14017 matches found
DEBIAN-CVE-2025-38077
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in currentpasswordstore If the 'buf' array received from the user contains an empty string, the 'length' variable will be zero. Accessing the 'buf' array element with index...
CVE-2025-38077
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in currentpasswordstore If the 'buf' array received from the user contains an empty string, the 'length' variable will be zero. Accessing the 'buf' array element with index...
UBUNTU-CVE-2025-38077
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in currentpasswordstore If the 'buf' array received from the user contains an empty string, the 'length' variable will be zero. Accessing the 'buf' array element with index...
CVE-2025-38077
CVE-2025-38077 affects the Linux kernel, in platform/x86 dell-wmi-sysman. The root cause was a potential buffer overflow when current_password_store() accessed buf[length-1] after an empty string length. A check for empty strings was added. The Azure Linux Nessus advisory confirms the fix and rec...
CVE-2025-38077 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in currentpasswordstore If the 'buf' array received from the user contains an empty string, the 'length' variable will be zero. Accessing the 'buf' array element with index...
CVE-2025-38077
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in currentpasswordstore If the 'buf' array received from the user contains an empty string, the 'length' variable will be zero. Accessing the 'buf' array element with index...
CVE-2025-38077 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Avoid buffer overflow in currentpasswordstore If the 'buf' array received from the user contains an empty string, the 'length' variable will be zero. Accessing the 'buf' array element with index...
Wyse Management Suite WMS Cross-Site Request Forgery Vulnerability
Wyse Management Suite WMS is a cloud and local management platform from Dell, Inc. It is used to centrally manage Wyse lightweight endpoint devices and supports remote configuration, firmware updates, security policy management and other features. A cross-site request forgery vulnerability exists...
Wyse Management Suite WMS Improper Authorization Vulnerability
Wyse Management Suite WMS is a combined cloud and local management platform from Dell. A misauthorization vulnerability exists in Wyse Management Suite WMS, which can be exploited by an attacker to cause unauthorized access...
Dell Wyse Management Suite WMS Cross-Site Scripting Vulnerability
Wyse Management Suite WMS is a combined cloud and local management platform from Dell. A cross-site scripting vulnerability exists in Wyse Management Suite WMS that stems from improper input neutralization and can be exploited by an attacker to cause code injection...
Wyse Management Suite WMS Path Traversal Vulnerability
Wyse Management Suite WMS is a cloud and local management platform from Dell, Inc. It is used to centrally manage Wyse lightweight endpoint devices and supports remote configuration, firmware updates, security policy management and other features. A path traversal vulnerability exists in Wyse...
Dell Wyse Management Suite WMS Cross-Site Scripting Vulnerability (CNVD-2025-15006)
Wyse Management Suite WMS is a cloud and local management platform from Dell, Inc. It is used to centrally manage Wyse lightweight endpoint devices and supports remote configuration, firmware updates, security policy management and other features. A cross-site scripting vulnerability exists in Wy...
The vulnerability of the Dell Storage Manager (DSM) cluster management software lies in the incorrect path name limitation for the restricted access directory, allowing a hacker to execute arbitrary code.
The vulnerability of the Dell Storage Manager DSM cluster management software is related to incorrect path name restrictions for access to restricted directories. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Dell Storage Manager’s cluster management software lies in the improper limitation of XML references to external objects, which allows attackers to exploit this flaw to disclose protected information.
The vulnerability of Dell Storage Manager’s cluster management software relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
The vulnerability of Dell Storage Manager’s cluster management software lies in its lack of measures to protect the website structure, allowing attackers to carry out XSS attacks.
The vulnerability of Dell Storage Manager’s cluster management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...
The vulnerability of Dell Storage Manager’s cluster management software lies in its failure to eliminate special elements used in the operating system command. This allows a hacker to execute arbitrary code.
The vulnerability of Dell Storage Manager’s cluster management software lies in the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of Dell Storage Manager’s cluster management software lies in its authentication procedures, which allow attackers to escalate their privileges.
The vulnerability of Dell Storage Manager’s cluster management software is related to deficiencies in its authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Platform/x86: dell-wmi-sysman: Avoid buffer overflow in currentpasswordstore If the ‘buf’ array received from the user contains an empty string, the ‘length’ variable will be zero. Accessing the ‘buf’ array element with index...
CVE-2025-25215
An arbitrary free vulnerability exists in the cvclose functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an arbitrary free. An attacker can forge a fake session to trigger this vulnerability...
CVE-2025-25050
An out-of-bounds write vulnerability exists in the cvupgradesensorfirmware functionality of Dell ControlVault3 prior to 5.15.10.14 and Dell ControlVault 3 Plus prior to 6.2.26.36. A specially crafted ControlVault API call can lead to an out-of-bounds write. An attacker can issue an API call to...