VYPR
← Dell

Vendor CVEs

Dell

All CVEs

1,717 total · sorted by risk
  • CVE-2009-0695Jun 19, 2012
    Wyse
    Device Manager
    risk 0.09cvss —epss 0.69

    hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers a power-off action.

  • CVE-2014-8272Dec 19, 2014
    Dell
    Idrac6 Monolithic
    risk 0.05cvss —epss 0.21

    The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.

  • CVE-2014-8420Nov 25, 2014
    SonicWall
    Analyzer
    risk 0.05cvss —epss 0.24

    The ViewPoint web application in Dell SonicWALL Global Management System (GMS) before 7.2 SP2, SonicWALL Analyzer before 7.2 SP2, and SonicWALL UMA before 7.2 SP2 allows remote authenticated users to execute arbitrary code via unspecified vectors.

  • CVE-2015-5696Aug 14, 2015
    Dell
    Netvault Backup
    risk 0.04cvss —epss 0.08

    Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request.

  • CVE-2009-0693Jun 19, 2012
    Wyse
    Device Manager
    risk 0.04cvss —epss 0.13

    Multiple buffer overflows in Wyse Device Manager (WDM) 4.7.x allow remote attackers to execute arbitrary code via (1) the User-Agent HTTP header to hserver.dll or (2) unspecified input to hagent.exe.

  • CVE-2004-0331Nov 23, 2004
    Dell
    Openmanage
    risk 0.04cvss —epss 0.16

    Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable.

  • CVE-2015-2248May 1, 2015
    SonicWall
    Remote Access Firmware
    risk 0.03cvss —epss 0.04

    Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) products with firmware before 7.5.1.0-38sv and 8.x before 8.0.0.1-16sv allows remote attackers to hijack the authentication of users for requests that create bookmarks…

  • CVE-2013-3304Oct 30, 2014
    Dell
    EqualLogic PS4000
    risk 0.03cvss —epss 0.04

    Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI.

  • CVE-2014-2879Apr 17, 2014
    SonicWall
    Email Security
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in Dell SonicWALL Email Security 7.4.5 and earlier allow remote authenticated administrators to inject arbitrary web script or HTML via (1) the uploadPatch parameter to the System/Advanced page (settings_advanced.html) or (2)…

  • CVE-2014-1671Jan 26, 2014
    Dell
    KACE K1000
    risk 0.03cvss —epss 0.02

    Multiple SQL injection vulnerabilities in Dell KACE K1000 5.4.76847 and possibly earlier allow remote attackers or remote authenticated users to execute arbitrary SQL commands via the macAddress element in a (1) getUploadPath or (2) getKBot SOAP request to…

  • CVE-2013-6246Oct 24, 2013
    Dell
    Quest One Password Manager
    risk 0.03cvss —epss 0.06

    The Dell Quest One Password Manager, possibly 5.0, allows remote attackers to bypass CAPTCHA protections and obtain sensitive information (user's full name) by sending a login request with a valid domain and username but without the CaptchaType, UseCaptchaEveryTime, and…

  • CVE-2012-6272Jan 25, 2013
    Dell
    Openmanage Server Administrator
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in Dell OpenManage Server Administrator 6.5.0.1, 7.0.0.1, and 7.1.0.1 allow remote attackers to inject arbitrary web script or HTML via the topic parameter to html/index_main.htm in (1) help/sm/en/Output/wwhelp/wwhimpl/js/, (2)…

  • CVE-2011-5169Sep 15, 2012
    SonicWall
    ViewPoint
    risk 0.03cvss —epss 0.01

    SQL injection vulnerability in sgms/reports/scheduledreports/configure/scheduleProps.jsp in SonicWall ViewPoint 6.0 SP2 allows remote attackers to execute arbitrary SQL commands via the scheduleID parameter.

  • CVE-2004-2359Dec 31, 2004
    Dell
    Truemobile 1300 Wlan Mini Pci Card Util Trayapplet
    risk 0.03cvss —epss 0.06

    Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality.

  • CVE-2015-1605Feb 24, 2015
    Dell
    Asset Manager
    risk 0.01cvss —epss 0.18

    Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attackers to execute arbitrary SQL commands via unspecified vectors to (1) GetClientPackage.aspx or (2) GetProcessedPackage.aspx.

  • CVE-2004-0112Nov 23, 2004
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.10

    The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…

  • CVE-2004-0081Nov 23, 2004
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.07

    OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

  • CVE-2026-49499HigJul 22, 2026
    Dell
    Powerprotect Data Manager
    risk 0.00cvss 8.8epss 0.00

    Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

  • CVE-2026-46738CriJul 22, 2026
    Dell
    Powerprotect Data Manager
    risk 0.00cvss 9.1epss 0.00

    Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

  • CVE-2026-46737MedJul 22, 2026
    Dell
    Powerprotect Data Manager
    risk 0.00cvss 6.7epss 0.00

    Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.

