Dell NativeEdge 安全漏洞

Dell NativeEdge is a software provided by Dell for managing and configuring network devices. A security vulnerability exists in Dell NativeEdge. An attacker could exploit the vulnerability to locally access the system with low privileges, resulting in elevated privileges...

PT-2024-32928 · Dell · Dell Nativeedge

Name of the Vulnerable Software and Affected Versions: Dell NativeEdge version 2.1.0.0 Description: The issue is related to an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...

Dell SupportAssist Client 安全漏洞

Dell SupportAssist Client is a client application from Dell USA. The program provides automated, proactive and predictive techniques for troubleshooting and more. A security vulnerability exists in Dell SupportAssist Client that stems from a software fix component that contains a symbolic link...

PT-2024-35368 · Dell · Dell Nativeedge

Name of the Vulnerable Software and Affected Versions: Dell NativeEdge version 2.1.0.0 Description: The issue is related to the creation of temporary files with insecure permissions. A high-privileged attacker with local access could potentially exploit this, leading to information disclosure...

Dell Inventory Collector Incorrect Link Resolution Before File Access Vulnerability

Dell Inventory Collector is a tool provided by Dell for collecting device information, mainly used to collect system information such as hardware configuration, operating system version, service packs, and so on from client systems. Dell Inventory Collector suffers from an incorrect link resoluti...

Dell PowerStore Parameter Injection Vulnerability

Dell PowerStore is a scalable all-flash array storage from Dell USA. The Dell PowerStore suffers from a parameter injection vulnerability that originates from improper parameter delimiter neutralization, which can be exploited by an attacker to modify arbitrary system files...

PT-2024-35362 · Dell · Dell Ecs

Name of the Vulnerable Software and Affected Versions: Dell ECS versions prior to 3.8.1.3 Description: The issue is an Authentication Bypass by Capture-replay vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Session theft...

Dell Integrated Remote Access Controller (iDRAC) Hardware Detection

Binary data dellidracdevicedetect.nbin...

Dell Integrated Remote Access Controller (iDRAC) OS Detection

Binary data dellidracdetect.nbin...

Dell RecoverPoint for Virtual Machines Access Control Error Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. An Access Control Error vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1 P...

The vulnerability of the Dell ECS storage platform lies in the redirection of the URL to an unreliable website, allowing a hacker to redirect users to any given URL address.

The vulnerability of the Dell ECS storage platform relates to the redirection of URLs to an unreliable website. Exploiting this vulnerability allows a hacker to redirect users to arbitrary URL addresses...

Dell Avamar SQL Injection Vulnerability (CNVD-2024-49614)

Dell Avamar is a purpose-built backup application from Dell, Inc. It is designed to provide a conveniently sized, turnkey, affordable, deduplicated backup solution. Dell Avamar suffers from a SQL injection vulnerability that arises from an improper neutralization of special elements used in SQL...

Dell ThinOS Command Injection Vulnerability (CNVD-2024-49615)

Dell ThinOS is a client operating system from the American company Dell. A command injection vulnerability exists in Dell ThinOS version 2408, which stems from improper neutralization of special elements, and can be exploited by an attacker with local access rights to cause command execution...

Dell Client Platform Incorrect Link Resolution Vulnerability

Dell Client Platform is client platform software provided by Dell Dell that is primarily used to manage the configuration and functionality of enterprise client computers. Dell Client Platform has an incorrect link resolution vulnerability that can be exploited by an attacker to cause an elevatio...

The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse lies in the insecure storage of confidential information, allowing unauthorized access to protected data by attackers.

The vulnerabilities of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliances, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse are related to the insecure storage of confidential information. Exploiting these vulnerabilities c...

Dell RecoverPoint for Virtual Machines Trust Management Issue Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A trust management issue vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1...

Dell RecoverPoint for Virtual Machines Encryption Issue Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A cryptographic issue vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1 P1,...

Dell RecoverPoint for Virtual Machines Command Injection Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. For virtualized applications in VMware environments. A command injection vulnerability exists in Dell RecoverPoint for Virtual Machines version 6.0 SP1 and version 6.0 SP1 P1,...

The vulnerability of Dell Power Manager’s software, related to inadequate access control, allows a perpetrator to execute arbitrary code and increase their privileges.

The vulnerability of Dell Power Manager is related to deficiencies in access control. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code and increase their privileges...

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...