Dell Enterprise SONiC OS 安全漏洞

Dell Enterprise SONiC OS Dell Enterprise Sonic Operating System is an open-source network operating system from Dell USA. A security vulnerability exists in Dell Enterprise SONiC OS versions 4.1. x and 4.2.x, which stems from improper authentication and could lead to a protection mechanism bypass...

PT-2024-32933 · Dell · Dell Powerprotect Dd

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect DD versions prior to 8.1.0.0 Dell PowerProtect DD version 7.13.1.10 Dell PowerProtect DD version 7.10.1.40 Dell PowerProtect DD version 7.7.5.50 Description: The issue is an access control vulnerability that could be exploit...

Dell Data Lakehouse SQL Injection Vulnerability

Dell Data Lakehouse is a fully integrated data platform from Dell, Inc. Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0 are vulnerable to a SQL injection vulnerability that stems from the inclusion of a SQL injection flaw that can be exploited by an unauthenticated attacker to cause an informati...

CVE-2024-50072 x86/bugs: Use code segment selector for VERW operand

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below GP in 32-bit mode when dosemu software was executing vm86 system call: general protection fault: 0000 1 PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin...

CVE-2024-50072

In the Linux kernel, the following vulnerability has been resolved: x86/bugs: Use code segment selector for VERW operand Robert Gill reported below GP in 32-bit mode when dosemu software was executing vm86 system call: general protection fault: 0000 1 PREEMPT SMP CPU: 4 PID: 4610 Comm: dosemu.bin...

The vulnerability of the Dell OpenManage Enterprise system management console, related to improper code generation, allows a malicious actor to execute arbitrary code.

The vulnerability of the Dell OpenManage Enterprise system management console is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Dell OpenManage Enterprise console, related to the lack of protective measures for the SQL query structure, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Dell OpenManage Enterprise system management console is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2024-47481

Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2024-47483

Dell Data Lakehouse, versions 1.0.0.0 and 1.1.0.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2024-47481

Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2024-47483

Dell Data Lakehouse, versions 1.0.0.0 and 1.1.0.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2024-47483

Dell Data Lakehouse, versions 1.0.0.0 and 1.1.0.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2024-47483

CVE-2024-47483 affects Dell Data Lakehouse versions 1.0.0.0–1.1.0.0 . A vulnerability in SQL injection arises from improper neutralization of SQL elements, allowing an unauthenticated, locally present attacker to cause information disclosure . The connected PT-2024-32632 entry notes a remediation...

CVE-2024-47483

Dell Data Lakehouse, versions 1.0.0.0 and 1.1.0.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2024-47481

Dell Data Lakehouse vulnerable component: versions 1.0.0.0 and 1.1.0.0 suffer from Improper Access Control, resulting in potential Denial of Service when accessed by an unauthenticated attacker on an adjacent network. The connected sources (NVD/CNNVD) confirm the issue and list the affected versi...

CVE-2024-47481

Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2024-47481

Dell Data Lakehouse, versions 1.0.0.0, 1.1.0., contains an Improper Access Control vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Denial of service...

Dell Data Lakehouse SQL注入漏洞

Dell Data Lakehouse is a fully integrated data platform from Dell, Inc. Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0 are vulnerable to a SQL injection vulnerability that stems from the inclusion of a SQL injection flaw that can be exploited by an unauthenticated attacker to cause an informati...

Dell Data Lakehouse 访问控制错误漏洞

Dell Data Lakehouse is a fully integrated data platform from Dell USA Inc. An access control error vulnerability exists in Dell Data Lakehouse versions 1.0.0.0 and 1.1.0.0, which stems from the inclusion of an Improper Access Control Vulnerability, which could be exploited by an unauthenticated...

PT-2024-32632 · Dell · Dell Data Lakehouse

Name of the Vulnerable Software and Affected Versions: Dell Data Lakehouse versions 1.0.0.0 through 1.1.0.0 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection. This could allow an unauthenticated attacker with...