Lucene search
+L

13347 matches found

CNVD
CNVD
added 2024/12/20 12:00 a.m.16 views

Dell RecoverPoint for Virtual Machines Trust Management Issue Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A trust management issue vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1...

9.8CVSS7AI score0.0041EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/20 12:00 a.m.37 views

Dell RecoverPoint for Virtual Machines Encryption Issue Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A cryptographic issue vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1 P1,...

9.8CVSS7.1AI score0.00546EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/20 12:00 a.m.10 views

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse lies in the insecure storage of confidential information, allowing unauthorized access to protected data by attackers.

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse are related to the insecure storage of confidential information. Exploiting these vulnerabilities c...

8.2CVSS5.5AI score0.00169EPSS
SaveExploits0References2Affected Software5
CNVD
CNVD
added 2024/12/20 12:00 a.m.32 views

Dell ThinOS Command Injection Vulnerability (CNVD-2024-49615)

Dell ThinOS is a client operating system from the American company Dell. A command injection vulnerability exists in Dell ThinOS version 2408, which stems from improper neutralization of special elements, and can be exploited by an attacker with local access rights to cause command execution...

8.4CVSS7.2AI score0.00834EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/20 12:00 a.m.18 views

Dell RecoverPoint for Virtual Machines Command Injection Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A command injection vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1 P1,...

6.5CVSS7.4AI score0.00567EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/20 12:00 a.m.13 views

The vulnerability of Dell Power Manager’s software, related to inadequate access control, allows a perpetrator to execute arbitrary code and increase their privileges.

The vulnerability of Dell Power Manager is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code and increase their privileges...

7.8CVSS6AI score0.00177EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/12/19 2:15 a.m.9 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS5.9AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/19 2:15 a.m.28 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS0.00265EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/19 1:40 a.m.11 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS7AI score0.00265EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/19 1:40 a.m.29 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/19 1:40 a.m.69 views

CVE-2024-51532

CVE-2024-51532 affects Dell PowerStore with a vulnerability described as improper neutralization of argument delimiters (parameter injection). The issue can be exploited by a low-privilege attacker with local access to modify arbitrary system files, tied to the PowerStore component handling comma...

7.1CVSS6.8AI score0.00265EPSS
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2024/12/19 12:00 a.m.38 views

Dell RecoverPoint for Virtual Machines OS Command Injection Vulnerability

Dell RecoverPoint for Virtual Machines is a data protection and recovery solution for virtual machine environments. An OS command injection vulnerability exists in Dell RecoverPoint for Virtual Machines. The vulnerability stems from a lack of proper validation of user input. An attacker could use...

8.8CVSS7.5AI score0.00754EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.9 views

The software for data protection solutions from Dell RecoverPoint for virtual machines is vulnerable due to errors in filtering specific elements, allowing attackers to trigger a service failure.

The vulnerability of the Dell RecoverPoint data protection software for virtual machines is related to errors in filtering specific elements. Exploiting this vulnerability could allow a malicious actor to trigger a service failure...

4.6CVSS5.5AI score0.00462EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.12 views

The vulnerability of the software for data protection in Dell RecoverPoint for virtual machines stems from the use of cryptographic algorithms that have defects. This allows a hacker to execute arbitrary code.

The vulnerability of the Dell RecoverPoint data protection software for virtual machines relates to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

6.5CVSS5.9AI score0.00546EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2024/12/19 12:00 a.m.12 views

Dell Client Platform BIOS Improper Input Validation (dsa-2024-355)

The version of Dell Client Platform BIOS installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the dsa-2024-355 advisory. - Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed...

7.5CVSS6.1AI score0.00225EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/19 12:00 a.m.9 views

Dell PowerStore 参数注入漏洞

Dell PowerStore is a scalable all-flash array storage from Dell USA. The Dell PowerStore suffers from a parameter injection vulnerability that originates from improper parameter delimiter neutralization, which can be exploited by an attacker to modify arbitrary system files...

7.1CVSS7.3AI score0.00265EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.12 views

The software for data protection solutions from Dell RecoverPoint for virtual machines has a vulnerability related to improper verification of the cryptographic signature. This vulnerability allows attackers to elevate their privileges to the root level.

The vulnerability of the Dell RecoverPoint data protection software for virtual machines is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

9CVSS5.5AI score0.00754EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.12 views

The software for data protection solutions from Dell RecoverPoint for virtual machines has a vulnerability related to insufficient limits on authentication attempts. This allows attackers to carry out brute-force attacks.

The vulnerability of the Dell RecoverPoint data protection software for virtual machines relates to insufficient restrictions on authentication attempts. Exploiting this vulnerability could allow a malicious actor to carry out a brute-force attack...

6.5CVSS5.5AI score0.00318EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.13 views

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines, related to the use of strictly encrypted credentials, allows attackers to gain unauthorized access to protected information.

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines relates to the use of strictly encrypted authentication credentials. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information remotely...

5.3CVSS5.4AI score0.0041EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/12/19 12:00 a.m.11 views

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines is related to an ASP.NET configuration error. Creating a binary debug file allows a malicious actor to gain unauthorized access to confidential information.

The vulnerability of Dell RecoverPoint’s data protection software for virtual machines is related to an error in ASP.NET configuration: the creation of a binary debug file. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

5.3CVSS5.5AI score0.00567EPSS
SaveExploits0References2
Rows per page
Query Builder