Browse CVEs

HIGH 7.8 CVE-2015-6856 Dell Pre-Boot Authentication Driver (PBADRV.sys) 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a… Pre Boot Authentication Driver No fix yet Fix from $1,9502016-01-08 MEDIUM 6.0 CVE-2015-2890 The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-… Bios Mitigation only Fix from $1,6002015-08-01 HIGH 10.0 CVE-2015-4067EPSS 6% Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted template st… Netvault Backup Mitigation only Fix from $1,9502015-05-29 MEDIUM 5.0 CVE-2013-3304 Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in t… Equallogic Ps4000 Firmware No fix yet Fix from $1,6002014-10-30 MEDIUM 5.0 CVE-2014-4191 The TLS implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) sends a long series of random bytes during use of the Dual_EC_DRBG algor… Bsafe Share Mitigation only Fix from $1,6002014-06-17 MEDIUM 5.0 CVE-2014-4192 The Dual_EC_DRBG implementation in EMC RSA BSAFE-C Toolkits (aka Share for C and C++) processes certain requests for output bytes by considering only… Bsafe Share Mitigation only Fix from $1,6002014-06-17 MEDIUM 5.0 CVE-2014-4193 The TLS implementation in EMC RSA BSAFE-Java Toolkits (aka Share for Java) supports the Extended Random extension during use of the Dual_EC_DRBG algo… Bsafe Share Mitigation only Fix from $1,6002014-06-17 HIGH 9.0 CVE-2014-2959 logViewer.htm on the Dell ML6000 tape backup system with firmware before i8.2.0.2 (641G.GS103) and the Quantum Scalar i500 tape backup system with fi… Powervault Ml6000 Firmware Mitigation only Fix from $1,9502014-06-02 MEDIUM 5.8 CVE-2014-0636 EMC RSA BSAFE Micro Edition Suite (MES) 3.2.x before 3.2.6 and 4.0.x before 4.0.5 does not properly validate X.509 certificate chains, which allows m… Bsafe Micro Edition Suite Mitigation only Fix from $1,6002014-04-11 MEDIUM 5.0 CVE-2014-0628 The server in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.5 does not properly process certificate chains, which allows remote attackers … Bsafe Micro Edition Suite Mitigation only Fix from $1,6002014-03-25 MEDIUM 5.0 CVE-2014-0625 The SSLSocket implementation in the (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers … Bsafe Ssl J Mitigation only Fix from $1,6002014-02-18 MEDIUM 5.0 CVE-2014-0626 The (1) JSAFE and (2) JSSE APIs in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 make it easier for remote attackers to bypass intended c… Bsafe Ssl J Mitigation only Fix from $1,6002014-02-18 MEDIUM 5.0 CVE-2014-0627 The SSLEngine API implementation in EMC RSA BSAFE SSL-J 5.x before 5.1.3 and 6.x before 6.0.2 allows remote attackers to trigger the selection of a w… Bsafe Ssl J Mitigation only Fix from $1,6002014-02-18 MEDIUM 6.5 CVE-2014-1671 Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to exec… Kace K1000 Systems Management Appliance Software Mitigation only Fix from $1,6002014-01-26 HIGH 10.0 CVE-2013-3594 The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of service (de… Powerconnect 3348 Mitigation only Fix from $1,9502014-01-20 HIGH 7.8 CVE-2013-3606 The login page in the GoAhead web server on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to caus… Powerconnect 3348 Mitigation only Fix from $1,9502014-01-20 MEDIUM 6.8 CVE-2013-3595 The OpenManage web application 2.5 build 1.19 on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote authenticate… Powerconnect 3348 Mitigation only Fix from $1,6002014-01-20 MEDIUM 5.0 CVE-2013-6246EPSS 6% The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's ful… Quest One Password Manager No fix yet Fix from $1,6002013-10-24 HIGH 7.6 CVE-2013-3582 Buffer overflow in Dell BIOS on Dell Latitude D###, E####, XT2, and Z600 devices, and Dell Precision M#### devices, allows local users to bypass inte… Latitude D530 No fix yet Fix from $1,9502013-08-28 HIGH 10.0 CVE-2013-4783 The Dell iDRAC6 with firmware 1.x before 1.92 and 2.x and 3.x before 3.42, and iDRAC7 with firmware before 1.23.23, allows remote attackers to bypass… Idrac6 Bmc Mitigation only Fix from $1,9502013-07-08 HIGH 10.0 CVE-2013-4785 The web interface on the Dell iDRAC6 with firmware before 1.95 allows remote attackers to modify the CLP interface for arbitrary users and possibly h… Idrac6 Firmware Mitigation only Fix from $1,9502013-07-08 HIGH 7.8 CVE-2013-0120 The web interface on Dell PowerConnect 6248P switches allows remote attackers to cause a denial of service (device crash) via a malformed request. Powerconnect 6248p Mitigation only Fix from $1,9502013-02-24 HIGH 7.5 CVE-2011-5169 SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2 allows remote attackers to ex… Sonicwall Viewpoint No fix yet Fix from $1,9502012-09-15 HIGH 7.5 CVE-2009-0693EPSS 13% Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to h… Wyse Device Manager Mitigation only Fix from $1,9502012-06-19 HIGH 7.5 CVE-2009-0695EPSS 69% hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access… Wyse Device Manager No fix yet Fix from $1,9502012-06-19 HIGH 9.3 CVE-2011-4047 The Dell KACE K2000 System Deployment Appliance allows remote attackers to execute arbitrary commands by leveraging database write access. Kace K2000 Systems Deployment Appliance Mitigation only Fix from $1,9502011-11-12 MEDIUM 5.0 CVE-2011-4046 The Dell KACE K2000 System Deployment Appliance stores the recovery account password in cleartext within a PHP script, which allows context-dependent… Kace K2000 Systems Deployment Appliance Mitigation only Fix from $1,6002011-11-12 MEDIUM 5.0 CVE-2011-0329 Directory traversal vulnerability in the GetData method in the Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 allows remot… Dellsystemlite.scanner Activex Control Mitigation only Fix from $1,6002011-02-21 MEDIUM 5.0 CVE-2011-0330 The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest pr… Dellsystemlite.scanner Activex Control Mitigation only Fix from $1,6002011-02-21 HIGH 7.5 CVE-2006-3470 The Dell Openmanage CD launches X11 and SSH daemons that do not require authentication, which allows remote attackers to gain privileges. Openmanage Cd Mitigation only Fix from $1,9502006-07-10