Vulnerabilities > Dell > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-04-12 CVE-2016-4004 Path Traversal vulnerability in Dell Openmanage Server Administrator 8.2
Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ (dot dot backslash) in the file parameter to ViewFile.
network
low complexity
dell CWE-22
4.9
2016-04-06 CVE-2016-1346 Resource Management Errors vulnerability in multiple products
The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18) on Mobility Services Engine (MSE) 8710 devices allows remote attackers to cause a denial of service (panic and reboot) via a crafted sequence of IPv6 packets, aka Bug ID CSCuu46673.
network
high complexity
dell netgear samsung zyxel zzinc CWE-399
5.9
2016-02-08 CVE-2016-2268 Cryptographic Issues vulnerability in Dell Secureworks 2.0.6
Dell SecureWorks app before 2.1 for iOS does not validate SSL certificates, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
network
high complexity
dell CWE-310
6.8
2015-08-01 CVE-2015-2890 Unspecified vulnerability in Dell Bios
The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a BIOS_CNTL locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging console access, a similar issue to CVE-2015-3692.
local
low complexity
dell
6.0