Filtered by vendor Dell
Subscribe
Total
1595 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-35068 | 1 Dell | 1 Powerflex Manager | 2026-06-25 | N/A | 3.5 LOW |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to information disclosure. | |||||
| CVE-2026-35067 | 1 Dell | 1 Powerflex Manager | 2026-06-25 | N/A | 5.7 MEDIUM |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access. | |||||
| CVE-2026-35066 | 1 Dell | 1 Powerflex Manager | 2026-06-25 | N/A | 7.1 HIGH |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Access Control vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to denial of service. | |||||
| CVE-2026-35065 | 1 Dell | 1 Powerflex Manager | 2026-06-25 | N/A | 8.8 HIGH |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access. | |||||
| CVE-2026-32804 | 1 Dell | 1 Powerflex Manager | 2026-06-25 | N/A | 8.1 HIGH |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Authentication vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access. | |||||
| CVE-2026-22283 | 1 Dell | 1 Powerflex Manager | 2026-06-25 | N/A | 7.5 HIGH |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. | |||||
| CVE-2026-40641 | 1 Dell | 1 Powerflex Manager | 2026-06-25 | N/A | 4.8 MEDIUM |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Use of a Broken or Risky Cryptographic Algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information tampering. | |||||
| CVE-2024-22451 | 1 Dell | 1 Peripheral Manager | 2026-06-23 | N/A | 6.7 MEDIUM |
| Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious executable, leading to arbitrary code execution. | |||||
| CVE-2026-32652 | 1 Dell | 1 Aiops Collector | 2026-06-23 | N/A | 7.8 HIGH |
| Dell AIOps Collector versions prior to 1.18.3 contain a "Use of Default Credentials" vulnerability. A low privileged attacker with console access could potentially exploit this vulnerability to gain Filesystem access. This vulnerability only affects fresh installations of Collector versions earlier than 1.18.3. Systems that have been upgraded (either manually or automatically) to version 1.18.3 or later are not impacted, even if they were originally installed on an earlier version. | |||||
| CVE-2024-47477 | 1 Dell | 1 Powerflex Manager | 2026-06-22 | N/A | 6.5 MEDIUM |
| Dell PowerFlex Manager, versions prior to 4.5.1.1, contain an improper certificate validation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability leading to man-in-the-middle attack in tandem with DNS cache poisoning. | |||||
| CVE-2024-22447 | 1 Dell | 1 Peripheral Manager | 2026-06-17 | N/A | 6.7 MEDIUM |
| Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability. An attacker could potentially exploit this vulnerability through preloading malicious dll., leading to arbitrary code execution. | |||||
| CVE-2026-40638 | 1 Dell | 1 Insightiq | 2026-06-17 | N/A | 6.7 MEDIUM |
| Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. | |||||
| CVE-2026-40636 | 1 Dell | 2 Elastic Cloud Storage, Objectscale | 2026-06-17 | N/A | 9.8 CRITICAL |
| Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker. | |||||
| CVE-2026-35157 | 1 Dell | 2 Elastic Cloud Storage, Objectscale | 2026-06-17 | N/A | 5.8 MEDIUM |
| Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. | |||||
| CVE-2026-35155 | 1 Dell | 2 Idrac10, Idrac10 Firmware | 2026-06-17 | N/A | 7.1 HIGH |
| Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access. | |||||
| CVE-2026-35071 | 1 Dell | 1 Insightiq | 2026-06-17 | N/A | 8.2 HIGH |
| Dell PowerScale InsightIQ, versions 6.0.0 through 6.2.0, contains an improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. | |||||
| CVE-2026-32803 | 1 Dell | 1 Powerscale Onefs | 2026-06-17 | N/A | 3.3 LOW |
| Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 contains an Insufficient Logging vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering. | |||||
| CVE-2026-32658 | 1 Dell | 1 Automation Platform | 2026-06-17 | N/A | 8.0 HIGH |
| Dell Automation Platform versions prior to 2.0.0.0, contains a missing authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-32655 | 1 Dell | 1 Alienware Command Center | 2026-06-17 | N/A | 5.3 MEDIUM |
| Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. | |||||
| CVE-2026-28265 | 1 Dell | 13 Powerstore 1000t, Powerstore 1200t, Powerstore 3000t and 10 more | 2026-06-17 | N/A | 4.4 MEDIUM |
| PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files. | |||||