Vulnerabilities > Dell

DATE CVE VULNERABILITY TITLE RISK
2022-10-11 CVE-2022-32492 Improper Input Validation vulnerability in Dell Bios 2.21.0
Dell BIOS contains an improper input validation vulnerability.
local
low complexity
dell CWE-20
8.8
2022-10-11 CVE-2022-34426 Path Traversal vulnerability in Dell Container Storage Modules 1.3.0
Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection.
network
low complexity
dell CWE-22
8.8
2022-10-11 CVE-2022-34427 OS Command Injection vulnerability in Dell Container Storage Modules 1.3.0
Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries.
network
low complexity
dell CWE-78
8.8
2022-10-11 CVE-2022-34430 XML Entity Expansion vulnerability in Dell Hybrid Client
Dell Hybrid Client below 1.8 version contains a Zip Bomb Vulnerability in UI.
network
low complexity
dell CWE-776
7.5
2022-10-11 CVE-2022-34431 Unspecified vulnerability in Dell Hybrid Client
Dell Hybrid Client below 1.8 version contains a guest user profile corruption vulnerability.
network
low complexity
dell
6.5
2022-10-11 CVE-2022-34432 Unspecified vulnerability in Dell Hybrid Client
Dell Hybrid Client below 1.8 version contains a gedit vulnerability.
network
low complexity
dell
8.2
2022-10-11 CVE-2022-34434 Unspecified vulnerability in Dell Cloud Mobility for Dell EMC Storage 1.3.0
Cloud Mobility for Dell Storage versions 1.3.0 and earlier contains an Improper Access Control vulnerability within the Postgres database.
local
low complexity
dell
6.7
2022-10-10 CVE-2022-34402 Unspecified vulnerability in Dell Wyse Thinos
Dell Wyse ThinOS 2205 contains a Regular Expression Denial of Service Vulnerability in UI.
network
low complexity
dell
4.9
2022-10-10 CVE-2022-34425 Use of Hard-coded Credentials vulnerability in Dell Enterprise Sonic Distribution 4.0.0/4.0.1
Dell Enterprise SONiC OS, 4.0.0, 4.0.1, contain a cryptographic key vulnerability in SSH.
network
low complexity
dell CWE-798
7.5
2022-09-30 CVE-2022-34428 Unspecified vulnerability in Dell Hybrid Client
Dell Hybrid Client prior to version 1.8 contains a Regular Expression Denial of Service Vulnerability in the UI.
network
low complexity
dell
2.7