The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Avamar

Dell EMC Avamar Server: open redirect
An attacker can deceive the user of Dell EMC Avamar Server, in order to redirect him to a malicious site...
CVE-2020-5329, DSA-2020-046, VIGILANCE-VUL-31680
Sudo: privilege escalation via Runas User -1
An attacker can bypass restrictions via Runas User -1 of Sudo, in order to escalate his privileges...
CVE-2019-14287, DLA-1964-1, DSA-2019-201, DSA-4543-1, FEDORA-2019-72755db9c7, FEDORA-2019-9cb221f2be, openSUSE-SU-2019:2316-1, openSUSE-SU-2019:2333-1, RHSA-2019:3197-01, RHSA-2019:3204-01, RHSA-2019:3205-01, RHSA-2019:3209-01, RHSA-2019:3219-01, RHSA-2019:3278-01, RHSA-2019:3694-01, RHSA-2019:3754-01, RHSA-2019:3755-01, RHSA-2019:3895-01, RHSA-2019:4191-01, RHSA-2020:0388-01, SSA:2019-287-01, SUSE-SU-2019:14193-1, SUSE-SU-2019:2656-1, SUSE-SU-2019:2666-1, SUSE-SU-2019:2667-1, SUSE-SU-2019:2668-1, USN-4154-1, VIGILANCE-VUL-30611
Dell EMC Avamar: external XML entity injection
An attacker can transmit malicious XML data to Dell EMC Avamar, in order to read a file, scan sites, or trigger a denial of service...
CVE-2019-3752, DSA-2019-119, VIGILANCE-VUL-30601
Dell EMC Avamar Server: read-write access via Incorrect Permission
An attacker can bypass access restrictions via Incorrect Permission of Dell EMC Avamar Server, in order to read or alter data...
CVE-2019-3765, DSA-2019-138, VIGILANCE-VUL-30531
ECDSA/EdDSA: information disclosure via Side-channel Key Recovery
An attacker can bypass access restrictions to data via Side-channel Key Recovery of ECDSA/EdDSA, in order to obtain sensitive information. This vulnerability is the origin of VIGILANCE-VUL-30098, VIGILANCE-VUL-30205 and VIGILANCE-VUL-30534...
cpuoct2019, CVE-2019-13628, CVE-2019-13629, CVE-2019-15809, CVE-2019-2894, DLA-2023-1, DSA-2019-168, DSA-2019-169, DSA-2019-186, DSA-2019-201, DSA-2020-105, DSA-4546-1, DSA-4548-1, Minerva, NTAP-20191017-0001, openSUSE-SU-2019:2557-1, openSUSE-SU-2019:2565-1, openSUSE-SU-2019:2687-1, SB10315, SUSE-SU-2019:2998-1, SUSE-SU-2019:3083-1, SUSE-SU-2019:3084-1, SUSE-SU-2019:3238-1, USN-4223-1, VIGILANCE-VUL-30530
curl: buffer overflow via TFTP Small Blocksize
An attacker can trigger a buffer overflow via TFTP Small Blocksize of curl, in order to trigger a denial of service, and possibly to run code...
cpuapr2020, CVE-2019-5482, DLA-1917-1, DSA-2019-168, DSA-2019-169, DSA-2019-201, DSA-4633-1, FEDORA-2019-9e6357d82f, FEDORA-2019-f2a520135e, openSUSE-SU-2019:2149-1, openSUSE-SU-2019:2169-1, RHSA-2020:1792-01, SSA:2019-254-01, SUSE-SU-2019:14172-1, SUSE-SU-2019:2339-2, SUSE-SU-2019:2373-1, SUSE-SU-2019:2381-1, USN-4129-1, USN-4129-2, VIGILANCE-VUL-30303
OpenSSL: information disclosure via PKCS7/CMS Padding Oracle
An attacker can bypass access restrictions to data via PKCS7/CMS Padding Oracle of OpenSSL, in order to obtain sensitive information...
