Dell ThinOS 安全漏洞

Dell ThinOS is a client operating system from Dell USA. A security vulnerability exists in Dell ThinOS version 2408, which stems from a Time of Check to Time of Use TOCTOU race condition that could allow a low-privileged attacker with local access privileges to exploit the vulnerability, resultin...

Dell Client Platform 安全漏洞

Dell Client Platform is client platform software provided by Dell Dell that is primarily used to manage the configuration and functionality of enterprise client computers. Dell Client Platform has an incorrect link resolution vulnerability that can be exploited by an attacker to cause an elevatio...

Dell VxVerify 安全漏洞

Dell VxVerify is a pre-upgrade operational status checking tool from Dell USA. A security vulnerability exists in Dell VxVerify versions prior to x.40.405, which stems from the storage of plaintext passwords in the shell wrapper, and could allow a local, high-privileged attacker to disclose...

PT-2024-35712 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS version 2408 Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...

Dell ThinOS 命令注入漏洞

Dell ThinOS is a client operating system from the American company Dell. A command injection vulnerability exists in Dell ThinOS version 2408, which stems from improper neutralization of special elements, and can be exploited by an attacker with local access rights to cause command execution...

PT-2024-35714 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS version 2408 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a Command Injection vulnerability. An unauthenticated attacker with local access could potentially...

PT-2024-35364 · Dell · Dell Client Platform Firmware Update Utility

Name of the Vulnerable Software and Affected Versions: Dell Client Platform Firmware Update Utility affected versions not specified Description: The issue is related to an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this...

Dell Urges Immediate Update to Fix Critical Power Manager Vulnerability

A critical security flaw in Dell Power Manager has been discovered that could allow attackers to compromise your systems and execute arbitrary code...

CVE-2024-52538

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2024-47977

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2024-47484

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2024-47977

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2024-47484

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2024-52538

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2024-47977

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2024-47977

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this...

CVE-2024-47977

Dell Avamar (AVE) prior to 19.12 with patch 338905 (excluding 19.10 and 19.10SP1 with patch 338869) is affected by CVE-2024-47977: an Improper Neutralization of Special Elements used in SQL Commands (SQL Injection) that could allow a low-privileged, remote attacker to execute commands on affected...

CVE-2024-47484

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2024-47484

Dell Avamar/AVE 19.x prior to 19.12 with patch 338905 (excluding 19.10 and 19.10SP1 with patch 338869) are affected by an SQL Injection in the webRestoreLogin.action endpoint. The root cause is improper neutralization of user-supplied data used to construct SQL queries, enabling an unauthenticate...

CVE-2024-47484

Dell Avamar, versions prior to 19.12 with patch 338905, excluding 19.10 and 19.10SP1 with patch 338869, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...