Filtered by vendor Dell
Subscribe
Total
1882 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-40714 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 7.2 HIGH |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-44276 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 6.0 MEDIUM |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure. | |||||
| CVE-2026-49499 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 8.8 HIGH |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-40712 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 9.1 CRITICAL |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-46737 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 6.7 MEDIUM |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution. | |||||
| CVE-2026-46738 | 1 Dell | 1 Powerprotect Data Manager | 2026-10-24 | N/A | 9.1 CRITICAL |
| Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-59912 | 1 Dell | 1 Display And Peripheral Manager | 2026-10-23 | N/A | 7.8 HIGH |
| Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges and arbitrary code execution. | |||||
| CVE-2026-40717 | 1 Dell | 49 Aw2526hl, Aw2725dm, Aw2726dl and 46 more | 2026-10-23 | N/A | 6.6 MEDIUM |
| Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges. | |||||
| CVE-2026-59913 | 1 Dell | 1 Display And Peripheral Manager | 2026-10-23 | N/A | 7.8 HIGH |
| Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authentication for Critical Function vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-46731 | 1 Dell | 1 Display And Peripheral Manager | 2026-10-23 | N/A | 7.8 HIGH |
| Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges and arbitrary code execution. | |||||
| CVE-2026-61411 | 1 Dell | 1 Container Storage Modules | 2026-10-20 | N/A | 7.7 HIGH |
| Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. | |||||
| CVE-2026-63689 | 1 Dell | 1 Container Storage Modules | 2026-10-20 | N/A | 6.5 MEDIUM |
| Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. | |||||
| CVE-2026-76105 | 1 Dell | 1 Container Storage Modules | 2026-10-20 | N/A | 7.7 HIGH |
| Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering. | |||||
| CVE-2026-103778 | 1 Dell | 1 Command\|configure | 2026-10-20 | N/A | 6.2 MEDIUM |
| Dell Command | Configure (DCC), versions prior to 5.2.3.35 contain a Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. | |||||
| CVE-2026-63690 | 1 Dell | 1 Container Storage Modules | 2026-10-20 | N/A | 5.4 MEDIUM |
| Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure. | |||||
| CVE-2026-63691 | 1 Dell | 1 Container Storage Modules | 2026-10-20 | N/A | 6.1 MEDIUM |
| Dell Container Storage Modules, versions prior to 1.18.0, contain(s) a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access. | |||||
| CVE-2026-67270 | 1 Dell | 1 Container Storage Modules | 2026-10-20 | N/A | 8.2 HIGH |
| Dell Container Storage Modules (CSM) versions prior to 1.18.0, contains an Improper Certificate Validation vulnerability in the proxy-server component. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to information exposure of storage backend administrator credentials. | |||||
| CVE-2026-67273 | 1 Dell | 1 Container Storage Modules | 2026-10-20 | N/A | 9.6 CRITICAL |
| Dell Container Storage Modules, versions prior to 1.18.0, contain(s) an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges. | |||||
| CVE-2026-70411 | 1 Dell | 1 Container Storage Modules | 2026-10-20 | N/A | 7.1 HIGH |
| Dell Container Storage Modules (CSM), versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service (TenantService). An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to unauthorized creation of tenant entities, cross-tenant role injection, and modification of storage access control flags. | |||||
| CVE-2025-46365 | 1 Dell | 1 Cloudlink | 2026-10-18 | N/A | 5.3 MEDIUM |
| Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink. | |||||