Dell PowerScale OneFS 跨站脚本漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a cross-site scripting vulnerability that can be exploited by attackers to store malicious HTML or JavaScript code via multiple affected fields...

PT-2023-12754 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue allows an unauthenticated local attacker with physical access to the system and knowledge of the system configuration to potentially exploit it and read system information via...

PT-2023-13373 · Dell · Dell Supportassist For Business Pcs +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.11.4 and prior Dell SupportAssist for Business PCs versions 3.2.0 and prior Description: A privilege escalation issue exists, allowing a local authenticated malicious user to potentially elevate...

Dell PowerScale OneFS Command Injection Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a command injection vulnerability that can be exploited by attackers to cause arbitrary command execution, denial of service, information disclosure, and data deletion...

Dell PowerEdge Server BIOS 缓冲区错误漏洞

Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. Dell PowerEdge Server BIOS buffer overflow vulnerability, which stems from a SMM communication buffer validation error. A local attacker with elevated privileges could exploit this vulnerability to perform arbitrar...

PT-2023-13405 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.3.x Description: The issue concerns a weak encoding for a password in Dell PowerScale OneFS. A malicious local privileged attacker may potentially exploit this, leading to information disclosure...

PT-2023-13369 · Dell · Dell Precision Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge BIOS affected versions not specified Dell Precision BIOS affected versions not specified Description: The issue concerns an improper SMM communication buffer verification vulnerability. A local malicious user with high privileg...

PT-2023-13372 · Dell · Dell Supportassist For Business Pcs +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.11.4 and prior Dell SupportAssist for Business PCs versions 3.2.0 and prior Description: The issue is related to a cryptographic weakness. An authenticated non-admin user could potentially exploit th...

PT-2023-13414 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.3.x Description: A heap-based buffer overflow exists, which a local privileged malicious user could potentially exploit to take over the system. This issue affects compliance mode clusters...

Dell Alienware Command Center 输入验证错误漏洞

Dell Alienware Command Center is a series of gaming laptops from Dell, U.S.A. An input validation error vulnerability exists in Dell Alienware Command Center version 5.5.37.0 and prior, which stems from incorrect validation of user input. An attacker could use this vulnerability to send malicious...

Dell PowerScale OneFS 缓冲区错误漏洞

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS suffers from a buffer overflow vulnerability that stems from a boundary error when processing untrusted input, which can be exploited ...

Dell Command | Monitor 安全漏洞

Dell Command | Monitor is a software application from Dell, Inc. It enables IT administrators to easily manage fleet resource inventories, monitor system performance, modify BIOS settings, and remotely collect information about deployed Dell client systems. A security vulnerability exists in Dell...

PT-2023-14988 · Dell · Wyse Management Suite

Name of the Vulnerable Software and Affected Versions: Wyse Management Suite versions 3.8 and below Description: The issue concerns an improper access control vulnerability. An authenticated malicious admin user can edit the general client policy for which the user is not authorized...

PT-2023-13382 · Dell · Dell System Update

Name of the Vulnerable Software and Affected Versions: Dell System Update versions 2.0.0 and earlier Description: The issue is related to an Improper Certificate Validation in the data parser module. A local attacker with high privileges could potentially exploit this, leading to credential theft...

Dell SupportAssist for Home PCs 安全漏洞

Dell SupportAssist for Home PCs is a client application for home computers from Dell USA. The program provides automation, proactive and predictive techniques for troubleshooting and more. An information disclosure vulnerability exists in Dell SupportAssist for Home PCs version 3.11.2 and prior...

PT-2023-13366 · Dell · Bsafe Ssl-J

Name of the Vulnerable Software and Affected Versions: Dell BSAFE SSL-J versions prior to 6.5 Dell BSAFE SSL-J version 7.0 Description: The issue is related to a debug message that reveals unnecessary information, potentially leading to the disclosure of sensitive information to a locally...

多款Dell产品 安全漏洞

Dell Command Update is a Dell USA Inc. tool for automating driver, BIOS and firmware updates in Dell products. A security vulnerability exists in Dell Command | Update, Dell Update, and Alienware Update versions prior to 4.6.0 and 4.7.1, which originates from the inclusion of an insecure action i...

Dell PowerEdge Server BIOS 缓冲区错误漏洞

Dell PowerEdge Server BIOS is a system update driver for Dell, a Dell USA company. A buffer error vulnerability exists in the Dell PowerEdge Server BIOS that stems from incorrect validation of user input...

Dell BIOS 安全漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, USA. A security vulnerability exists in Dell BIOS. An attacker could exploit this vulnerability to read system information through the debugging interface...

PT-2023-13367 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.11.2 and prior Description: The issue is related to an Overly Permissive Cross-domain Whitelist, which could allow an authenticated non-admin user to potentially exploit it and obtain sensitive...