Software and Affected Versions NetApp Virtual Storage Console for VMware vSphere versions prior to 6.2.1 Description The issue allows remote attackers to conduct man-in-the-middle attacks via unspecified vectors, due to the use of a non-unique certificate. Recommendations F...

QEMU DoS

The vulnerability of the QEMU hardware emulation software is related to the implementation of the VMWARE Paravirtual SCSI PVSCSI mechanism. Exploiting this vulnerability allows a malicious actor to trigger a service failure by manipulating the PVSCSICMDSETUPRINGS or PVSCSICMDSETUPMSGRING command...

PT-2014-3055

Name of the Vulnerable Software and Affected Versions HP StoreOnce Virtual Storage Appliance VSA versions prior to 3.7.2 HP StoreOnce 26xx and 4210 iSCSI Backup System versions prior to 3.9.0 HP StoreOnce 4210 FC Backup System versions prior to 3.9.0 HP StoreOnce 4xxx Backup System versions prior...

CVE-2013-6211: Undefined Security Weakness

Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance VSA before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System before 3.9.0, and StoreOnce 4xxx Backup System before 3.9.0 allows remote attackers to obtain sensitive information or...

SolarWinds Storage Manager SQL Injection

Added: 05/17/2012 BID: 51639 OSVDB: 81634 Background SolarWinds Storage Manager is agentless heterogeneous monitoring and reporting of the performance and capacity of physical and virtual storage infrastructure. It delivers visibility and insight into how your storage infrastructure maps to your...