Browse CVEs

HIGH 7.2 CVE-2024-45765 Dell Enterprise SONiC OS, version(s) 4.1.x, 4.2.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injec… Enterprise Sonic Distribution 4.1.6 / 4.2.2+ Fix from $1,9502024-11-08 MEDIUM 6.5 CVE-2024-48011 Dell PowerProtect DD, versions prior to 7.7.5.50, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability. A low privile… Data Domain Operating System 7.7.5.50+ Fix from $1,6002024-11-08 HIGH 7.3 CVE-2024-45759 Dell PowerProtect Data Domain, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an escalation of privilege vulnerability. A lo… Data Domain Operating System 7.7.5.50 / 7.10.1.40+ Fix from $1,9502024-11-08 HIGH 7.2 CVE-2024-48010 Dell PowerProtect DD, versions prior to 8.1.0.0, 7.13.1.10, 7.10.1.40, and 7.7.5.50, contains an access control vulnerability. A remote high privileg… Data Domain Operating System 7.7.5.50 / 7.10.1.40+ Fix from $1,9502024-11-08 MEDIUM 6.5 CVE-2024-47481 Dell Data Lakehouse, version(s) 1.0.0.0, 1.1.0., contain(s) an Improper Access Control vulnerability. An unauthenticated attacker with adjacent netwo… Data Lakehouse Mitigation only Fix from $1,6002024-10-25 MEDIUM 5.5 CVE-2024-47483 Dell Data Lakehouse, version(s) 1.0.0.0 and 1.1.0.0, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection… Data Lakehouse Mitigation only Fix from $1,6002024-10-25 HIGH 8.8 CVE-2024-48016 Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. A … Secure Connect Gateway Mitigation only Fix from $1,9502024-10-18 HIGH 8.1 CVE-2024-47241 Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vulnerability. A low privileged a… Secure Connect Gateway Mitigation only Fix from $1,9502024-10-18 MEDIUM 6.3 CVE-2024-47240 Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the f… Secure Connect Gateway No fix yet Fix from $1,6002024-10-18 HIGH 8.8 CVE-2024-45766 Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Control of Generation of Code ('Code Injection') vulnerability. A lo… Openmanage Enterprise 4.2.0+ Fix from $1,9502024-10-17 MEDIUM 6.5 CVE-2024-45767 Dell OpenManage Enterprise, version(s) OME 4.1 and prior, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Inje… Openmanage Enterprise 4.2.0+ Fix from $1,6002024-10-17 HIGH 8.8 CVE-2024-39577 Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Co… Smartfabric Os10 10.5.3.11 / 10.5.4.12+ Fix from $1,9502024-09-26 HIGH 7.5 CVE-2024-37125 Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x,10.5.3.x, contains an Uncontrolled Resource Consumption vulnerability. A remote… Smartfabric Os10 10.5.3.11 / 10.5.4.12+ Fix from $1,9502024-09-26 CRITICAL 9.8 CVE-2024-39583 Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated at… Insightiq 5.1.1+ Fix from $2,3002024-09-10 MEDIUM 5.5 CVE-2024-42425 Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Access of Memory Location After End of Buffer vulnerability. A low privileg… Precision 7920 Firmware 2.22.1+ Fix from $1,6002024-09-10 CRITICAL 9.8 CVE-2024-39581 Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains a File or Directories Accessible to External Parties vulnerability. An unauthenticated … Insightiq 5.1.1+ Fix from $2,3002024-09-10 MEDIUM 6.7 CVE-2024-39580 Dell PowerScale InsightIQ, versions 5.0 through 5.1, contains an Improper Access Control vulnerability. A high privileged attacker with local access … Insightiq 5.1.1+ Fix from $1,6002024-09-10 HIGH 7.6 CVE-2024-42427 Dell ThinOS versions 2402 and 2405, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An… Wyse Thinos Mitigation only Fix from $1,9502024-09-10 MEDIUM 6.0 CVE-2024-42424 Dell Precision Rack, 14G Intel BIOS versions prior to 2.22.2, contains an Improper Input Validation vulnerability. A high privileged attacker with lo… Precision 7920 Rack Firmware 2.22.1+ Fix from $1,6002024-09-10 HIGH 8.8 CVE-2024-38486 Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x , contain(s) an Improper Neutralization of Special Elements used i… Smartfabric Os10 10.5.6.4+ Fix from $1,9502024-09-06 HIGH 8.1 CVE-2024-39585 Dell SmartFabric OS10 Software, version(s) 10.5.5.4 through 10.5.5.10 and 10.5.6.x, contain(s) an Use of Hard-coded Password vulnerability. A low pri… Smartfabric Os10 10.5.6.4+ Fix from $1,9502024-09-06 MEDIUM 6.7 CVE-2024-39579 Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contains an incorrect privilege assignment vulnerability. A local high privileged attacker cou… Powerscale Onefs 9.7.1.2+ Fix from $1,6002024-08-31 MEDIUM 6.3 CVE-2024-39578 Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.1 contains a UNIX symbolic link (symlink) following vulnerability. A local high privileged attac… Powerscale Onefs 9.7.1.2+ Fix from $1,6002024-08-31 MEDIUM 6.5 CVE-2024-38304 Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Access of Memory Location After End of Buffer vulnerability. A low pr… Emc Xc Core Xcxr2 Firmware 2.22.1 / 2.22.2+ Fix from $1,6002024-08-29 MEDIUM 6.0 CVE-2024-38303 Dell PowerEdge Platform, 14G Intel BIOS version(s) prior to 2.22.x, contains an Improper Input Validation vulnerability. A high privileged attacker w… Emc Xc Core Xcxr2 Firmware 2.22.1 / 2.22.2+ Fix from $1,6002024-08-29 HIGH 8.2 CVE-2024-39584 Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially … Xps 8960 Firmware 1.16.0 / 1.18.0+ Fix from $1,9502024-08-28 HIGH 7.3 CVE-2023-43078 Dell Dock Firmware and Dell Client Platform contain an Improper Link Resolution vulnerability during installation resulting in arbitrary folder delet… Intel Thunderbolt Controller Firmware Update Utility 1.11.0 / 1.14.1+ Fix from $1,9502024-08-28 HIGH 8.8 CVE-2024-39576 Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local a… Power Manager 3.16.0+ Fix from $1,9502024-08-22 HIGH 7.8 CVE-2023-22576 Dell Repository Manager version 3.4.2 and earlier, contain a Local Privilege Escalation Vulnerability in Installation module. A local low privileged … Repository Manager 3.4.3+ Fix from $1,9502024-08-21 HIGH 7.3 CVE-2024-38305 Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in the installer. A local low-privileged au… Supportassist For Home Pcs Mitigation only Fix from $1,9502024-08-21