600444 matches found
CVE-2026-58564
Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...
CVE-2026-58564
Dell Command Update (DCU) versions prior to 5.7.1 ship with overly permissive default file permissions. A low-privileged local attacker can leverage this to access the filesystem, achieving high confidentiality, integrity, and availability impact (CVSS 7.8). Remediation is to upgrade DCU to versi...
CVE-2026-67268
Dell Command Update (DCU) versions prior to 5.7.1 contain an Improper Restriction of XML External Entity Reference (XXE) vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve elevation of privileges and server-side request forgery (SSRF) . The CVSS 3.1 base s...
EUVD-2026-62526
Dell Command Update DCU, versions prior to 5.7.1, contain an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and Server-side request forgery...
CVE-2026-58565
Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges , resulting in full compromise of confidentiality, integrity, and availability (CVSS 3.1: 8.8 HIGH ...
EUVD-2026-62521
Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-58565
Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
EUVD-2026-62519
Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-67266
Dell Command Update DCU, versions prior to 5.7.1, contain an Incorrect Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-67266
Dell Command Update (DCU) versions prior to 5.7.1 contain an Incorrect Authorization vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve elevation of privileges , resulting in high integrity impact with no effect on confidentiality or availability. The CVSS...
EUVD-2026-62517
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...
CVE-2026-16686
IBM AIX 7.2, 7.3, and PowerVM VIOS 4.1 have an improper-authentication flaw allowing unauthenticated remote attackers to access NFS-exported filesystems. CVSS 8.2 (HIGH), network-exploitable with no privileges required. No exploitation or patch details provided; refer to IBM support advisory for ...
CVE-2026-16686 Vulnerabilities in IBM AIX and PowerVM VIOS
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to access NFS-exported filesystems due to improper authentication...
EUVD-2026-62515
OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. The archrestoresel POST parameter is passed to the archive restore handler without sanitization for path traversal sequences. The handler checks whether the supplied path exists on the filesystem, an...
CVE-2026-76614
OpenEMR versions before 8.3.0 contain a path traversal vulnerability in the EDI archive restore function. The archrestore_sel POST parameter is passed to the archive restore handler without sanitization for path traversal sequences. The handler checks whether the supplied path exists on the files...
CVE-2026-76614 OpenEMR < 8.3.0 Path Traversal Information Disclosure via EDI Archive Restore
OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. The archrestoresel POST parameter is passed to the archive restore handler without sanitization for path traversal sequences. The handler checks whether the supplied path exists on the filesystem, an...
EUVD-2026-62514
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to gain root privileges due to improper authentication...
CVE-2026-58562
Dell Command Update (DCU) versions prior to 5.7.1 contain a Missing Authorization vulnerability. A low-privileged attacker with local access and user interaction could exploit this to gain unauthorized access to the system. The CVSS 3.1 score is 7.3 (HIGH) with vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/...
EUVD-2026-62512
Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...
CVE-2026-58562
Dell Command Update DCU, versions prior to 5.7.1, contain a Missing Authorization vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access...