1137844, 1172266, 1172278, 3456663, 5695611, 5695629, 5695653, 5695851, 6199286, 6201879, CERTFR-2019-AVI-444, cpuapr2020, cpuoct2019, CVE-2019-1563, DLA-1932-1, DSA-2019-201, DSA-2020-062, DSA-4539-1, DSA-4539-2, DSA-4539-3, DSA-4540-1, NTAP-20190919-0002, openSUSE-SU-2019:2158-1, openSUSE-SU-2019:2189-1, openSUSE-SU-2019:2268-1, openSUSE-SU-2019:2269-1, RHSA-2020:1840-01, SSA:2019-254-03, STORM-2019-018, SUSE-SU-2019:14171-1, SUSE-SU-2019:14174-1, SUSE-SU-2019:2397-1, SUSE-SU-2019:2403-1, SUSE-SU-2019:2410-1, SUSE-SU-2019:2413-1, SUSE-SU-2019:2504-1, SUSE-SU-2019:2558-1, SUSE-SU-2019:2561-1, SUSE-SU-2020:0099-1, VIGILANCE-VUL-30293
OpenSSL: information disclosure via ECDSA Falls Back
An attacker can bypass access restrictions to data via ECDSA Falls Back of OpenSSL, in order to obtain sensitive information...
1137844, 1172266, 1172278, 5695611, 5695629, 5695653, 5695851, 6199286, 6201879, CERTFR-2019-AVI-444, cpuapr2020, cpujan2020, cpuoct2019, CVE-2019-1547, DLA-1932-1, DSA-2019-201, DSA-2020-062, DSA-4539-1, DSA-4539-2, DSA-4539-3, DSA-4540-1, NTAP-20190919-0002, NTAP-20200122-0002, openSUSE-SU-2019:2158-1, openSUSE-SU-2019:2189-1, openSUSE-SU-2019:2268-1, openSUSE-SU-2019:2269-1, RHSA-2020:1840-01, SSA:2019-254-03, SUSE-SU-2019:14171-1, SUSE-SU-2019:14174-1, SUSE-SU-2019:2397-1, SUSE-SU-2019:2403-1, SUSE-SU-2019:2410-1, SUSE-SU-2019:2413-1, SUSE-SU-2019:2504-1, SUSE-SU-2019:2558-1, SUSE-SU-2019:2561-1, SUSE-SU-2020:0099-1, VIGILANCE-VUL-30291
Oracle Java: vulnerabilities of July 2019
Several vulnerabilities were announced in Oracle products...
1072346, 1073908, 1087227, 1170340, 6199287, 6199289, 967217, CERTFR-2019-AVI-340, cpujul2019, CVE-2019-2745, CVE-2019-2762, CVE-2019-2766, CVE-2019-2769, CVE-2019-2786, CVE-2019-2816, CVE-2019-2818, CVE-2019-2821, CVE-2019-2842, DLA-1886-1, DLA-1886-2, DSA-2019-133, DSA-2019-154, DSA-4485-1, DSA-4486-1, FEDORA-2019-146b81efba, FEDORA-2019-3854a1727e, FEDORA-2019-56a658c60c, FEDORA-2019-5c794ec7ba, FEDORA-2019-97bb9c43b9, FEDORA-2019-a5ec38072a, FEDORA-2019-a9825cfb3d, FEDORA-2019-f27e187c76, openSUSE-SU-2019:1912-1, openSUSE-SU-2019:1916-1, PROJ-ZERO-1779, PROJ-ZERO-1780, PROJ-ZERO-1781, PROJ-ZERO-1782, RHSA-2019:1810-01, RHSA-2019:1811-01, RHSA-2019:1815-01, RHSA-2019:1816-01, RHSA-2019:1817-01, RHSA-2019:1839-01, RHSA-2019:1840-01, RHSA-2019:2494-01, RHSA-2019:2495-01, RHSA-2019:2585-01, RHSA-2019:2590-01, RHSA-2019:2592-01, SB10300, SUSE-SU-2019:14160-1, SUSE-SU-2019:14188-1, SUSE-SU-2019:2021-1, SUSE-SU-2019:2028-1, SUSE-SU-2019:2036-1, SUSE-SU-2019:2291-1, SUSE-SU-2019:2336-1, SUSE-SU-2019:2371-1, USN-4080-1, USN-4083-1, VIGILANCE-VUL-29796
Apache Tomcat: denial of service via HTTP/2 WINDOW_UPDATE
An attacker can trigger a fatal error via HTTP/2 WINDOW_UPDATE of Apache Tomcat, in order to trigger a denial of service...
bulletinjul2019, CERTFR-2019-AVI-290, cpuapr2020, cpujan2020, CVE-2019-10072, DSA-2019-154, DSA-4680-1, ibm10967625, openSUSE-SU-2020:0038-1, SUSE-SU-2019:1866-1, SUSE-SU-2020:0029-1, SUSE-SU-2020:0226-1, SUSE-SU-2020:0632-1, USN-4128-1, USN-4128-2, VIGILANCE-VUL-29586, ZDI-19-582
Our database contains other pages. You can request a free trial to read them.

Display information about Avamar: