Lucene search
+L

14100 matches found

CNVD
CNVD
added 2024/12/27 12:00 a.m.77 views

Dell ECS Buffer Overflow Vulnerability

Dell ECS Elastic Cloud Storage is an enterprise-class cloud-scale object storage platform from Dell Technologies. A buffer overflow vulnerability exists in Dell ECS. The vulnerability is due to an arithmetic overflow in the ECS's retention period processing. An attacker could exploit the...

8.1CVSS9.4AI score0.00396EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/27 12:00 a.m.8 views

DELL NativeEdge Information Disclosure Vulnerability (CNVD-2025-1751479)

DELL NativeEdge is an edge operations software platform from Dell Technologies designed to simplify the deployment, management and secure scaling of edge computing environments. An information disclosure vulnerability exists in DELL NativeEdge. An attacker could exploit this vulnerability to caus...

7.5CVSS6.3AI score0.00305EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/27 12:00 a.m.19 views

Dell NativeEdge Elevation of Privilege Vulnerability

Dell NativeEdge is a software provided by Dell for managing and configuring network devices. A security vulnerability exists in Dell NativeEdge. An attacker could exploit the vulnerability to locally access the system with low privileges, resulting in elevated privileges...

7.8CVSS7.1AI score0.0017EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/26 4:15 p.m.10 views

CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete...

6.5CVSS5.8AI score0.00396EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/26 4:15 p.m.34 views

CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete...

8.1CVSS0.00396EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/26 3:53 p.m.85 views

CVE-2024-51540

CVE-2024-51540 affects Dell ECS (Elastic Cloud Storage). The vulnerability is an arithmetic overflow in the retention period handling logic, impacting ECS versions prior to 3.8.1.3. An authenticated user with bucket/object-level privileges could potentially bypass retention policies and delete ob...

8.1CVSS7.2AI score0.00396EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/26 3:53 p.m.19 views

CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete...

8.1CVSS7.2AI score0.00396EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/26 3:53 p.m.41 views

CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete...

8.1CVSS0.00396EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/26 12:00 a.m.11 views

Dell ECS 输入验证错误漏洞

Dell ECS Elastic Cloud Storage is an enterprise-class cloud-scale object storage platform from Dell Technologies. A buffer overflow vulnerability exists in Dell ECS. The vulnerability is due to an arithmetic overflow in the ECS's retention period processing. An attacker could exploit the...

8.1CVSS7.2AI score0.00396EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/26 12:00 a.m.14 views

PT-2024-34697 · Dell · Dell Ecs

Name of the Vulnerable Software and Affected Versions: Dell ECS versions prior to 3.8.1.3 Description: The issue is related to an arithmetic overflow vulnerability in the retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could...

8.1CVSS7.2AI score0.00396EPSS
SaveExploits0References7
OSV
OSV
added 2024/12/25 4:15 p.m.8 views

CVE-2024-52543

Dell NativeEdge, versions 2.1.0.0, contains a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

4.4CVSS5.8AI score0.00172EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/25 4:15 p.m.32 views

CVE-2024-52543

Dell NativeEdge, versions 2.1.0.0, contains a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...

6.5CVSS0.00172EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/25 4:15 p.m.8 views

CVE-2024-52534

Dell ECS, versions prior to ECS 3.8.1.3, contains an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

5.4CVSS5.8AI score0.00304EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/25 4:15 p.m.24 views

CVE-2024-52534

Dell ECS, versions prior to ECS 3.8.1.3, contains an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

5.4CVSS0.00304EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/25 4:04 p.m.71 views

CVE-2024-52534

Dell ECS prior to version 3.8.1.3 contains an Authentication Bypass by Capture-replay vulnerability that could allow a low-privilege attacker with remote access to perform session theft. Affected component: Dell ECS software (enterprise object storage). Root cause: capture-replay-based bypass ena...

5.4CVSS7.1AI score0.00304EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/25 4:04 p.m.28 views

CVE-2024-52534

Dell ECS, versions prior to ECS 3.8.1.3, contains an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

5.4CVSS0.00304EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/25 4:04 p.m.10 views

CVE-2024-52534

Dell ECS, versions prior to ECS 3.8.1.3, contains an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

5.4CVSS6.9AI score0.00304EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/25 3:15 p.m.10 views

CVE-2024-53291

Dell NativeEdge, versions 2.1.0.0, contains an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

7.5CVSS5.8AI score0.00305EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/25 3:15 p.m.37 views

CVE-2024-52535

Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...

8.8CVSS0.0055EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/25 3:15 p.m.7 views

CVE-2024-52535

Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symbolic link symlink attack vulnerability in the software remediation component. A low-privileged authenticated user could potentially exploit this vulnerability,...

8.8CVSS5.9AI score0.0055EPSS
SaveExploits0References1
Rows per page
Query Builder