Lucene search
+L

13918 matches found

Prion
Prion
added 2023/06/01 4:15 p.m.28 views

Information disclosure

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text...

4CVSS6.2AI score0.00338EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2023/06/01 3:58 p.m.47 views

CVE-2023-28043

Dell SCG 5.14 is affected by an information-disclosure vulnerability in the upgrade path from SRS to SCG. A remote, low-privileged attacker could potentially retrieve plaintext information. Affected component: Dell SCG/Policy Manager upgrade flow; root cause involves insufficient protection durin...

6.5CVSS6.2AI score0.00338EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/01 3:58 p.m.41 views

CVE-2023-28043

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text...

6.5CVSS6.4AI score0.00338EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2023/06/01 3:58 p.m.12 views

CVE-2023-28043

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. A remote low privileged malicious user could potentially exploit this vulnerability to retrieve the plain text...

6.5CVSS6.7AI score0.00338EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/01 3:40 p.m.55 views

CVE-2023-28066

CVE-2023-28066 affects Dell OS Recovery Tool, specifically versions 2.2.4013 and 2.3.7012.0. The vulnerability is described as Improper Access Control, where a local authenticated non-administrator user could potentially elevate privileges on the system. The available connected documents confirm ...

7.8CVSS7.3AI score0.00156EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/01 3:40 p.m.9 views

CVE-2023-28066

Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system...

7.3CVSS7.5AI score0.00156EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/06/01 3:40 p.m.31 views

CVE-2023-28066

Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system...

7.3CVSS7.6AI score0.00156EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/01 12:00 a.m.11 views

Dell EMC SCG Policy Manager 加密问题漏洞

Dell EMC SCG Policy Manager is a secure connectivity gateway policy manager from Dell, Inc. An information disclosure vulnerability exists in Dell EMC SCG Policy Manager version 5.14, which stems from insufficient protection of sensitive information in the upgrade path from SRS to SCG, and can be...

6.5CVSS6.3AI score0.00338EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/06/01 12:00 a.m.9 views

Dell OS Recovery Tool 访问控制错误漏洞

Dell OS Recovery Tool is an operating system recovery tool from Dell USA. An Access Control Error vulnerability exists in Dell OS Recovery Tool versions 2.2.4013, 2.3.7012.0, which stems from the inclusion of improper access control and could be exploited to elevate system privileges...

7.8CVSS7.4AI score0.00156EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/01 12:00 a.m.10 views

PT-2023-21508 · Dell · Dell Scg

Name of the Vulnerable Software and Affected Versions: Dell SCG version 5.14 Description: The issue is an information disclosure vulnerability that occurs during the SRS to SCG upgrade path. A remote low-privileged malicious user could potentially exploit this to retrieve plain text...

6.5CVSS6.2AI score0.00338EPSS
SaveExploits0References3
NVD
NVD
added 2023/05/31 5:15 a.m.27 views

CVE-2023-25539

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the...

9.8CVSS9.5AI score0.01478EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/31 5:15 a.m.10 views

CVE-2023-25539

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the...

9.8CVSS6AI score0.01478EPSS
SaveExploits0References1
Prion
Prion
added 2023/05/31 5:15 a.m.25 views

Command injection

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the...

7.5CVSS9.8AI score0.01478EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/31 4:50 a.m.17 views

CVE-2023-25539

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the...

8.4CVSS8.3AI score0.01478EPSS
SaveExploits0References1
CVE
CVE
added 2023/05/31 4:50 a.m.64 views

CVE-2023-25539

Dell EMC NetWorker 19.6.1.2 contains an OS command injection vulnerability in the NetWorker client that could allow a remote, unauthenticated attacker to execute arbitrary OS commands with the affected application’s privileges. Multiple sources corroborate that affected versions include pre-19.6....

9.8CVSS9.8AI score0.01478EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/05/31 4:50 a.m.28 views

CVE-2023-25539

Dell NetWorker 19.6.1.2, contains an OS command injection Vulnerability in the NetWorker client. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the...

8.4CVSS10AI score0.01478EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/31 12:00 a.m.12 views

Dell NetWorker 操作系统命令注入漏洞

Dell NetWorker is an application from Dell USA Inc. It provides forum discussion functionality for Dell Inc. An operating system command injection vulnerability exists in Dell NetWorker version 19.6.1.2. An attacker could exploit this vulnerability to execute arbitrary operating system commands o...

9.8CVSS8.9AI score0.01478EPSS
SaveExploits0References2
CNVD
CNVD
added 2023/05/31 12:00 a.m.63 views

Dell PowerPath Management Appliance Authorization Issues Vulnerability

The Dell PowerPath Management Appliance is a PowerPath host management application from Dell Inc. that offers two models: a virtual machine-based appliance and a Docker containerized appliance. An authorization issue vulnerability exists in Dell PowerPath Management Appliance versions 7.0, 7.1, a...

7.8CVSS7.3AI score0.00147EPSS
SaveExploits0References1
OSV
OSV
added 2023/05/30 4:15 p.m.10 views

CVE-2023-24568

Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates...

4.3CVSS5.8AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
added 2023/05/30 4:15 p.m.31 views

CVE-2023-24568

Dell NetWorker, contains an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port which could disallow replacing CA signed certificates...

5CVSS5.2AI score0.00227EPSS
SaveExploits0References1
Rows per page
Query Builder