Dell kayıtları
dell üreticisine ait 1.792 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 3 · %0,2
- Silahlaştırılmış
- 5 · %0,3
- Pre-auth RCE
- 62
- Düzeltme kaydı olan
- %38,1
- Yayından KEV’e ortanca
- 331 gün
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')148
- CWE-20 Improper Input Validation113
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')67
- CWE-284 Improper Access Control67
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')51
- CWE-532 Insertion of Sensitive Information into Log File47
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
1.792 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
85Hemen | CVE-2021-21551Silahlaştırılmış | Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of servidell · dbutil · CWE-782 | Yüksek7,8 | KEV | %79,2 | 4 May 2021 |
74Bu hafta | CVE-2026-22769Silahlaştırılmış | Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.dell · recoverpoint for virtual machines · CWE-798 | Kritik10,0 | KEV | %13,3 | 17 Şub 2026 |
66Bu hafta | CVE-2018-1207Kavram kanıtı | Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code.dell · emc idrac7 · CWE-94 | Kritik9,8 | — | %90,1 | 23 Mar 2018 |
58Planlayın | CVE-2025-36604Kavram kanıtı | Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injectiondell · unity operating environment · CWE-78 | Kritik9,8 | — | %63,8 | 4 Ağu 2025 |
57Planlayın | CVE-2022-24422İstismar yok | Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability.dell · idrac9 · CWE-287 | Kritik9,8 | — | %58,5 | 26 May 2022 |
57Planlayın | CVE-2020-11899Silahlaştırılmış | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.treck · tcp\/ip · CWE-125 | Orta5,4 | KEV | %18,6 | 17 Haz 2020 |
54Planlayın | CVE-2018-1217Kavram kanıtı | Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1dell · emc avamar · CWE-862 | Kritik9,8 | — | %50,9 | 9 Nis 2018 |
51Planlayın | CVE-2009-0695Silahlaştırılmış | hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain managemedell · wyse device manager · CWE-287 | Yüksek7,5 | — | %68,9 | 19 Haz 2012 |
50Planlayın | CVE-2020-5377Kavram kanıtı | Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.dell · emc openmanage server administrator · CWE-22 | Kritik9,1 | — | %48,3 | 28 Tem 2020 |
46Planlayın | CVE-2016-9682Kavram kanıtı | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web addell · sonicwall secure remote access server · CWE-77 | Kritik9,8 | — | %23,3 | 22 Şub 2017 |
45Planlayın | CVE-2018-1216İstismar yok | A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enabdell · emc solutions enabler virtual appliance · CWE-798 | Kritik9,8 | — | %21,3 | 8 Mar 2018 |
43Planlayın | CVE-2017-8011İstismar yok | EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNXdell · emc m\&r · CWE-798 | Kritik9,8 | — | %14,0 | 17 Tem 2017 |
42Planlayın | CVE-2021-36300İstismar yok | iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability.dell · emc idrac9 firmware · CWE-89 | Yüksek8,2 | — | %33,3 | 23 Kas 2021 |
42Planlayın | CVE-2016-9683Kavram kanıtı | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web adminidell · sonicwall secure remote access server · CWE-77 | Kritik9,8 | — | %11,6 | 22 Şub 2017 |
42Planlayın | CVE-2018-11066İstismar yok | Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerabilitydell · emc avamar | Kritik9,8 | — | %9,9 | 26 Kas 2018 |
42Planlayın | CVE-2020-29495İstismar yok | DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer.dell · emc avamar server · CWE-22 | Kritik10,0 | — | %6,2 | 14 Oca 2021 |
42Planlayın | CVE-2015-4067İstismar yok | Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted tedell · netvault backup · CWE-189 | Kritik10,0 | — | %5,9 | 29 May 2015 |
42Planlayın | CVE-2004-2359Kavram kanıtı | Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray appdell · truemobile 1300 wlan mini-pci card util trayapplet | Kritik10,0 | — | %5,6 | 31 Ara 2004 |
41Planlayın | CVE-2021-36299İstismar yok | Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability.dell · emc idrac9 firmware · CWE-89 | Yüksek8,1 | — | %29,6 | 23 Kas 2021 |
41Planlayın | CVE-2009-1120İstismar yok | EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability.dell · emc replistor | Kritik9,8 | — | %7,4 | 15 Oca 2020 |
41Planlayın | CVE-2016-9684Kavram kanıtı | The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web adminidell · sonicwall secure remote access server · CWE-77 | Kritik9,8 | — | %7,1 | 22 Şub 2017 |
41Planlayın | CVE-2021-21513İstismar yok | Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configdell · openmanage server administrator · CWE-287 | Kritik9,8 | — | %5,9 | 2 Mar 2021 |
41Planlayın | CVE-2017-8023İstismar yok | EMC Networker Remote Code Execution Vulnerabilitydell · emc networker · CWE-287 | Kritik9,8 | — | %5,9 | 1 Nis 2019 |
41Planlayın | CVE-2019-18580İstismar yok | Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability.dell · emc storage monitoring and reporting · CWE-502 | Kritik10,0 | — | %4,9 | 26 Kas 2019 |
41Planlayın | CVE-2013-3594İstismar yok | The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of sedell · powerconnect 3348 · CWE-20 | Kritik10,0 | — | %3,9 | 20 Oca 2014 |
- CVE-2021-2155185Hemen
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of servi
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %79dell · dbutil4 May 2021
- CVE-2026-2276974Bu hafta
Dell RecoverPoint for Virtual Machines, versions prior to 6.0.3.1 HF1, contain a hardcoded credential vulnerability.
