Vulnerabilities (CVE)

Filtered by vendor Dell Subscribe
Total 1332 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-48829 1 Dell 1 Smartfabric Os10 2025-11-17 N/A 6.7 MEDIUM
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Control of Generation of Code ('Code Injection') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
CVE-2025-46427 1 Dell 1 Smartfabric Os10 2025-11-17 N/A 8.8 HIGH
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
CVE-2025-46428 1 Dell 1 Smartfabric Os10 2025-11-17 N/A 8.8 HIGH
Dell SmartFabric OS10 Software, versions prior to 10.6.1.0, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Code execution.
CVE-2025-46362 1 Dell 1 Alienware Command Center 2025-11-17 N/A 6.6 MEDIUM
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.
CVE-2025-46367 1 Dell 1 Alienware Command Center 2025-11-17 N/A 7.8 HIGH
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error Condition Without Action vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Arbitrary Code Execution.
CVE-2025-46368 1 Dell 1 Alienware Command Center 2025-11-17 N/A 6.6 MEDIUM
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
CVE-2025-46369 1 Dell 1 Alienware Command Center 2025-11-17 N/A 7.8 HIGH
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure Temporary File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Privilege Escalation.
CVE-2025-46370 1 Dell 1 Alienware Command Center 2025-11-17 N/A 3.3 LOW
Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Process Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure.
CVE-2025-43723 1 Dell 1 Powerscale Onefs 2025-11-14 N/A 5.9 MEDIUM
Dell PowerScale OneFS, versions prior to 9.10.1.3 and versions 9.11.0.0 through 9.12.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
CVE-2025-46430 1 Dell 1 Display And Peripheral Manager 2025-11-12 N/A 7.3 HIGH
Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges.
CVE-2025-36592 1 Dell 1 Policy Manager For Secure Connect Gateway 2025-11-10 N/A 5.4 MEDIUM
Dell Secure Connect Gateway (SCG) Policy Manager, version(s) 5.20. 5.22, 5.24, 5.26, 5.28, contain(s) an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
CVE-2020-11899 2 Dell, Treck 7 Wyse 5030, Wyse 5030 Firmware, Wyse 5050 All-in-one and 4 more 2025-11-07 4.8 MEDIUM 5.4 MEDIUM
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
CVE-2025-30479 1 Dell 1 Cloudlink 2025-11-07 N/A 8.4 HIGH
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection to gain control of system.
CVE-2025-46424 1 Dell 1 Cloudlink 2025-11-07 N/A 6.7 MEDIUM
Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service.
CVE-2025-46366 1 Dell 1 Cloudlink 2025-11-07 N/A 6.7 MEDIUM
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user may exploit and gain parallel privilege escalation or access to the database to obtain confidential information.
CVE-2025-46365 1 Dell 1 Cloudlink 2025-11-07 N/A 5.3 MEDIUM
Dell CloudLink, versions prior 8.1.1, contain a Command Injection vulnerability which can be exploited by an Authenticated attacker to cause Command Injection on an affected Dell CloudLink.
CVE-2025-46364 1 Dell 1 Cloudlink 2025-11-07 N/A 9.1 CRITICAL
Dell CloudLink, versions prior to 8.1.1, contain a vulnerability where a privileged user with known password can run CLI Escape Vulnerability to gain control of system.
CVE-2025-45379 1 Dell 1 Cloudlink 2025-11-07 N/A 8.4 HIGH
Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system.
CVE-2025-45378 1 Dell 1 Cloudlink 2025-11-07 N/A 9.1 CRITICAL
Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials of server, attack is possible through network with known privileged user/password.
CVE-2025-46422 1 Dell 1 Unity Operating Environment 2025-11-07 N/A 7.8 HIGH
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with root privileges.