Improper access control

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...

CVE-2022-34453

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...

CVE-2022-34453

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read‑only user could potentially exploit it to add or delete QoS policies (which are disabled by default). Affected component: QoS policy management in Dell XtremIO XMS. Root cause: improper ...

CVE-2022-34453

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default...

PT-2023-13413 · Dell · Dell Xtremio X2 Xms

Name of the Vulnerable Software and Affected Versions: Dell XtremIO X2 XMS versions prior to 6-4-1.11 Description: The issue is related to improper access control, allowing a remote read-only user to potentially exploit it and perform actions such as adding or deleting QoS policies, which are...

Dell Wyse Management Suite < 4.1 Multiple Vulnerabilities (DSA-2023-240)

The version of Dell Wyse Management Suite installed on the remote host is prior to 4.1. It is, therefore, affected by multiple vulnerabilities as referenced in the DSA-2023-240 advisory. - Wyse Management Suite versions prior to 4.1 contain a denial-of-service vulnerability. An authenticated...

Dell EMC XtremIO XMS Security Vulnerability

Dell EMC XtremIO XMS is a suite of XtremIO Enterprise Storage Platform management software from Dell USA. A security vulnerability exists in Dell EMC XtremIO XMS versions prior to 6-4-1.11. A remote, read-only user may be able to exploit this vulnerability to enforce the add or remove QoS Quality...

PT-2023-8984 · Dell · Enterprise Sonic

Name of the Vulnerable Software and Affected Versions: Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below Description: The issue is related to an improper input validation vulnerability. A remote unauthenticated malicious user may exploit this vulnerability a...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Malicious code in dell-microapp-core-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa05756266fe398bd9fa57a82b4d066270cdc60a00a4cda44b8eaa9552e2d56f The OpenSSF Package Analysis project identified 'dell-microapp-core-ng' @ 2000.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-1151 Malicious code in dell-microapp-core-ng (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis fa05756266fe398bd9fa57a82b4d066270cdc60a00a4cda44b8eaa9552e2d56f The OpenSSF Package Analysis project identified 'dell-microapp-core-ng' @ 2000.0.0 npm as malicious. It is considered malicious because: - The...

CVE-2023-32450

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

CVE-2023-32450

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

Improper access control

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

CVE-2023-32450

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

CVE-2023-32450

CVE-2023-32450 affects Dell Power Manager versions 3.3–3.14. The issue is an Improper Access Control that could allow a low-privilege, local attacker to execute arbitrary code with limited access. Remediation is provided in Dell security advisory DSA-2023-181 (security update). Other sources reit...

CVE-2023-32450

Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access...

DELL Wyse ThinOS Information Disclosure Vulnerability (CNVD-2025-31480)

DELL Wyse ThinOS is a lightweight operating system designed for thin client devices, focused on providing a secure and efficient virtual desktop access experience. An information disclosure vulnerability exists in DELL Wyse ThinOS, which can be exploited by an attacker to read sensitive informati...

DELL Wyse ThinOS Information Disclosure Vulnerability

DELL Wyse ThinOS is a lightweight operating system designed for thin client devices, focused on providing a secure and efficient virtual desktop access experience. An information disclosure vulnerability exists in DELL Wyse ThinOS, which can be exploited by an attacker to read sensitive informati...

Wyse Management Suite Denial of Service Vulnerability

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes centralized management of Wyse endpoints, asset tracking and automated device discovery. A denial of service vulnerability exists in Wyse Management Suite prior to version...