KritikCVSS 10,0KEVSilahlaştırılmışEPSS %13dell · recoverpoint for virtual machines17 Şub 2026
- CVE-2018-120766Bu hafta
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code.
KritikCVSS 9,8Kavram kanıtıEPSS %90dell · emc idrac723 Mar 2018
- CVE-2025-3660458Planlayın
Dell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection
KritikCVSS 9,8Kavram kanıtıEPSS %64dell · unity operating environment4 Ağu 2025
- CVE-2022-2442257Planlayın
Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability.
KritikCVSS 9,8İstismar yokEPSS %59dell · idrac926 May 2022
- CVE-2020-1189957Planlayın
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %19treck · tcp\/ip17 Haz 2020
- CVE-2018-121754Planlayın
Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1
KritikCVSS 9,8Kavram kanıtıEPSS %51dell · emc avamar9 Nis 2018
- CVE-2009-069551Planlayın
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain manageme
YüksekCVSS 7,5SilahlaştırılmışEPSS %69dell · wyse device manager19 Haz 2012
- CVE-2020-537750Planlayın
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.
KritikCVSS 9,1Kavram kanıtıEPSS %48dell · emc openmanage server administrator28 Tem 2020
- CVE-2016-968246Planlayın
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to two Remote Command Injection vulnerabilities in its web ad
KritikCVSS 9,8Kavram kanıtıEPSS %23dell · sonicwall secure remote access server22 Şub 2017
- CVE-2018-121645Planlayın
A hard-coded password vulnerability was discovered in vApp Manager which is embedded in Dell EMC Unisphere for VMAX, Dell EMC Solutions Enab
KritikCVSS 9,8İstismar yokEPSS %21dell · emc solutions enabler virtual appliance8 Mar 2018
- CVE-2017-801143Planlayın
EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX
KritikCVSS 9,8İstismar yokEPSS %14dell · emc m\&r17 Tem 2017
- CVE-2021-3630042Planlayın
iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability.
YüksekCVSS 8,2İstismar yokEPSS %33dell · emc idrac9 firmware23 Kas 2021
- CVE-2016-968342Planlayın
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini
KritikCVSS 9,8Kavram kanıtıEPSS %12dell · sonicwall secure remote access server22 Şub 2017
- CVE-2018-1106642Planlayın
Dell EMC Avamar and Integrated Data Protection Appliance Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %10dell · emc avamar26 Kas 2018
- CVE-2020-2949542Planlayın
DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer.
KritikCVSS 10,0İstismar yokEPSS %6dell · emc avamar server14 Oca 2021
- CVE-2015-406742Planlayın
Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted te
KritikCVSS 10,0İstismar yokEPSS %6dell · netvault backup29 May 2015
- CVE-2004-235942Planlayın
Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray app
KritikCVSS 10,0Kavram kanıtıEPSS %6dell · truemobile 1300 wlan mini-pci card util trayapplet31 Ara 2004
- CVE-2021-3629941Planlayın
Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability.
YüksekCVSS 8,1İstismar yokEPSS %30dell · emc idrac9 firmware23 Kas 2021
- CVE-2009-112041Planlayın
EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability.
KritikCVSS 9,8İstismar yokEPSS %7dell · emc replistor15 Oca 2020
- CVE-2016-968441Planlayın
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Command Injection vulnerability in its web admini
KritikCVSS 9,8Kavram kanıtıEPSS %7dell · sonicwall secure remote access server22 Şub 2017
- CVE-2021-2151341Planlayın
Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled config
KritikCVSS 9,8İstismar yokEPSS %6dell · openmanage server administrator2 Mar 2021
- CVE-2017-802341Planlayın
EMC Networker Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %6dell · emc networker1 Nis 2019
- CVE-2019-1858041Planlayın
Dell EMC Storage Monitoring and Reporting version 4.3.1 contains a Java RMI Deserialization of Untrusted Data vulnerability.
KritikCVSS 10,0İstismar yokEPSS %5dell · emc storage monitoring and reporting26 Kas 2019
- CVE-2013-359441Planlayın
The SSH service on Dell PowerConnect 3348 1.2.1.3, 3524p 2.0.0.48, and 5324 2.0.1.4 switches allows remote attackers to cause a denial of se
KritikCVSS 10,0İstismar yokEPSS %4dell · powerconnect 334820 Oca 2014