Lucene search
K

18 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-8548

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00194EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-8547

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.0116EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-8536

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00194EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-19805

Malicious code in bioql PyPI...

4.3CVSS5.1AI score0.00155EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-54318

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00249EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-8539

Malicious code in bioql PyPI...

8.8CVSS6.5AI score0.0038EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-19806

Malicious code in bioql PyPI...

6.4CVSS5.8AI score0.00439EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/06 2:31 p.m.2 views

CVE-2025-36604

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution...

9.8CVSS6.9AI score0.18504EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/08/04 2:4 p.m.4 views

CVE-2025-36605

Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'. An unauthenticated attacker with remote access could...

6.1CVSS0.00489EPSS
Exploits0References1
CVE
CVE
added 2025/08/04 2:4 p.m.12 views

CVE-2025-36605

Dell Unity is affected by a Cross-site Scripting (CWE-79) vulnerability in version 5.5 and earlier, due to improper input neutralization during web page generation. An unauthenticated attacker with remote access could execute arbitrary HTML/JavaScript in a victim’s browser, potentially leading to...

6.1CVSS7.2AI score0.00489EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2025/03/31 12:0 a.m.4 views

Dell Unity OS Command Injection Vulnerability (CNVD-2025-08302)

Dell Unity is a mid-range storage array software from Dell EMC for data storage and management. Dell Unity suffers from an OS command injection vulnerability that can be exploited by an attacker to submit a special request to delete arbitrary files...

9.1CVSS7.4AI score0.02462EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/03/30 2:27 a.m.14 views

CVE-2025-24385

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges...

7.8CVSS7.3AI score0.00158EPSS
Exploits0References3
CVE
CVE
added 2025/03/28 2:23 a.m.66 views

CVE-2025-24381

Dell Unity (Dell EMC) affected versions: 5.4 and prior. Issue: URL Redirection to an Untrusted Site (Open Redirect) that can be exploited by an unauthenticated attacker with remote access to redirect a targeted application user to arbitrary URLs. Potential impact per sources includes phishing to ...

8.8CVSS7AI score0.0038EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/28 2:23 a.m.6 views

CVE-2025-24381

Dell Unity, versions 5.4 and prior, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to a targeted application user being redirected to arbitrary web URLs. The...

8.8CVSS7.2AI score0.0038EPSS
Exploits0References1
NVD
NVD
added 2025/03/28 2:15 a.m.11 views

CVE-2024-49563

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to execution of arbitrary operating system...

7.8CVSS0.00249EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/03/28 2:12 a.m.7 views

CVE-2025-24378

Dell Unity, versions 5.4 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...

7.8CVSS7AI score0.00194EPSS
Exploits0References1
CVE
CVE
added 2025/03/28 1:31 a.m.46 views

CVE-2024-49564

Dell Unity is affected in CVE-2024-49564: versions 5.4 and earlier suffer OS Command Injection due to improper neutralization of special elements. A local, low-privileged attacker could run arbitrary OS commands with root privileges, elevating access. No explicit fix version is provided across th...

7.8CVSS7.2AI score0.00194EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/03/27 12:0 a.m.1 views

PT-2025-13422 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity versions 5.4 and prior Description: The issue is related to an Improper Neutralization of Special Elements used in an OS Command, also known as 'OS Command Injection'. This could allow an unauthenticated attacker with remote access...

9.8CVSS7.3AI score0.0116EPSS
Exploits0References9
Rows per page
Query Builder