Lucene search
+L

13930 matches found

Cvelist
Cvelist
added 2026/08/19 1:23 p.m.36 views

CVE-2026-54796

Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...

7.2CVSS0.02358EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 1:23 p.m.32 views

CVE-2026-54796

Dell OpenManage Enterprise versions prior to 4.7.0 contain an OS Command Injection flaw (CWE-78) exploitable by a high-privileged remote attacker, leading to full command execution and HIGH confidentiality, integrity, and availability impact. Dell DSA-2026-359 provides the fix; upgrade to 4.7.0 o...

7.2CVSS5.4AI score0.02358EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.21 views

PT-2026-78378

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Restriction of XML External Entity Reference XXE occurs, where the application fails to properly restrict external entity references within XML documents. A low...

6.5CVSS5.4AI score0.00277EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.21 views

PT-2026-78434

Name of the Vulnerable Software and Affected Versions Dell PowerPath versions 7.2 through 8.0 SP1 Description Improper Privilege Management allows a low privileged attacker with local access to potentially elevate their privileges. Recommendations At the moment, there is no information about a...

5.3CVSS5.1AI score0.00091EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.17 views

PT-2026-78380

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Neutralization of Special Elements used in an SQL Command, commonly known as SQL Injection, allows a low privileged attacker with remote access to potentially cause...

8.8CVSS5.5AI score0.00314EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.19 views

PT-2026-78365

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description Improper Privilege Management allows a high privileged attacker with remote access to achieve elevation of privileges. Recommendations Update Dell OpenManage Enterprise to version...

7.2CVSS5.2AI score0.00316EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.25 views

PT-2026-78359

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A high privileged attacker with remote access could exploit this flaw...

7.2CVSS5.9AI score0.02358EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.31 views

PT-2026-78433

Name of the Vulnerable Software and Affected Versions Dell RecoverPoint for VMs versions 6.0.3 through 6.0.3.1 Description An OS Command Injection issue exists where special elements used in an OS command are not properly neutralized. A high privileged attacker with remote access could exploit th...

7.2CVSS5.9AI score0.01285EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.23 views

PT-2026-78358

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An OS Command Injection issue exists where special elements used in an OS command are not properly neutralized. A low privileged attacker with remote access can exploit this flaw t...

8.8CVSS6AI score0.02391EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.36 views

PT-2026-78379

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows a low privileged attacker with remote access to potentially cause information...

6.5CVSS5.2AI score0.00336EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.21 views

PT-2026-78445

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description A Time-of-check Time-of-use TOCTOU Race Condition exists, which occurs when a program checks the state of a resource and then acts upon that resource, but the state changes between th...

7.3CVSS5.2AI score0.00082EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.25 views

PT-2026-78472

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description Incorrect default permissions allow a low privileged attacker with local access to potentially gain filesystem access. Recommendations Update Dell Command Update DCU to version 5.7.1 ...

7.8CVSS5.2AI score0.00093EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.20 views

PT-2026-78440

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description An issue exists involving the deserialization of untrusted data. A low privileged attacker with local access could exploit this to achieve elevation of privileges. Deserialization is...

7.8CVSS5.5AI score0.00112EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.18 views

PT-2026-78377

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Neutralization of Special Elements used in an SQL Command, commonly known as SQL Injection, exists in the software. A low privileged attacker with remote access could...

8.8CVSS5.6AI score0.00301EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.25 views

PT-2026-78441

Name of the Vulnerable Software and Affected Versions Dell Command Update versions prior to 5.7.1 Description An issue involving the deserialization of untrusted data allows a low privileged attacker with local access to escalate their privileges to SYSTEM level. Deserialization is the process of...

7.8CVSS5.9AI score0.0012EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.23 views

PT-2026-78469

Dell Command Update DCU, versions prior to 5.7.1, contain a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

7.8CVSS5.3AI score0.00084EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.33 views

PT-2026-78477

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description An Incorrect Authorization issue exists where a low privileged attacker with local access could potentially exploit the flaw to achieve Elevation of privileges. Recommendations Update...

5.5CVSS5.1AI score0.00084EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.15 views

PT-2026-78375

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An Improper Neutralization of Input During Web Page Generation, known as Cross-site Scripting XSS, allows a low privileged attacker with remote access to potentially cause...

5.4CVSS5.2AI score0.00165EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.25 views

PT-2026-78376

Name of the Vulnerable Software and Affected Versions Dell OpenManage Enterprise versions prior to 4.7.0 Description An unauthenticated attacker with remote access can exploit a Server-Side Request Forgery SSRF issue, which is a flaw that allows a requester to induce the server to make requests t...

7.2CVSS5.3AI score0.002EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/19 12:00 a.m.27 views

PT-2026-78473

Name of the Vulnerable Software and Affected Versions Dell Command Update DCU versions prior to 5.7.1 Description Missing authorization allows a low privileged attacker with local access to achieve elevation of privileges. Recommendations Update Dell Command Update DCU to version 5.7.1 or later...

8.8CVSS5.1AI score0.00093EPSS
SaveExploits0References3
Rows per page
Query Builder