14017 matches found
CVE-2025-36595
Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-36595
Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-36595
Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-36595
Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-36595
Dell Unisphere for PowerMax vApp, versions 9.2.4.x, contains an Improper Neutralization of Directives in Statically Saved Code 'Static Code Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-36595
Dell Unisphere for PowerMax vApp 9.2.4.x is affected by a Static Code Injection vulnerability (CVE-2025-36595). A high-privileged attacker with remote access could potentially achieve code execution via the vulnerability. The documented attack surface indicates network access is required with low...
Dell PowerScale OneFS Elevation of Privilege Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 due to a lack of authorization in NFS exports. An attack...
Dell PowerScale OneFS SQL Injection Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS suffers from a SQL injection vulnerability that originates from improper neutralization of special elements in SQL commands, which can be...
PT-2025-27150 · Dell · Dell Unisphere For Powermax Vapp
Name of the Vulnerable Software and Affected Versions: Dell Unisphere for PowerMax vApp version 9.2.4.x Description: The issue is related to an Improper Neutralization of Directives in Statically Saved Code, also known as 'Static Code Injection'. This could allow a high-privileged attacker with...
Dell Unisphere 安全漏洞
Dell Unisphere is a unified storage management platform from Dell. A static code injection vulnerability exists in Dell Unisphere for PowerMax vApp, which arises from failure to properly neutralize instructions in static saved code. An attacker could exploit this vulnerability to execute arbitrar...
The vulnerability of the cv_close() function in the Dell ControlVault3 security driver package allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the cvclose function in the Dell ControlVault3 security driver suite is related to the release of an incorrect pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...
The vulnerability of the cv_send_blockdata() function in the Dell ControlVault3 security driver package allows a attacker to disclose protected information.
The vulnerability of the cvsendblockdata function in the Dell ControlVault3 security driver suite relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to disclose protected information...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite arises from incorrect restrictions on path names to the catalog. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protect...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite lies in the lack of protective measures for website structures. This allows attackers to perform cross-site scripting (XSS) attacks.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite, related to the manipulation of cross-site requests, allows attackers to execute CSRF attacks.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite stems from deficiencies in authentication mechanisms, allowing unauthorized access to protected information.
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...
The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite lies in the lack of measures taken to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...
CVE-2025-32753
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, informati...
CVE-2024-53298
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attacker with remote access could potentially exploit this vulnerability leading to unauthorized filesystem access. The attacker may be able to read,...
The vulnerability of the securebio_identify() function in the Dell ControlVault3 security management driver allows a attacker to execute arbitrary code.
The vulnerability of the securebioidentify function in the Dell ControlVault3 security driver suite is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...