Lucene search
+L

340 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/10 12:00 a.m.•5 views

CVE-2023-24573: Undefined Security Weakness

Dell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion...

7.1CVSS6AI score0.00155EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/10 12:00 a.m.•19 views

Dell Command | Monitor 安全漏洞

Dell Command | Monitor is a software application from Dell, Inc. It enables IT administrators to easily manage fleet resource inventories, monitor system performance, modify BIOS settings, and remotely collect information about deployed Dell client systems. A security vulnerability exists in Dell...

7.1CVSS7.3AI score0.00155EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/02/08 12:00 a.m.•4 views

PT-2023-6716

Name of the Vulnerable Software and Affected Versions Dell Command | Intel vPro Out of Band versions before 4.4.0 Description The issue is related to an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability,...

4.7CVSS0.00177EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/02/08 12:00 a.m.•18 views

PT-2023-6748 · Dell · Dell Command | Monitor

Name of the Vulnerable Software and Affected Versions: Dell Command | Monitor versions prior to 10.9 Description: The issue is related to inadequate access control in the Dell Command | Monitor software, which can be exploited to delete arbitrary files. A locally authenticated malicious user may...

7.1CVSS6.9AI score0.00155EPSS
SaveExploits0References5
NVD
NVD
•added 2023/02/07 10:15 a.m.•24 views

CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7.8CVSS7.2AI score0.00463EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/07 10:15 a.m.•25 views

Authorization

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

4.3CVSS7.6AI score0.00463EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/02/07 9:49 a.m.•30 views

CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7CVSS7.8AI score0.00463EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/07 9:49 a.m.•7 views

CVE-2023-23696

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7CVSS7.1AI score0.00463EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/02/07 12:00 a.m.•16 views

PT-2023-1580 · Dell · Dell Command | Intel Vpro Out Of Band

Name of the Vulnerable Software and Affected Versions: Dell Command Intel vPro Out of Band versions prior to 4.3.1 Description: The issue is related to an Improper Authorization vulnerability. A locally authenticated malicious user could potentially exploit this vulnerability to write arbitrary...

7.8CVSS7.5AI score0.00463EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/02/07 12:00 a.m.•5 views

PT-2023-6750

Name of the Vulnerable Software and Affected Versions Dell Command | Integration Suite for System Center versions prior to 6.4.0 Description The issue is related to an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this...

4.7CVSS0.00173EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/07 12:00 a.m.•4 views

CVE-2023-23696: Improper Authorization

Dell Command Intel vPro Out of Band, versions prior to 4.3.1, contain an Improper Authorization vulnerability. A locally authenticated malicious users could potentially exploit this vulnerability in order to write arbitrary files to the system...

7.8CVSS6AI score0.00463EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/02/06 12:00 a.m.•3 views

PT-2023-6777

Name of the Vulnerable Software and Affected Versions Dell Command | Update versions prior to 4.6.0 Dell Update versions prior to 4.6.0 Alienware Update versions prior to 4.7.1 Description The issue is related to an insecure operation on Windows Junction in the installer component, which could be...

7.1CVSS0.00176EPSS
SaveExploits0References6
OSV
OSV
•added 2023/02/01 5:15 a.m.•17 views

CVE-2022-34459

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution...

7.8CVSS5.8AI score0.0015EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/01 5:15 a.m.•33 views

CVE-2022-34458

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the...

6.6CVSS6.3AI score0.0018EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/01 5:15 a.m.•30 views

CVE-2022-34459

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution...

7.8CVSS7.5AI score0.0015EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/02/01 4:28 a.m.•41 views

CVE-2022-34459

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution...

7.8CVSS7.7AI score0.0015EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/02/01 12:00 a.m.•18 views

多款Dell产品 安全漏洞

Dell Command Update and Dell Update and Alienware Update are both products of Dell, Inc.Dell Command Update is a tool used to automatically update drivers, BIOS, and firmware in Dell products.Dell Update and Alienware Update is an update application. A security vulnerability exists in Dell...

6.6CVSS5.7AI score0.0018EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/01 12:00 a.m.•4 views

CVE-2022-34459: Improper Verification of Cryptographic Signature

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a improper verification of cryptographic signature in get applicable driver component. A local malicious user could potentially exploit this vulnerability leading to malicious payload execution...

7.8CVSS5.9AI score0.0015EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/01 12:00 a.m.•6 views

CVE-2022-34458: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.7 contain a Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in download operation component. A local malicious user could potentially exploit this vulnerability leading to the...

6.6CVSS5.9AI score0.0018EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/02/01 12:00 a.m.•19 views

多款Dell产品 数据伪造问题漏洞

Dell Command Update and Dell Update and Alienware Update are both products of Dell, Inc.Dell Command Update is a tool used to automatically update drivers, BIOS, and firmware in Dell products.Dell Update and Alienware Update is an update application. A security vulnerability exists in Dell...

7.8CVSS7.4AI score0.0015EPSS
SaveExploits0References2
Rows per page
Query Builder