Lucene search
K

92 matches found

Cvelist
Cvelist
added 2025/06/13 8:51 p.m.15 views

CVE-2025-24922 Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerability

A stack-based buffer overflow vulnerability exists in the securebioidentify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted malicious cvobject can lead to a arbitrary code execution. An attacker can issue an API call to...

8.8CVSS0.02175EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/13 8:51 p.m.2 views

CVE-2025-24922 Dell ControlVault3/ControlVault3 Plus securebio_identify stack-based buffer overflow vulnerability

A stack-based buffer overflow vulnerability exists in the securebioidentify functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted malicious cvobject can lead to a arbitrary code execution. An attacker can issue an API call to...

8.8CVSS7.9AI score0.02175EPSS
Exploits0References1
CVE
CVE
added 2025/06/13 8:51 p.m.72 views

CVE-2025-24922

CVE-2025-24922 is a stack-based buffer overflow in the Dell ControlVault3/ControlVault3 Plus securebio_identify path. TALOS and Red Hat/NVD references confirm vulnerability exists in ControlVault firmware prior to 5.15.10.14 (Dell CV3) or 6.2.26.36 (CV3 Plus). The flaw is triggered by a crafted c...

8.8CVSS8.9AI score0.02175EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/13 8:42 p.m.4 views

CVE-2025-24311 Dell ControlVault3/ControlVault3 Plus cv_send_blockdata out-of-bounds read vulnerability

An out-of-bounds read vulnerability exists in the cvsendblockdata functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an information leak. An attacker can issue an API call to trigger this...

8.4CVSS6.7AI score0.01273EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/13 12:0 a.m.1 views

Dell ControlVault3和Dell ControlVault3 Plus 代码问题漏洞

Dell ControlVault3 and Dell ControlVault3 Plus are both hardware-based security solutions from Dell, Inc. A code issue vulnerability exists in Dell ControlVault3 versions prior to 5.15.10.14 and Dell ControlVault3 Plus versions prior to 6.2.26.36, which stems from a deserialization vulnerability ...

8.1CVSS7.9AI score0.01797EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/13 12:0 a.m.3 views

Dell ControlVault3和Dell ControlVault3 Plus 安全漏洞

Dell ControlVault3 and Dell ControlVault3 Plus are both hardware-based security solutions from Dell USA. A security vulnerability exists in Dell ControlVault3 versions prior to 5.15.10.14 and Dell ControlVault3 Plus versions prior to 6.2.26.36, which stems from an arbitrary release vulnerability ...

8.8CVSS7.8AI score0.01728EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/13 12:0 a.m.3 views

Dell ControlVault3和Dell ControlVault3 Plus 缓冲区错误漏洞

Dell ControlVault3 and Dell ControlVault3 Plus are both hardware-based security solutions from Dell USA. A buffer error vulnerability exists in Dell ControlVault3 versions prior to 5.15.10.14 and Dell ControlVault3 Plus versions prior to 6.2.26.36, which stems from an out-of-bounds write to the...

8.8CVSS8AI score0.01397EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/13 12:0 a.m.4 views

Dell ControlVault3和Dell ControlVault3 Plus 安全漏洞

Dell ControlVault3 and Dell ControlVault3 Plus are both hardware-based security solutions from Dell USA. A security vulnerability exists in Dell ControlVault3 versions prior to 5.15.10.14 and Dell ControlVault3 Plus versions prior to 6.2.26.36, which stems from a stack buffer overflow in the...

8.8CVSS8AI score0.02175EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/06/13 12:0 a.m.3 views

PT-2025-25445 · Dell · Dell Controlvault3 +1

Name of the Vulnerable Software and Affected Versions: Dell ControlVault3 versions prior to 5.15.10.14 Dell ControlVault3 Plus versions prior to 6.2.26.36 Description: An out-of-bounds read vulnerability exists in the cv send blockdata functionality. A specially crafted ControlVault API call can...

8.4CVSS7.4AI score0.01273EPSS
Exploits0References10
Positive Technologies
Positive Technologies
added 2025/06/13 12:0 a.m.4 views

PT-2025-25446 · Dell · Dell Controlvault3 +1

Name of the Vulnerable Software and Affected Versions: Dell ControlVault3 versions prior to 5.15.10.14 Dell ControlVault3 Plus versions prior to 6.2.26.36 Description: A stack-based buffer overflow vulnerability exists in the securebio identify functionality. A specially crafted malicious cv obje...

8.8CVSS7.9AI score0.02175EPSS
Exploits0References11
Positive Technologies
Positive Technologies
added 2025/06/13 12:0 a.m.2 views

PT-2025-25449

Name of the Vulnerable Software and Affected Versions: Dell ControlVault3 versions prior to 5.15.10.14 Dell ControlVault3 Plus versions prior to 6.2.26.36 Description: A deserialization of untrusted input vulnerability exists in the cvhDecapsulateCmd functionality. A specially crafted ControlVaul...

8.1CVSS8.3AI score0.01797EPSS
Exploits0References13
Positive Technologies
Positive Technologies
added 2025/06/13 12:0 a.m.4 views

PT-2025-25450 · Dell · Dell Controlvault3 +1

Name of the Vulnerable Software and Affected Versions: Dell ControlVault3 versions prior to 5.15.10.14 Dell ControlVault3 Plus versions prior to 6.2.26.36 Description: An arbitrary free vulnerability exists in the cv close functionality of Dell ControlVault3 and Dell ControlVault3 Plus. A special...

8.8CVSS8AI score0.01728EPSS
Exploits0References11
Rows per page
Query Builder