Lucene search
K

199 matches found

BDU FSTEC
BDU FSTEC
added 2025/01/20 12:0 a.m.4 views

The vulnerability of PowerStore T OS’ microprogramming software lies in the lack of protective measures for SQL query structures. This allows attackers to gain access to read, modify, or delete data, or execute arbitrary commands.

The vulnerability of the microprogramming software in the PowerStore data storage system’s T OS lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain access to read, modify, or delete data, or to execute arbitrary...

9CVSS6AI score
Exploits0References5Affected Software1
CNVD
CNVD
added 2024/12/25 12:0 a.m.9 views

Dell PowerStore Parameter Injection Vulnerability

Dell PowerStore is a scalable all-flash array storage from Dell USA. The Dell PowerStore suffers from a parameter injection vulnerability that originates from improper parameter delimiter neutralization, which can be exploited by an attacker to modify arbitrary system files...

7.1CVSS7.1AI score0.0026EPSS
Exploits0References1
OSV
OSV
added 2024/12/19 2:15 a.m.3 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS5.9AI score0.0026EPSS
Exploits0References1
NVD
NVD
added 2024/12/19 2:15 a.m.17 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS0.0026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/19 1:40 a.m.9 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS7AI score0.0026EPSS
Exploits0References1
CVE
CVE
added 2024/12/19 1:40 a.m.55 views

CVE-2024-51532

CVE-2024-51532 affects Dell PowerStore with a vulnerability described as improper neutralization of argument delimiters (parameter injection). The issue can be exploited by a low-privilege attacker with local access to modify arbitrary system files, tied to the PowerStore component handling comma...

7.1CVSS6.8AI score0.0026EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/19 1:40 a.m.19 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS0.0026EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/12/19 12:0 a.m.3 views

PT-2024-34696 · Dell · Dell Powerstore

Name of the Vulnerable Software and Affected Versions: Dell PowerStore affected versions not specified Description: The issue is related to an Improper Neutralization of Argument Delimiters in a Command, also known as 'Argument Injection'. This could allow an attacker with low privileges and loca...

7.1CVSS6.7AI score0.0026EPSS
Exploits0References9
CNNVD
CNNVD
added 2024/12/19 12:0 a.m.3 views

Dell PowerStore 参数注入漏洞

Dell PowerStore is a scalable all-flash array storage from Dell USA. The Dell PowerStore suffers from a parameter injection vulnerability that originates from improper parameter delimiter neutralization, which can be exploited by an attacker to modify arbitrary system files...

7.1CVSS7.3AI score0.0026EPSS
Exploits0References1
OSV
OSV
added 2023/07/21 6:15 a.m.1 views

CVE-2023-32478

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A high privileged malicious user could potentially exploit this vulnerability, leading to sensitive information disclosure...

4.9CVSS5.8AI score0.00447EPSS
Exploits0References1
NVD
NVD
added 2023/07/21 6:15 a.m.14 views

CVE-2023-32478

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A high privileged malicious user could potentially exploit this vulnerability, leading to sensitive information disclosure...

9CVSS8.7AI score0.00447EPSS
Exploits0References1
Prion
Prion
added 2023/07/21 6:15 a.m.12 views

Information disclosure

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A high privileged malicious user could potentially exploit this vulnerability, leading to sensitive information disclosure...

3.3CVSS4.7AI score0.00447EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/21 5:34 a.m.18 views

CVE-2023-32478

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A high privileged malicious user could potentially exploit this vulnerability, leading to sensitive information disclosure...

9CVSS6.2AI score0.00447EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/07/21 5:34 a.m.16 views

CVE-2023-32478

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A high privileged malicious user could potentially exploit this vulnerability, leading to sensitive information disclosure...

9CVSS8.8AI score0.00447EPSS
Exploits0References1
CVE
CVE
added 2023/07/21 5:34 a.m.47 views

CVE-2023-32478

Dell PowerStore (pre-3.5.0.1) is affected by a vulnerability where sensitive information can be inserted into log files. The issue stems from how logs may capture sensitive data, enabling a high-privilege or potentially compromised user to disclose information. Affected product/version scope: Del...

9CVSS4.7AI score0.00447EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/07/21 12:0 a.m.3 views

Dell EMC PowerStore 日志信息泄露漏洞

Dell EMC PowerStore is a storage device from Dell USA. A log information disclosure vulnerability exists in Dell EMC PowerStore versions prior to 3.5.0.1, which originates from the insertion of sensitive information into a log file, and can be exploited by a malicious, high-privileged user to cau...

9CVSS5.3AI score0.00447EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/07/21 12:0 a.m.4 views

PT-2023-23812 · Dell · Dell Powerstore

Name of the Vulnerable Software and Affected Versions: Dell PowerStore versions prior to 3.5.0.1 Description: The issue concerns the insertion of sensitive information into log files. A malicious user with high privileges could exploit this, leading to sensitive information disclosure...

9CVSS4.9AI score0.00447EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2023/07/18 8:26 a.m.59 views

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

7.8CVSS6.6AI score0.12966EPSS
Exploits7References3
OSV
OSV
added 2023/06/22 7:15 a.m.0 views

CVE-2023-32449

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

7.8CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2023/06/22 7:15 a.m.19 views

CVE-2023-32449

Dell PowerStore versions prior to 3.5 contain an improper verification of cryptographic signature vulnerability. An attacker can trick a high privileged user to install a malicious binary by bypassing the existing cryptographic signature checks...

7.8CVSS6.9AI score0.0012EPSS
Exploits0References1
Rows per page
Query Builder