DeutschShown in its original language — a full translation is planned for a future version.
Dell Data Protection Advisor: Mehrere Schwachstellen ermöglichen Codeausführung
view advisory published 2024-07-22
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Programmcode auszuführen.
01
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43113US | critical9.8 | — | ||
iTextPDF in iText 7 and up to (excluding 4.4.13.3) 7.1.17 allows command injection via a CompareTool filename that is mishandled on the gs (aka Ghostscript) command line in Ghostsc… | ||||
| CVE-2021-21351US | critical9.1 | — | ||
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arb… | ||||
| CVE-2021-21350US | critical9.8 | — | ||
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitr… | ||||
| CVE-2021-21347US | critical9.8 | — | ||
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execu… | ||||
| CVE-2021-21346US | critical9.8 | — | ||
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execu… | ||||
| CVE-2021-21345US | critical9.9 | Exploit | ||
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficien… | ||||
| CVE-2021-21344US | critical9.8 | — | ||
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execu… | ||||
| CVE-2021-21342US | critical9.1 | — | ||
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time co… | ||||
| CVE-2019-10173US | critical9.8 | — | ||
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may a… | ||||
| CVE-2013-7285US | critical9.8 | Exploit | ||
Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan