Lucene search
+L

13347 matches found

RedhatCVE
RedhatCVE
added 2025/02/13 5:37 p.m.18 views

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

7.9CVSS6.7AI score0.00149EPSS
SaveExploits0References3
OSV
OSV
added 2025/02/13 4:16 p.m.7 views

CVE-2025-22480

Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges...

7.8CVSS5.9AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/13 4:16 p.m.18 views

CVE-2025-22480

Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges...

7.8CVSS0.00174EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/02/13 4:04 p.m.12 views

CVE-2025-22480

Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges...

7CVSS7AI score0.00174EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/13 4:04 p.m.133 views

CVE-2025-22480

Dell SupportAssist OS Recovery (CVE-2025-22480) is affected in versions prior to 5.5.13.1 due to a symbolic link attack that a local, low-privilege attacker could exploit to delete arbitrary files and achieve Elevation of Privileges. Affected software is Dell SupportAssist OS Recovery. Root cause...

7.8CVSS7AI score0.00174EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/02/13 4:04 p.m.25 views

CVE-2025-22480

Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges...

7CVSS0.00174EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2025/02/13 12:20 a.m.11 views

SUSE CVE-2025-21695

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

5.5CVSS7.6AI score0.00175EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2025/02/13 12:00 a.m.22 views

PT-2025-6949

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist OS Recovery versions prior to 5.5.13.1 Description: The issue concerns a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary fil...

7.8CVSS6.2AI score0.00174EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/02/13 12:00 a.m.8 views

Dell SupportAssist OS Recovery 安全漏洞

Dell SupportAssist OS Recovery is a built-in recovery tool for Dell computers, which is mainly used to solve system problems or hardware failures. Dell SupportAssist OS Recovery suffers from a symbolic link attack vulnerability that can be exploited by attackers to cause arbitrary file deletion a...

7.8CVSS6.9AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/12 2:15 p.m.14 views

CVE-2025-21695

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

4.7CVSS0.00175EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/12 2:15 p.m.4 views

DEBIAN-CVE-2025-21695

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

4.7CVSS5.5AI score0.00175EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/12 2:15 p.m.7 views

UBUNTU-CVE-2025-21695

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

4.7CVSS6.5AI score0.00175EPSS
SaveExploits0References7
Debian CVE
Debian CVE
added 2025/02/12 1:27 p.m.28 views

CVE-2025-21695

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

4.7CVSS5.5AI score0.00175EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2025/02/12 1:27 p.m.1 views

CVE-2025-21695 platform/x86: dell-uart-backlight: fix serdev race

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

6AI score0.00175EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/12 1:27 p.m.12 views

CVE-2025-21695 platform/x86: dell-uart-backlight: fix serdev race

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...

4.7CVSS5.6AI score
SaveExploits0References5
NVD
NVD
added 2025/02/12 2:15 a.m.15 views

CVE-2024-29171

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure...

7.5CVSS0.00326EPSS
SaveExploits0References1
NVD
NVD
added 2025/02/12 2:15 a.m.28 views

CVE-2024-29172

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to a Denial of Service...

7.5CVSS0.00444EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/12 2:15 a.m.11 views

CVE-2024-29172

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains a deadlock vulnerability. A remote attacker could potentially exploit this vulnerability, leading to a Denial of Service...

7.5CVSS5.8AI score0.00444EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/12 2:15 a.m.9 views

CVE-2024-29171

Dell BSAFE SSL-J, versions prior to 6.6 and versions 7.0 through 7.2, contains an Improper certificate verification vulnerability. A remote attacker could potentially exploit this vulnerability, leading to information disclosure...

7.5CVSS5.8AI score0.00326EPSS
SaveExploits0References1
CVE
CVE
added 2025/02/12 1:32 a.m.70 views

CVE-2024-29172

CVE-2024-29172 affects Dell BSAFE SSL-J prior to 6.6 and 7.0–7.2. The issue is a deadlock that can be exploited remotely to cause Denial of Service. CVSSv3.1 metrics indicate a network-based, low-credibility requirement with high availability impact (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H; base scor...

7.5CVSS5.7AI score0.00444EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder