Dell CVEs
1,887 CVEs and advisories name Dell as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-25946Dell vApp Manager, versions prior to 9.2.4.9 contain a Command Injection Vulnerability.
- CVE-2024-25971Dell PowerProtect Data Manager, version 19.15, contains an XML External Entity Injection vulnerability.
- CVE-2024-25954Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability.
- CVE-2024-25963Dell PowerScale OneFS, versions 8.2.2.x through 9.5.0.x contains a use of a broken cryptographic algorithm vulnerability.
- CVE-2024-25953Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability.
- CVE-2024-25952Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability.
- CVE-2024-25960Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains a cleartext transmission of sensitive information vulnerability.
- CVE-2024-25961Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an improper privilege management vulnerability.
- CVE-2024-25959Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x contains an insertion of sensitive information into log file vulnerability.
- CVE-2024-25962Dell InsightIQ, version 5.0, contains an improper access control vulnerability.
- CVE-2024-25956Dell Grab for Windows, versions 5.0.4 and below, contains an improper file permissions vulnerability.
- CVE-2024-25957Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module.
- CVE-2024-25958Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability.
- CVE-2024-25964Dell PowerScale OneFS 9.5.0.x through 9.7.0.x contain a covert timing channel vulnerability.
- CVE-2024-25942Dell PowerEdge Server BIOS contains an Improper SMM communication buffer verification vulnerability.
- CVE-2024-22453Dell PowerEdge Server BIOS contains a heap-based buffer overflow vulnerability.
- CVE-2024-0173Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability.
- CVE-2024-0154Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper parameter initialization vulnerability.
- CVE-2024-0163Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain a TOCTOU race condition vulnerability.
- CVE-2024-0162Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability.
- CVE-2024-0161Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability.
- CVE-2024-25951A command injection vulnerability exists in local RACADM.
- CVE-2024-24901Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability.
- CVE-2024-22463Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability.
- CVE-2024-22452Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability.
- CVE-2024-0155Dell Digital Delivery, versions prior to 5.2.0.0, contain a Use After Free Vulnerability.
- CVE-2024-0156Dell Digital Delivery, versions prior to 5.2.0.0, contain a Buffer Overflow Vulnerability.
- CVE-2024-24903Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords.
- CVE-2024-24904Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.
- CVE-2024-24905Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability.