Vulnerabilities > Dell > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-09-28 CVE-2021-36283 Improper Input Validation vulnerability in Dell products
Dell BIOS contains an improper input validation vulnerability.
local
low complexity
dell CWE-20
6.7
2021-09-28 CVE-2021-36284 Improper Restriction of Excessive Authentication Attempts vulnerability in Dell products
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability.
local
low complexity
dell CWE-307
4.4
2021-09-28 CVE-2021-36285 Improper Restriction of Excessive Authentication Attempts vulnerability in Dell products
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability.
local
low complexity
dell CWE-307
4.4
2021-08-16 CVE-2021-21568 Unspecified vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an insufficient logging vulnerability.
network
low complexity
dell
4.3
2021-08-16 CVE-2021-21592 Improper Handling of Exceptional Conditions vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition.
network
low complexity
dell CWE-755
6.5
2021-08-16 CVE-2021-21594 Information Exposure Through Query Strings in GET Request vulnerability in Dell EMC Powerscale Onefs 8.2.2/9.0.0.0/9.1.0
Dell PowerScale OneFS versions 8.2.2 - 9.1.0.x contain a use of get request method with sensitive query strings vulnerability.
network
low complexity
dell CWE-598
5.3
2021-08-16 CVE-2021-21595 Command Injection vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command.
local
low complexity
dell CWE-77
6.7
2021-08-16 CVE-2021-21599 OS Command Injection vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability.
local
low complexity
dell CWE-78
6.7
2021-08-16 CVE-2021-36278 Information Exposure Through Log Files vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability in log files.
local
low complexity
dell CWE-532
5.5
2021-08-16 CVE-2021-36280 Incorrect Permission Assignment for Critical Resource vulnerability in Dell EMC Powerscale Onefs
Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability.
local
low complexity
dell CWE-732
5.5