EUVD-2018-3666

Malware in sbrugna...

EUVD-2018-3665

Malware in sbrugna...

EUVD-2018-3660

Malware in sbrugna...

EUVD-2018-3664

Malware in sbrugna...

EUVD-2019-8325

Malware in sbrugna...

EUVD-2018-3663

Malware in sbrugna...

EUVD-2018-3661

Malware in sbrugna...

EUVD-2018-3657

Malware in sbrugna...

"ASM_DEP_SHARED" property is wrongly set to true when DEP shared mode is disabled

In XMS 10.15 RP6, the device property "ASMDEPSHARED" is set to "true" even if the "Shared mode" setting of your DEP account is disabled. New DEP enrollments in other 10.15 rolling patches are not impacted...

CVE-2022-34453

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...

Improper access control

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...

CVE-2022-34453

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...

CVE-2022-34453

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read‑only user could potentially exploit it to add or delete QoS policies (which are disabled by default). Affected component: QoS policy management in Dell XtremIO XMS. Root cause: improper ...

CVE-2022-34453

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...

Dell EMC XtremIO XMS Security Vulnerability

Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. A security vulnerability exists in Dell EMC XtremIO XMS versions prior to 6-4-1.11. A remote, read-only user may be able to exploit this vulnerability to enforce the add or remove QoS Quality...

Malicious Package

Overview mdcs-xms-core-lib is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

Malicious code in xms-error-responses (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1666b24bba79a13d7fc638c33d4870f4e9519a3969377de263e49b5dcbecfd18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7285 Malicious code in xms-error-responses (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1666b24bba79a13d7fc638c33d4870f4e9519a3969377de263e49b5dcbecfd18 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2021-21549

Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable...

CVE-2021-21549

Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable...