70188 matches found
CVE-2026-70423
Dell OpenManage Enterprise versions before 4.7.0 suffer from an XML External Entity (XXE) vulnerability exploitable by a low-privileged remote attacker, causing information exposure (CVSS 6.5, MEDIUM). Dell's DSA-2026-359 security advisory provides patch guidance for remediation. No in-the-wild e...
CVE-2026-70423
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure...
EUVD-2026-62436
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...
CVE-2026-56088
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection...
CVE-2026-56088
Dell OpenManage Enterprise versions before 4.7.0 contain an SQL injection vulnerability exploitable by a low-privileged remote attacker, with HIGH confidentiality impact (CVSS 7.1). Upgrade to 4.7.0 or apply Dell's DSA-2026-359 security update. No in-the-wild exploitation reported in the provided...
CVE-2026-54795
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-54795
Dell OpenManage Enterprise versions prior to 4.7.0 have an OS Command Injection flaw; a low-privileged remote attacker can inject special characters into input to execute arbitrary commands. Dell's DSA-2026-359 advisory recommends updating to 4.7.0 or later. No exploitation details are provided i...
EUVD-2026-62432
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-70421
Dell OpenManage Enterprise versions prior to 4.7.0 contain an Improper Privilege Management vulnerability exploitable by a high-privileged remote attacker for privilege escalation. CVSS 3.1 base score is 7.2 (HIGH). Patch to 4.7.0; see Dell DSA-2026-359 advisory. No public exploitation evidence p...
EUVD-2026-62402
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-54796
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution...
CVE-2026-54796
Dell OpenManage Enterprise versions prior to 4.7.0 contain an OS Command Injection flaw (CWE-78) exploitable by a high-privileged remote attacker, leading to full command execution and HIGH confidentiality, integrity, and availability impact. Dell DSA-2026-359 provides the fix; upgrade to 4.7.0 o...
RHSA-2026:56573 Red Hat Security Advisory: kernel security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2026:56219 Red Hat Security Advisory: python3 security update
Bulletin has no description...
Vulnerabilities are managed in Oracle Enterprise Manager
Oracle has identified several vulnerabilities in various components of Oracle Enterprise Manager. The vulnerabilities in Oracle Enterprise Manager Base Platform and Oracle Enterprise Manager for Systems Infrastructure involve multiple issues where an attacker with low privileges—or even without...
Malicious code in chrome-enterprise-premium-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 850bd071a15b1c20097032c5861cdfdeb970d05b4e28f65d5bcdb411fba5d10d chrome-enterprise-premium-mcp ships a postinstall lifecycle script that fires automatically on npm install and POSTs installer host metadata...
PT-2026-78732
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user with a role possessing the rest properties get...
PT-2026-78777
Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 10.4.2 Splunk Enterprise versions prior to 10.2.6 Splunk Enterprise versions prior to 10.0.9 Splunk Enterprise versions prior to 9.4.14 Description A user with the schedule search capability can configure PD...
PT-2026-78815
Name of the Vulnerable Software and Affected Versions Splunk Enterprise Security versions prior to 8.6.1 Description A user with the ess analyst role can modify User and Entity Behavior Analytics UEBA search macros. Because these macros are used by scheduled searches that execute with administrat...