Lucene search
+L

362 matches found

CVE
CVE
•added 2023/02/01 4:34 a.m.•99 views

CVE-2022-34458

The CVE-2022-34458 entry covers Dell Command | Update, Dell Update, and Alienware Update (

6.6CVSS5.3AI score0.0018EPSS
SaveExploits0References1Affected Software3
CVE
CVE
•added 2023/02/01 4:28 a.m.•92 views

CVE-2022-34459

CVE-2022-34459 concerns three Dell update products: Dell Command | Update, Dell Update, and Alienware Update, all versions prior to 4.7 . The flaw is an improper verification of cryptographic signatures in the function Get Applicable Driver Component, enabling a local attacker to potentially exec...

7.8CVSS7.4AI score0.0015EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2023/02/01 4:28 a.m.•41 views

CVE-2022-34459

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution...

7.8CVSS7.7AI score0.0015EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/01 12:00 a.m.•3 views

CVE-2022-34459: Improper Verification of Cryptographic Signature

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution...

7.8CVSS5.9AI score0.0015EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/02/01 12:00 a.m.•17 views

多款Dell产品 安全漏洞

Dell Command Update and Dell Update and Alienware Update are both products of Dell, Inc.Dell Command Update is a tool used to automatically update drivers, BIOS, and firmware in Dell products.Dell Update and Alienware Update is an update application. A security vulnerability exists in Dell...

6.6CVSS5.7AI score0.0018EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/01 12:00 a.m.•5 views

CVE-2022-34458: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the...

6.6CVSS5.9AI score0.0018EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/01 12:00 a.m.•18 views

多款Dell产品 数据伪造问题漏洞

Dell Command Update and Dell Update and Alienware Update are both products of Dell, Inc.Dell Command Update is a tool used to automatically update drivers, BIOS, and firmware in Dell products.Dell Update and Alienware Update is an update application. A security vulnerability exists in Dell...

7.8CVSS7.4AI score0.0015EPSS
SaveExploits0References2
OSV
OSV
•added 2023/01/18 12:15 p.m.•20 views

CVE-2022-34399

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM...

2.3CVSS6AI score0.00183EPSS
SaveExploits0References1
NVD
NVD
•added 2023/01/18 12:15 p.m.•41 views

CVE-2022-34399

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM...

5.1CVSS5.2AI score0.00183EPSS
SaveExploits0References1
Prion
Prion
•added 2023/01/18 12:15 p.m.•32 views

Design/Logic Flaw

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM...

1.4CVSS4.1AI score0.00183EPSS
SaveExploits0References1Affected Software15
Vulnrichment
Vulnrichment
•added 2023/01/18 11:20 a.m.•11 views

CVE-2022-34399

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM...

5.1CVSS4.8AI score0.00183EPSS
SaveExploits0References1
CVE
CVE
•added 2023/01/18 11:20 a.m.•85 views

CVE-2022-34399

CVE-2022-34399 concerns Dell Alienware m17 R5 BIOS prior to 1.2.2, described as a buffer access/overflow issue that can leak information from SMRAM when admin users send input larger than expected. Multiple connected sources consistently name the affected platform and the vulnerable component as ...

5.1CVSS4AI score0.00183EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/01/18 11:20 a.m.•46 views

CVE-2022-34399

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM...

5.1CVSS5.5AI score0.00183EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/18 12:00 a.m.•1 views

CVE-2022-34399: Buffer Access with Incorrect Length Value

Dell Alienware m17 R5 BIOS version prior to 1.2.2 contain a buffer access vulnerability. A malicious user with admin privileges could potentially exploit this vulnerability by sending input larger than expected in order to leak certain sections of SMRAM...

5.1CVSS6AI score0.00183EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/18 12:00 a.m.•23 views

Dell Alienware 缓冲区错误漏洞

Dell Alienware is a line of gaming laptops from Dell USA. versions prior to Dell Alienware m17 R5 BIOS 1.2.2 contain a buffer overflow vulnerability that stems from a program boundary error when handling untrusted input. An attacker could use this vulnerability to send content larger than the...

5.1CVSS6.7AI score0.00183EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/12/12 12:00 a.m.•14 views

PT-2022-6357 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 Description: The issue is related to an improper verification of cryptographic signature in the get applicable driver component. This could allow a local malicious...

7.8CVSS7.5AI score0.0015EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2022/11/14 12:00 a.m.•34 views

PT-2022-6351 · Dell · Alienware Update +2

Name of the Vulnerable Software and Affected Versions: Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 Description: The issue is related to the exposure of sensitive system information to an unauthorized control sphere. A local malicious user could potentially explo...

6.6CVSS5.2AI score0.0018EPSS
SaveExploits0References5
OSV
OSV
•added 2022/09/02 6:15 p.m.•13 views

CVE-2022-34382

Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may potentially exploit this vulnerability in order to elevate their privileges...

7.8CVSS5.8AI score0.00193EPSS
SaveExploits0References1
NVD
NVD
•added 2022/09/02 6:15 p.m.•33 views

CVE-2022-34382

Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may potentially exploit this vulnerability in order to elevate their privileges...

7.8CVSS0.00193EPSS
SaveExploits0References1
Prion
Prion
•added 2022/09/02 6:15 p.m.•24 views

Privilege escalation

Dell Command Update, Dell Update and Alienware Update versions prior to 4.6.0 contains a Local Privilege Escalation Vulnerability in the custom catalog configuration. A local malicious user may potentially exploit this vulnerability in order to elevate their privileges...

4.3CVSS7.5AI score0.00193EPSS
SaveExploits0References1Affected Software3
Rows per page
Query Builder