CVE-2025-30477

Dell PowerScale OneFS prior to version 9.11.0.0 is affected by a use of a broken or risky cryptographic algorithm, which could enable information disclosure by a high-privilege attacker with remote access. Affected software: Dell PowerScale OneFS; vulnerability type: insecure cryptographic algori...

CVE-2025-30477

Dell PowerScale OneFS, versions prior to 9.11.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-30477

Dell PowerScale OneFS, versions prior to 9.11.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2025-32744

Dell AppSync, versions 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2025-32744

Dell AppSync, versions 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2025-32744

Dell AppSync, versions 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2025-32744

Dell AppSync 4.6.0.0 contains an Unrestricted Upload of File with Dangerous Type vulnerability that could allow remote code execution by a high-privilege attacker with remote access. The issue stems from insufficient validation of uploaded files. A security update/ advisory (DSA-2025-277) is avai...

CVE-2025-36603

Dell AppSync, versions 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering...

CVE-2025-36603

Dell AppSync, versions 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering...

CVE-2025-36603

Dell AppSync 4.6.0.0 contains an Improper Restriction of XML External Entity Reference vulnerability. A low-privilege attacker with local access could exploit this to cause information disclosure and information tampering. Exploitation details are not provided in the documents. References indicat...

PT-2025-30305 · Dell · Dell Appsync

Name of the Vulnerable Software and Affected Versions: Dell AppSync version 4.6.0.0 Description: Dell AppSync version 4.6.0.0 contains an unrestricted upload of file with dangerous type issue. A high privileged attacker with remote access could potentially exploit this, leading to remote executio...

Dell AppSync 代码问题漏洞

Dell AppSync is a data backup and recovery management software from Dell. An XML External Entity Reference Improper Restriction vulnerability exists in Dell AppSync version 4.6.0.0, which stems from improper handling of XML external entity parsing. An attacker could exploit this vulnerability to...

Dell PowerScale OneFS 加密问题漏洞

Dell PowerScale OneFS is an enterprise-class distributed file storage system from Dell. A security vulnerability exists in Dell PowerScale OneFS versions prior to 9.11.0.0 that stems from the use of an insecure encryption algorithm. An attacker could exploit the vulnerability to cause information...

PT-2025-30299 · Dell · Dell Appsync

Name of the Vulnerable Software and Affected Versions: Dell AppSync version 4.6.0.0 Description: Dell AppSync version 4.6.0.0 contains an Improper Restriction of XML External Entity Reference issue. A low privileged attacker with local access could potentially exploit this issue, leading to...

PT-2025-30304 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions prior to 9.11.0.0 Description: Dell PowerScale OneFS is affected by a use of a broken or risky cryptographic algorithm. A high privileged attacker with remote access could potentially exploit this, leading to...

Dell Client Platform BIOS Access Control Error Vulnerability

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS suffers from an Access Control Error vulnerability that stems from improper access control of mirrored or aliased memory regions in an externally developed component, which can be exploited by an...

Dell AppSync 代码问题漏洞

Dell AppSync is a data replication management application from Dell USA. A file upload vulnerability exists in Dell AppSync version 4.6.0.0, which stems from the application's lack of effective validation of uploaded files. The vulnerability can be exploited to remotely execute arbitrary code by...

CVE-2025-30483

Dell ECS versions prior to 3.8.1.5/ ObjectScale version 4.0.0.0 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2025-31424 · Dell · Dell Smartfabric Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions prior to 10.6.0.5 Description: Dell SmartFabric OS10 Software is susceptible to a Files or Directories Accessible to External Parties issue. A low privileged attacker with local access could potentially...

PT-2025-31427 · Dell · Dell Smartfabric Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions prior to 10.6.0.5 Description: Dell SmartFabric OS10 Software is susceptible to a Use of Hard-coded Password issue. A local attacker with low privileges could potentially exploit this, leading to...