  • CVE-2026-44276MedJul 22, 2026
    Dell
    Powerprotect Data Manager
    risk 0.00cvss 6.0epss 0.00

    Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the REST API. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information…

  • CVE-2026-40714HigJul 22, 2026
    Dell
    Powerprotect Data Manager
    risk 0.00cvss 7.2epss 0.00

    Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

  • CVE-2026-40712CriJul 22, 2026
    Dell
    Powerprotect Data Manager
    risk 0.00cvss 9.1epss 0.00

    Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Improper Input Validation vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

  • CVE-2026-56687HigJul 15, 2026
    Dell
    ThinOS
    risk 0.00cvss 7.8epss 0.00

    Dell ThinOS 10, versions prior to 2605_10.2100, contain an Obsolete Feature in UI vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.

  • CVE-2026-56087MedJul 15, 2026
    Dell
    ThinOS
    risk 0.00cvss 6.1epss 0.00

    Dell ThinOS 10, versions prior to 2605_10.2100 contain a Protection Mechanism Failure vulnerability. An attacker with physical access could potentially exploit this vulnerability, leading to unauthorized access to encrypted data.

  • CVE-2026-40633HigJul 15, 2026
    Dell
    Powerscale Onefs
    risk 0.00cvss 7.8epss 0.00

    Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to…

  • CVE-2026-49501MedJul 15, 2026
    Dell
    Powerscale Onefs
    risk 0.00cvss 6.7epss 0.00

    Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 contains an Improper Privilege Management vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

  • CVE-2026-54470MedJul 10, 2026
    Dell
    Unisphere For Powermax
    risk 0.00cvss 5.3epss 0.00

    Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

  • CVE-2026-54469HigJul 10, 2026
    Dell
    Unisphere For Powermax
    risk 0.00cvss 8.8epss 0.00

    Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to arbitrary command execution with root privileges.

  • CVE-2026-56690HigJul 10, 2026
    Dell
    Powerflex Manager
    risk 0.00cvss 8.5epss 0.00

    Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information…

  • CVE-2026-56689HigJul 10, 2026
    Dell
    Powerflex Manager
    risk 0.00cvss 7.7epss 0.00

    Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information…

  • CVE-2026-56688CriJul 10, 2026
    Dell
    Powerflex Manager
    risk 0.00cvss 9.1epss 0.01

    Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability during OS…

  • CVE-2026-54468MedJul 10, 2026
    Dell
    Unisphere For Powermax
    risk 0.00cvss 6.5epss 0.00

    Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to read arbitrary files.

  • CVE-2026-56086HigJul 8, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 8.8epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Incorrect Authorization vulnerability. A low privileged…

  • CVE-2026-53482HigJul 8, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 7.5epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Integer overflow or wraparound vulnerability. An…

  • CVE-2026-53480LowJul 8, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 2.7epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted…

  • CVE-2026-41122HigJul 8, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 7.1epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain a stored cross-site scripting vulnerability. An…

  • CVE-2026-53479HigJul 7, 2026
    Dell
    Data Domain Operating System
    risk 0.00cvss 7.2epss 0.01

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used…

  • CVE-2026-53483CriJul 7, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 9.8epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 an improper authentication vulnerability. An unauthenticated…

  • CVE-2026-53481CriJul 7, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 9.8epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper limitation of a pathname to a restricted…

  • CVE-2026-53478HigJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 7.2epss 0.01

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an…

  • CVE-2026-49815HigJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 7.2epss 0.01

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special Elements used in an…

  • CVE-2026-49814HigJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 7.2epss 0.01

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an Improper Neutralization of Special Elements used in an…

  • CVE-2026-49813MedJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 6.7epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an…

  • CVE-2026-46466LowJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 2.7epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of less trusted source vulnerability. A high…

  • CVE-2026-46465MedJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 5.5epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of externally-controlled format string…

  • CVE-2026-46464MedJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 4.9epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper link resolution before file access ('Link…

  • CVE-2026-46463MedJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 6.5epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an integer overflow or wraparound vulnerability. An…

  • CVE-2026-56085LowJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 3.3epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.7, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an use of uninitialized resource vulnerability. A low…

  • CVE-2026-54483MedJul 3, 2026
    Dell
    Powerprotect Data Domain
    risk 0.00cvss 6.7epss 0.00

    Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an improper neutralization of special elements used in an…

Page 33 of 35