PT-2024-30880 · Unknown · Vmax Project Manager

Name of the Vulnerable Software and Affected Versions: Vmax Project Manager versions through 1.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This vulnerability allows PHP Local File Inclusion...

WordPress Vmax Project Manager plugin <= 1.0 - Local File Inclusion to RCE vulnerability

Local File Inclusion to RCE vulnerability discovered by tahu.datar Patchstack Alliance in WordPress Plugin Vmax Project Manager versions = 1.0...

WordPress Vmax Project Manager Plugin <= 1.0 is vulnerable to Local File Inclusion

Software Vmax Project Manager Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2024-44014 Patch priority High CVSS severity High 9.6 Developer Claim ownership PSID 0a143d09e270 Credits tahu.datar Required privilege...

Dell EMC VMAX Virtual Appliance Manager Directory Traversal (CVE-2018-1215)

A directory traversal vulnerability exists in Dell EMC VMAX Virtual Appliance vApp. The vulnerability is due to improper handling of user-supplied requests for file uploads. Successful exploitation of this vulnerability could lead to arbitrary code execution...

Dell EMC VMAX Virtual Appliance Manager Authentication Bypass (CVE-2018-1216)

An authentication bypass vulnerability exists in Dell EMC VMAX Virtual Appliance vApp. The vulnerability is due to improper authentication. remote attackers to obtain sensitive information and gain unauthorized access into the affected system...

Dell EMC VMAX Virtual Appliance Manager Directory Traversal Remote Code Execution (CVE-2018-1215)

A directory traversal vulnerability exists in Dell EMC VMAX Virtual Appliance vApp. The vulnerability is due to improper handling of user-supplied requests for file uploads. Successful exploitation of this vulnerability could lead to arbitrary code execution...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform director security update

An update is now available for Red Hat OpenStack Platform 11.0 Ocata. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform director security update

An update is now available for Red Hat OpenStack Platform 10.0 Newton. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

CVE-2018-1183

CVE-2018-1183 is an XXE injection vulnerability affecting a broad set of Dell EMC products (Unisphere for VMAX, Solutions Enabler VMAs, VASA/VNX/VNXe OE, ViPR SRM, XtremIO, Unity OE, and related components) caused by the XML parser configuration that processes external entities. In affected versi...

The vulnerability of the vApp Manager component in corporate storage and data management systems like VMAX EMC Unisphere, EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, EMC VMAX Embedded Management allows a malicious actor to gain unauthorized access to the system.

The vulnerability of the vApp Manager component VMAX Virtual Appliance Manager in corporate storage and data management systems like VMAX EMC Unisphere, EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and EMC VMAX Embedded Management eManagement is related to the use of pre-installed...

Multiple Dell Products Arbitrary File Upload Vulnerability

Dell EMC Unisphere for VMAX Virtual Appliance, etc. are products of Dell Inc. in the U.S. Dell EMC Unisphere for VMAX Virtual Appliance vApp is a management tool for VMAX storage arrays.EMC Solutions Enabler Virtual Appliance is a solutions application virtual appliance. An arbitrary file upload...

CVE-2018-1215

An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...

CVE-2018-1216

A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...

Hardcoded credentials

A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...

Design/Logic Flaw

An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...

CVE-2018-1215

An arbitrary file upload vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...

CVE-2018-1216

A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabler, Dell EMC VASA Virtual Appliances, and Dell EMC VMAX Embedded Management eManagement: Dell EMC Unisphere for VMAX Virtual Appliance versions prior to...

CVE-2018-1216

Dell EMC vApp Manager vulnerability (CVE-2018-1216) affects Unisphere for VMAX Virtual Appliance, Solutions Enabler Virtual Appliance, VASA Virtual Appliance, and VMAX Embedded Management (eManagement) with undoc default account (smc) and a hard-coded password. Versions affected: Unisphere for VM...

CVE-2018-1215

Dell EMC VMAX VApp Manager (and related appliances: Unisphere for VMAX Virtual Appliance, Solutions Enabler Virtual Appliance, VASA Virtual Appliance, and VMAX Embedded Management) is affected by CVE-2018-1215, a directory traversal/arbitrary file upload vulnerability in the vApp Manager. The iss...

Dell EMC Patches Critical Flaws in VMAX Enterprise Storage Systems

Dell EMC fixed two critical flaws in its management interfaces for its VMAX enterprise storage systems. One of the vulnerabilities could allow a remote attacker to use a hard-coded password to a default account to gain unauthorized access to systems. The company issued updates that address the tw...