Browse CVEs

HIGH 7.5 CVE-2021-21528 Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerabi… Emc Powerscale Onefs Mitigation only Fix from $1,9502021-11-12 MEDIUM 6.8 CVE-2021-36315 Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compl… Emc Powerscale Nodes A100 Firmware No fix yet Fix from $1,6002021-11-12 MEDIUM 6.7 CVE-2021-36323 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Alienware 13 R3 Firmware 1.0.9 / 1.10.0+ Fix from $1,6002021-11-12 MEDIUM 6.7 CVE-2021-36324 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Alienware 13 R3 Firmware 1.0.9 / 1.10.0+ Fix from $1,6002021-11-12 MEDIUM 6.7 CVE-2021-36325 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Alienware 13 R3 Firmware 1.0.9 / 1.10.0+ Fix from $1,6002021-11-12 MEDIUM 6.5 CVE-2021-36305 Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on… Emc Powerscale Onefs Mitigation only Fix from $1,6002021-11-12 CRITICAL 9.8 CVE-2021-36298 Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could pot… Isilon Insightiq Firmware 4.1.4+ Fix from $2,3002021-10-01 MEDIUM 6.5 CVE-2021-36309 Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with… Enterprise Sonic Os after 3.3.0 Fix from $1,6002021-10-01 HIGH 7.8 CVE-2021-36297 SupportAssist Client version 3.8 and 3.9 contains an Untrusted search path vulnerability that allows attackers to load an arbitrary .dll file via .dl… Supportassist For Home Pcs 3.9.0+ Fix from $1,9502021-09-28 HIGH 7.1 CVE-2021-36286 Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be … Supportassist Client Consumer after 3.9.13.0 Fix from $1,9502021-09-28 MEDIUM 6.7 CVE-2021-36283 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Chengming 3990 Firmware 1.1.0 / 1.3.1+ Fix from $1,6002021-09-28 HIGH 8.8 CVE-2021-36281 Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment vulnerability. A low privileged authenticated user can po… Emc Powerscale Onefs after 9.2.1 Fix from $1,9502021-08-16 HIGH 7.8 CVE-2021-36279 Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a u… Emc Powerscale Onefs after 9.2.2.0 Fix from $1,9502021-08-16 MEDIUM 6.7 CVE-2021-21595 Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command. This vulnerability c… Emc Powerscale Onefs 9.2.0+ Fix from $1,6002021-08-16 MEDIUM 6.7 CVE-2021-21599 Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability. This may allow a user with ISI_PRIV_LOGIN_SSH or IS… Emc Powerscale Onefs after 9.2.1 Fix from $1,6002021-08-16 MEDIUM 6.5 CVE-2021-21592 Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit t… Emc Powerscale Onefs after 9.2.0 Fix from $1,6002021-08-16 MEDIUM 5.5 CVE-2021-36278 Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability in log files. A local malicious… Emc Powerscale Onefs after 9.1.0 Fix from $1,6002021-08-16 MEDIUM 5.5 CVE-2021-36280 Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a u… Emc Powerscale Onefs after 9.2.1 Fix from $1,6002021-08-16 MEDIUM 5.3 CVE-2021-21594 Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability. It can lead to potenti… Emc Powerscale Onefs after 9.1.0 Fix from $1,6002021-08-16 HIGH 7.8 CVE-2021-21567 Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISI_PRIV_LOGIN_SSH and… Powerscale Onefs Patch available Fix from $1,9502021-08-10 HIGH 7.8 CVE-2021-21601 Dell EMC Data Protection Search, 19.4 and prior, and IDPA, 2.6.1 and prior, contain an Information Exposure in Log File Vulnerability in CIS. A local… Emc Data Protection Search 2.7 / 19.5+ Fix from $1,9502021-08-10 MEDIUM 6.5 CVE-2021-21600 Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exp… Emc Networker after 19.4.0.0 Fix from $1,6002021-08-10 HIGH 7.8 CVE-2021-36276 Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) contains an insufficient access control vulnerability which may lead to escalation of privileges, d… Dbutildrv2.sys Firmware Patch available Fix from $1,9502021-08-09 HIGH 7.8 CVE-2021-36277 Dell Command | Update, Dell Update, and Alienware Update versions before 4.3 contains an Improper Verification of Cryptographic Signature Vulnerabili… Alienware Command Center Application 4.3.0 / 5.4.35.0+ Fix from $1,9502021-08-09 CRITICAL 9.8 CVE-2021-21564 Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentiall… Openmanage Enterprise 3.6.1+ Fix from $2,3002021-08-09 HIGH 8.8 CVE-2021-21596 Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a remote code … Openmanage Enterprise after 3.6.1 Fix from $1,9502021-08-09 HIGH 7.2 CVE-2021-21585 Dell OpenManage Enterprise versions prior to 3.6.1 contain an OS command injection vulnerability in RACADM and IPMI tools. A remote authenticated mal… Openmanage Enterprise 3.6.1+ Fix from $1,9502021-08-09 MEDIUM 6.5 CVE-2021-21584 Dell OpenManage Enterprise version 3.5 and OpenManage Enterprise-Modular version 1.30.00 contain an information disclosure vulnerability. An authenti… Openmanage Enterprise Patch available Fix from $1,6002021-08-09 MEDIUM 6.1 CVE-2021-21579 Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability… Emc Idrac9 Firmware 4.40.40.00+ Fix from $1,6002021-08-03 MEDIUM 6.1 CVE-2021-21581 Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerabi… Emc Idrac9 Firmware 5.00.00.00+ Fix from $1,6002021-08-03