Dell Security Management Server和Dell Encryption 后置链接漏洞

Dell Security Management Server and Dell Encryption are both products of Dell USA.Dell Security Management Server is a data security management solution.Dell Encryption is a data protection solution. Dell Encryption is a data protection solution that includes features such as compliance managemen...

Dell XtremIO 日志信息泄露漏洞

DELL XtremIO is an all-flash enterprise-class storage array from EMC, a Dell Technologies company, designed to enhance the performance of virtualization, database and analytics applications. DELL XtremIO suffers from a log information disclosure vulnerability that originates from the system...

Dell SmartFabric OS10 Software 安全漏洞

Dell SmartFabric OS10 Software is network operating system software developed by Dell for automated configuration and management of data center network architectures. A security vulnerability exists in Dell SmartFabric OS10 Software versions prior to 10.6.0.5, which stems from fixed credentials...

Dell SmartFabric OS10 Software 代码问题漏洞

Dell SmartFabric OS10 Software is network operating system software developed by Dell to simplify the management and automation of data center network architectures. A security vulnerability exists in Dell SmartFabric OS10 Software versions prior to 10.6.0.5 that stems from improper handling of X...

Dell PowerProtect Data Manager 输入验证错误漏洞

DELL PowerProtect Data Manager is data protection software from Dell Technologies designed to provide a unified data protection solution for modern hybrid cloud environments. An input validation error vulnerability exists in DELL PowerProtect Data Manager that stems from the PowerProtect Data...

Dell Data Protection Advisor 日志信息泄露漏洞

Dell Data Protection Advisor is a reporting and analytics platform from Dell USA. A log information disclosure vulnerability exists in Dell Data Protection Advisor versions 2.6 through 3.37-30, which originates when sensitive information is inserted into a log file, potentially leading to...

PT-2025-31425 · Dell · Dell Powerprotect Data Manager

Name of the Vulnerable Software and Affected Versions: Dell PowerProtect Data Manager versions prior to 19.19 Description: Dell PowerProtect Data Manager contains an Improper Input Validation issue. A low privileged attacker with remote access could potentially exploit this to read arbitrary file...

PT-2025-31423 · Dell · Dell Xtremio X2 +1

Name of the Vulnerable Software and Affected Versions: TechAdvisor versions 2.6 through 3.37-30 Description: TechAdvisor versions 2.6 through 3.37-30 for Dell XtremIO X2 contain an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could...

PT-2025-31398 · Dell · Dell Security Management Server +1

Name of the Vulnerable Software and Affected Versions: Dell Encryption and Dell Security Management Server versions prior to 11.11.0 Description: Dell Encryption and Dell Security Management Server are affected by an Improper Link Resolution Before File Access 'Link Following' issue. A local...

SUSE CVE-2025-38412

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content...

AZL-73037 CVE-2025-38412 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content...

DEBIAN-CVE-2025-38412

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content...

AZL-65684 CVE-2025-38412 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content...

UBUNTU-CVE-2025-38412

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content...

CVE-2025-38412 platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks After retrieving WMI data blocks in sysfs callbacks, check for the validity of them before dereferencing their content...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the dell-wmi-sysman module not verifying the validity of a WMI data block, which could lead to invalid...

Dell AppSync File Upload Vulnerability

Dell AppSync is a data replication management application from Dell USA. A file upload vulnerability exists in Dell AppSync version 4.6.0.0, which stems from the application's lack of effective validation of uploaded files. The vulnerability can be exploited to remotely execute arbitrary code by...

Dell Command | Update and Dell Update < 5.4 DoS

The version of Dell Command | Update or Dell Update on the remote Windows host is prior to 5.4. It is, therefore, affected by a denial of service vulnerability: - Dell Command | Update, Dell Update, and Alienware Update UWP, versions prior to 5.4, contain an Exposed Dangerous Method or Function...

CVE-2025-32744

Dell AppSync, versions 4.6.0.0, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution...

CVE-2025-36603

Dell AppSync, versions 4.6.0.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering...