Lucene search
K

8 matches found

OSV
OSV
added 2024/11/12 4:15 a.m.2 views

CVE-2024-49557

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code...

7.8CVSS5.8AI score0.00698EPSS
Exploits0References1
OSV
OSV
added 2024/11/12 4:15 a.m.3 views

CVE-2024-48838

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

3.3CVSS5.8AI score0.00153EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/16 12:0 a.m.3 views

PT-2024-8150 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.3.x through 10.5.6.x Description: The issue is related to a command injection vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to...

7.8CVSS8AI score0.00758EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/10/16 12:0 a.m.2 views

PT-2024-8147 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 versions 10.5.3.x through 10.5.6.x Description: The issue is related to improper privilege management in the network operating system, which could allow an attacker to elevate their privileges. A low-privileged attacker...

7.8CVSS6.8AI score0.00147EPSS
Exploits0References10
CNNVD
CNNVD
added 2024/09/26 12:0 a.m.2 views

Dell SmartFabric OS10 命令注入漏洞

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell USA. A command injection vulnerability exists in Dell SmartFabric OS10 versions 10.5.6.x, 10.5.5.x, 10.5.4.x, and 10.5.3.x. The vulnerability, which stems from improper neutralization of a special element, could lead...

8.8CVSS8.4AI score0.00838EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/07/08 12:0 a.m.2 views

Directus Security Vulnerabilities

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A security vulnerability exists in Directus versions 9.23.0 through 10.5.3 that stems from incorrect handling of the in, nin operators...

7.7CVSS6.7AI score0.00423EPSS
Exploits1References2
OSV
OSV
added 2024/05/28 8:15 p.m.3 views

CVE-2024-35239 Stored Cross-site Scripting on Components of Umbraco Forms

Umbraco Commerce is an open source dotnet web forms solution. In affected versions an authenticated user that has access to edit Forms may inject unsafe code into Forms components. This issue can be mitigated by configuring TitleAndDescription:AllowUnsafeHtmlRendering after upgrading to one of th...

2.7CVSS7AI score0.00341EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2023/12/01 12:0 a.m.4 views

PT-2023-8690 · Unknown · Scalefusion

Name of the Vulnerable Software and Affected Versions: ScaleFusion versions 10.5.2 through 10.5.6 Description: The issue is related to inadequate access control in the Scalefusion MDM Agent, which can allow an attacker to escape from an isolated software environment. Specifically, in version...

7.3CVSS6.5AI score0.00186EPSS
Exploits0References8
Rows per page
Query Builder