Skip to content
Noroxi

Dell records

1,792 published records for vendor dell.

Researcher profile

Entered KEV
3 · 0.2%
Weaponized
5 · 0.3%
Pre-auth RCE
62
With a fix record
38.1%
Median publish → KEV
331 days

Records by year

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

1,792 records
  • CVE-2021-21551
    85Now

    Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of servi

    HighCVSS 7.8KEVWeaponizedEPSS 79%

    dell · dbutilMay 4, 2021

  • CVE-2026-22769
    74This week

    Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.

    CriticalCVSS 10.0KEVWeaponizedEPSS 13%

    dell · recoverpoint for virtual machinesFeb 17, 2026

  • CVE-2018-1207
    66This week

    Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code.

    CriticalCVSS 9.8Proof of conceptEPSS 90%

    dell · emc idrac7Mar 23, 2018

  • CVE-2025-36604
    58Plan

    Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection

    CriticalCVSS 9.8Proof of conceptEPSS 64%

    dell · unity operating environmentAug 4, 2025

  • CVE-2022-24422
    57Plan

    Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability.

    CriticalCVSS 9.8No exploitEPSS 59%

    dell · idrac9May 26, 2022

  • CVE-2020-11899
    57Plan

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

    MediumCVSS 5.4KEVWeaponizedEPSS 19%

    treck · tcp\/ipJun 17, 2020

  • CVE-2018-1217
    54Plan

    Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1

    CriticalCVSS 9.8Proof of conceptEPSS 51%

    dell · emc avamarApr 9, 2018

  • CVE-2009-0695
    51Plan

    hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain manageme

    HighCVSS 7.5WeaponizedEPSS 69%

    dell · wyse device managerJun 19, 2012

  • CVE-2020-5377
    50Plan

    Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.

    CriticalCVSS 9.1Proof of conceptEPSS 48%

    dell · emc openmanage server administratorJul 28, 2020

  • CVE-2016-9682
    46Plan

    The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web ad

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    dell · sonicwall secure remote access serverFeb 22, 2017

  • CVE-2018-1216
    45Plan

    A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enab

    CriticalCVSS 9.8No exploitEPSS 21%

    dell · emc solutions enabler virtual applianceMar 8, 2018

  • CVE-2017-8011
    43Plan

    EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX

    CriticalCVSS 9.8No exploitEPSS 14%

    dell · emc m\&rJul 17, 2017

  • CVE-2021-36300
    42Plan

    iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability.

    HighCVSS 8.2No exploitEPSS 33%

    dell · emc idrac9 firmwareNov 23, 2021

  • CVE-2016-9683
    42Plan

    The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini

    CriticalCVSS 9.8Proof of conceptEPSS 12%

    dell · sonicwall secure remote access serverFeb 22, 2017

  • CVE-2018-11066
    42Plan

    Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 10%

    dell · emc avamarNov 26, 2018

  • CVE-2020-29495
    42Plan

    DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer.

    CriticalCVSS 10.0No exploitEPSS 6%

    dell · emc avamar serverJan 14, 2021

  • CVE-2015-4067
    42Plan

    Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted te

    CriticalCVSS 10.0No exploitEPSS 6%

    dell · netvault backupMay 29, 2015

  • CVE-2004-2359
    42Plan

    Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray app

    CriticalCVSS 10.0Proof of conceptEPSS 6%

    dell · truemobile 1300 wlan mini-pci card util trayappletDec 31, 2004

  • CVE-2021-36299
    41Plan

    Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability.

    HighCVSS 8.1No exploitEPSS 30%

    dell · emc idrac9 firmwareNov 23, 2021

  • CVE-2009-1120
    41Plan

    EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability.

    CriticalCVSS 9.8No exploitEPSS 7%

    dell · emc replistorJan 15, 2020

  • CVE-2016-9684
    41Plan

    The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini

    CriticalCVSS 9.8Proof of conceptEPSS 7%

    dell · sonicwall secure remote access serverFeb 22, 2017

  • CVE-2021-21513
    41Plan

    Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled config

    CriticalCVSS 9.8No exploitEPSS 6%

    dell · openmanage server administratorMar 2, 2021

  • CVE-2017-8023
    41Plan

    EMC Networker Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 6%

    dell · emc networkerApr 1, 2019

  • CVE-2019-18580
    41Plan

    Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability.

    CriticalCVSS 10.0No exploitEPSS 5%

    dell · emc storage monitoring and reportingNov 26, 2019

  • CVE-2013-3594
    41Plan

    The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of se

    CriticalCVSS 10.0No exploitEPSS 4%

    dell · powerconnect 3348Jan 20, 2014