Dell CVEs
1,887 CVEs and advisories name Dell as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-0160Dell Client Platform contains an incorrect authorization vulnerability.
- CVE-2024-37130Dell OpenManage Server Administrator, versions 11.0.1.0 and prior, contains a Local Privilege Escalation vulnerability via XSL Hijacking.
- CVE-2023-32475Dell BIOS contains a missing support for integrity check vulnerability.
- CVE-2024-29170Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability.
- CVE-2024-28974Dell Data Protection Advisor, version(s) 19.9, contain(s) an Inadequate Encryption Strength vulnerability.
- CVE-2020-35165Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Observable Tim
- CVE-2024-22429Dell BIOS contains an Improper Input Validation vulnerability.
- CVE-2024-25969Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an allocation of resources without limits or throttling vulnerability.
- CVE-2024-25965Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability.
- CVE-2024-25966Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of unexpected data type vulnerability.
- CVE-2024-25970Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an improper input validation vulnerability.
- CVE-2024-25967Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an execution with unnecessary privileges vulnerability.
- CVE-2024-25968Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains a use of a broken or risky cryptographic algorithm vulnerability.
- CVE-2024-22460Dell PowerProtect DM5500 version 5.15.0.0 and prior contains an insecure deserialization Vulnerability.
- CVE-2024-24908Dell PowerProtect DM5500 version 5.15.0.0 and prior contain an Arbitrary File Delete via Path Traversal vulnerability.
- CVE-2024-28971Dell Update Manager Plugin, versions 1.4.0 through 1.5.0, contains a Plain-text Password Storage Vulnerability in Log file.
- CVE-2024-28979Dell OpenManage Enterprise, versions 4.1.0 and older, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site S
- CVE-2024-28978Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability.
- CVE-2024-3411Insufficient Randomness When Validating an IPMI Authenticated Session
- CVE-2024-28961Dell OpenManage Enterprise, versions 4.0.0 and 4.0.1, contains a sensitive information disclosure vulnerability.
- CVE-2024-28977Dell Repository Manager, versions 3.4.2 through 3.4.4,contains a Path Traversal vulnerability in logger module.
- CVE-2024-28976Dell Repository Manager, versions prior to 3.4.5, contains a Path Traversal vulnerability in API module.
- CVE-2024-28963Telemetry Dashboard v1.0.0.7 for Dell ThinOS 2402 contains a sensitive information disclosure vulnerability.
- CVE-2024-0157Dell Storage Resource Manager, 4.9.0.0 and below, contain(s) a Session Fixation Vulnerability in SRM Windows Host Agent.
- CVE-2024-22448Dell BIOS contains an Out-of-Bounds Write vulnerability.
- CVE-2024-22450Dell Alienware Command Center, versions prior to 6.2.7.0, contain an uncontrolled search path element vulnerability.
- CVE-2024-0159Dell Alienware Command Center, versions 5.5.52.0 and prior, contain improper access control vulnerability, leading to Denial of Service on l
- CVE-2024-0172Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability.
- CVE-2024-25944Dell OpenManage Enterprise, v4.0 and prior, contain(s) a path traversal vulnerability.
- CVE-2024-25955Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability.