CVE-2024-30167

PoC For Atlona OME Authenticated Command Injection Disclaimer : This proof of concept is provided solely for educational and research purposes only. Do not use this code on systems you do not own or have explicit permission to test. I am not responsible for any misuse. An authenticated command...

CVE-2026-91883

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91882

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

EUVD-2026-101161

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91883

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91883

The Dell Terraform Provider for OME (versions 1.0.0 through 1.2.3) is affected by a vulnerability involving the Insertion of Sensitive Information into Log File within the provider configuration component . A low privileged attacker with remote access could exploit this flaw to cause information ...

CVE-2026-91883

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91882

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-91882

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-91882

The Dell Terraform Provider for OME versions 1.0.0 through 1.2.3 is vulnerable to an Insertion of Sensitive Information into Externally-Accessible File or Directory (CWE-209). The flaw exists within the API client error handling component , where unauthenticated attackers with remote access can p...

EUVD-2026-101159

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

PT-2026-114334

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

CVE-2026-91883: Insertion of Sensitive Information into Log File

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

PT-2026-114335

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Log File vulnerability in the provider configuration component. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information...

CVE-2026-91882: Generation of Error Message Containing Sensitive Information

Dell Terraform Provider for OME, versions 1.0.0 through 1.2.3, contains an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in the API client error handling component. An unauthenticated attacker with remote access could potentially exploit this...

Malicious code in @zalastax/nolb-ome (npm)

The package @zalastax/nolb-ome was found to contain malicious code. --- Credit: OpenSSF source...

ome-ansible-molecule (0.4.4) potentially affected by CVE-2025-14010 via ansible (2.6.18)

ansible PYPI version 2.6.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ome-ansible-molecule 0.4.4 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ome-ansible-molecule (>=0.5.0, <=0.5.2) potentially affected by CVE-2025-14010 via ansible (2.8.18)

ansible PYPI version 2.8.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ome-ansible-molecule =0.5.0, =0.5.2 Source cves: CVE-2025-14010 Source advisory: OSV:PYSEC-2026-1119...

ome-ansible-molecule (>=0.5.0, <=0.5.2) potentially affected by CVE-2023-5115 via ansible (2.8.18)

ansible PYPI version 2.8.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ome-ansible-molecule =0.5.0, =0.5.2 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...

ome-ansible-molecule (0.4.4) potentially affected by CVE-2023-5115 via ansible (2.6.18)

ansible PYPI version 2.6.18 is affected by a known vulnerability. The following packages have a transitive dependency on ansible and may be impacted: - ome-ansible-molecule 0.4.4 Source cves: CVE-2023-5115 Source advisory: OSV:PYSEC-2026-1120...