Filtered by vendor Dell
Subscribe
Total
1882 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-35069 | 1 Dell | 1 Powerflex Manager | 2026-10-26 | N/A | 5.7 MEDIUM |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Script injection. | |||||
| CVE-2026-35068 | 1 Dell | 1 Powerflex Manager | 2026-10-26 | N/A | 3.5 LOW |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to information disclosure. | |||||
| CVE-2026-46461 | 1 Dell | 1 Server Hardware Manager | 2026-10-26 | N/A | 7.8 HIGH |
| Dell Server Hardware Manager, versions prior to 3.2.2, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-35072 | 1 Dell | 2 Data Domain Operating System, Powerprotect Dp Series Appliance | 2026-10-26 | N/A | 6.7 MEDIUM |
| Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6.0.0 and version 8.7.0.0, LTS2025 release versions 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 contain an improper neutralization of special elements used in an OS command ('OS command injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. | |||||
| CVE-2026-22761 | 1 Dell | 2 Data Domain Operating System, Powerprotect Dp Series Appliance | 2026-10-26 | N/A | 6.7 MEDIUM |
| Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain a command injection vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. | |||||
| CVE-2026-35065 | 1 Dell | 1 Powerflex Manager | 2026-10-26 | N/A | 8.8 HIGH |
| Dell PowerFlex Manager, version(s) prior to 5.1.0.1, contain(s) a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Code execution, Denial of service, Information disclosure, Information tampering, Remote execution, Script injection, and Unauthorized access. | |||||
| CVE-2026-24505 | 1 Dell | 2 Data Domain Operating System, Powerprotect Dp Series Appliance | 2026-10-26 | N/A | 7.2 HIGH |
| Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges. | |||||
| CVE-2026-46732 | 1 Dell | 1 Display And Peripheral Manager | 2026-10-25 | N/A | 6.7 MEDIUM |
| Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. | |||||
| CVE-2026-25908 | 1 Dell | 1 Alienware Command Center | 2026-10-25 | N/A | 6.7 MEDIUM |
| Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with Unnecessary Privileges vulnerability in the AWCC. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. | |||||
| CVE-2026-46733 | 1 Dell | 1 Display And Peripheral Manager | 2026-10-25 | N/A | 7.8 HIGH |
| Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. | |||||
| CVE-2026-46735 | 1 Dell | 1 Display And Peripheral Manager | 2026-10-25 | N/A | 7.8 HIGH |
| Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution. | |||||
| CVE-2026-44273 | 1 Dell | 1 Wyse Management Suite | 2026-10-25 | N/A | 6.0 MEDIUM |
| Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain a Use of Default Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure. | |||||
| CVE-2026-44274 | 1 Dell | 1 Wyse Management Suite | 2026-10-25 | N/A | 7.8 HIGH |
| Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Link Resolution Before File Access vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access. | |||||
| CVE-2026-44272 | 1 Dell | 1 Wyse Management Suite | 2026-10-25 | N/A | 8.8 HIGH |
| Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. | |||||
| CVE-2026-46734 | 1 Dell | 1 Display And Peripheral Manager | 2026-10-25 | N/A | 7.3 HIGH |
| Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3, contain an Improper Certificate Validation vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass. | |||||
| CVE-2026-23853 | 1 Dell | 2 Data Domain Operating System, Powerprotect Dp Series Appliance | 2026-10-25 | N/A | 8.4 HIGH |
| Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.50, contain a use of weak credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to unauthorized access to the system. | |||||
| CVE-2026-49506 | 1 Dell | 1 Wyse Management Suite | 2026-10-25 | N/A | 7.2 HIGH |
| Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution. | |||||
| CVE-2026-44271 | 1 Dell | 1 Wyse Management Suite | 2026-10-25 | N/A | 8.1 HIGH |
| Dell Wyse Management Suite (WMS), versions prior to WMS 2605, contain an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. | |||||
| CVE-2026-41120 | 1 Dell | 1 Wyse Management Suite | 2026-10-25 | N/A | 9.8 CRITICAL |
| Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote Code Execution. | |||||
| CVE-2026-26355 | 1 Dell | 1 Data Domain Operating System | 2026-10-25 | N/A | 6.5 MEDIUM |
| Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special Elements used in an OS command ('OS command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution. | |||||