Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-51500 State: PUBLISHED Published: 2024-11-04T23:00:31.876Z Last Updated: 2024-11-05T16:49:57.752Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: meshtastic Products: firmware Problem Types: CWE-138, CWE-159 Description: Meshtastic firmware is a device firmware for the Meshtastic project. The Meshtastic firmware does not check for packets claiming to be from the special broadcast address (0xFFFFFFFF) which could result in unexpected behavior and potential for DDoS attacks on the network. A malicious actor could craft a packet to be from that address which would result in an amplification of this one message into every node on the network sen
et to be from that address which would result in an amplification of this one message into every node on the network sending multiple messages. Such an attack could result in degraded network performance for all users as the available bandwidth is consumed. This issue has been addressed in release version 2.5.6. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/meshtastic/firmware/security/advisories/GHSA-xfmq-5j3j-vgv8
CVE ID: CVE-2024-51501 State: PUBLISHED Published: 2024-11-04T22:56:50.231Z Last Updated: 2024-11-08T15:18:51.985Z Vendors: reactiveui Products: refit Problem Types: CWE-93 Description: Refit is an automatic type-safe REST library for .NET Core, Xamarin and .NET The various header-related Refit attributes (Header, HeaderCollection and Authorize) are vulnerable to CRLF injection. The way HTTP headers are added to a request is via the `HttpHeaders.TryAddWithoutValidation` method. This method does not check for CRLF characters in the header value. This means that any headers added to a refit request are vulnerable to CRLF-injection. In general, CRLF-injection into a HTTP header (when using HTTP
dded to a refit request are vulnerable to CRLF-injection. In general, CRLF-injection into a HTTP header (when using HTTP/1.1) means that one can inject additional HTTP headers or smuggle whole HTTP requests. If an application using the Refit library passes a user-controllable value through to a header, then that application becomes vulnerable to CRLF-injection. This is not necessarily a security issue for a command line application like the one above, but if such code were present in a web application then it becomes vulnerable to request splitting (as shown in the PoC) and thus Server Side Request Forgery. Strictly speaking this is a potential vulnerability in applications using Refit and n
thus Server Side Request Forgery. Strictly speaking this is a potential vulnerability in applications using Refit and not in Refit itself. This issue has been addressed in release versions 7.2.22 and 8.0.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/reactiveui/refit/security/advisories/GHSA-3hxg-fxwm-8gf7 - https://github.com/reactiveui/refit/blob/258a771f44417c6e48e103ac921fe4786f3c2a1e/Refit/RequestBuilderImplementation.cs#L1328
CVE ID: CVE-2024-51502 State: PUBLISHED Published: 2024-11-04T22:42:29.920Z Last Updated: 2024-11-21T16:24:15.558Z Vendors: bearcove Products: loona Problem Types: CWE-755 Description: loona is an experimental, HTTP/1.1 and HTTP/2 implementation in Rust on top of io-uring. `loona-hpack` suffers from the same vulnerability as the original `hpack` as documented in issue #11. All users who try to decode untrusted input using the Decoder are vulnerable to this exploit. This issue has been addressed in release version 0.4.3. All users are advised to upgrade. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/b
orkarounds for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bearcove/loona/security/advisories/GHSA-7vm6-qwh5-9x44 - https://github.com/mlalic/hpack-rs/issues/11 - https://github.com/bearcove/loona/commit/9a4028ec6484f50a320281271a41a5040ddb1ba8
CVE ID: CVE-2024-51503 State: PUBLISHED Published: 2024-11-19T19:00:51.467Z Last Updated: 2024-11-21T04:55:15.526Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Trend Micro, Inc. Products: Trend Micro Deep Security Problem Types: CWE-78 Description: A security agent manual scan command injection vulnerability in the Trend Micro Deep Security 20 Agent could allow an attacker to escalate privileges and execute arbitrary code on an affected machine. In certain circumstances, attackers that have legitimate access to the domain may be able to remotely inject commands to other machines in the same domain. Please note: an attacker must first obtain the ability to exe
tely inject commands to other machines in the same domain. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability locally and must have domain user privileges to affect other machines. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/en-US/solution/KA-0018154 - https://www.zerodayinitiative.com/advisories/ZDI-24-1516/
CVE ID: CVE-2024-51504 State: PUBLISHED Published: 2024-11-07T09:52:03.957Z Last Updated: 2024-11-07T16:33:08.247Z Vendors: Apache Software Foundation Products: Apache ZooKeeper Problem Types: CWE-290 Description: When using IPAuthenticationProvider in ZooKeeper Admin Server there is a possibility of Authentication Bypass by Spoofing -- this only impacts IP based authentication implemented in ZooKeeper Admin Server. Default configuration of client's IP address detection in IPAuthenticationProvider, which uses HTTP request headers, is weak and allows an attacker to bypass authentication via spoofing client's IP address in request headers. Default configuration honors X-Forwarded-For HTTP head
thentication via spoofing client's IP address in request headers. Default configuration honors X-Forwarded-For HTTP header to read client's IP address. X-Forwarded-For request header is mainly used by proxy servers to identify the client and can be easily spoofed by an attacker pretending that the request comes from a different IP address. Admin Server commands, such as snapshot and restore arbitrarily can be executed on successful exploitation which could potentially lead to information leakage or service availability issues. Users are recommended to upgrade to version 3.9.3, which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - ht
.3, which fixes this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/b3qrmpkto5r6989qr61fw9y2x646kqlh
CVE ID: CVE-2024-51505 State: PUBLISHED Published: 2025-02-18T00:00:00.000Z Last Updated: 2025-02-18T17:29:53.450Z Severity: HIGH (CVSS 8 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:H/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Atos Eviden IDRA before 2.7.1. A highly trusted role (Config Admin) could leverage a race condition to escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://eviden.com - https://support.bull.com/ols/product/security/psirt/security-bulletins/potential-privilege-escalation-in-idpki-psirt-1335-tlp-clear-version-2-10-cve-2024-39327-cve-2024-39328-cve-2024-51505/view
CVE ID: CVE-2024-51506 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-29T18:40:53.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki through 27.0 allows users who have certain permissions to insert a "Create a Wiki Pages" stored XSS payload in the description. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tiki.org/Disclose-a-Vulnerability - https://github.com/r0ck3t1973/xss_payload/issues/8
CVE ID: CVE-2024-51507 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-29T18:40:43.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tiki.org/Disclose-a-Vulnerability - https://github.com/r0ck3t1973/xss_payload/issues/9
CVE ID: CVE-2024-51508 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-29T18:40:32.262Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki through 27.0 allows users who have certain permissions to insert a "Create/Edit External Wiki" stored XSS payload in the Index. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tiki.org/Disclose-a-Vulnerability - https://github.com/r0ck3t1973/xss_payload/issues/9
CVE ID: CVE-2024-51509 State: PUBLISHED Published: 2024-10-28T00:00:00 Last Updated: 2024-10-29T18:38:58.966Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tiki through 27.0 allows users who have certain permissions to insert a "Modules" (aka tiki-admin_modules.php) stored XSS payload in the Name. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.tiki.org/Disclose-a-Vulnerability - https://github.com/r0ck3t1973/xss_payload/issues/10
CVE ID: CVE-2024-51510 State: PUBLISHED Published: 2024-11-05T08:24:44.011Z Last Updated: 2024-11-05T15:37:04.355Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-787 Description: Out-of-bounds access vulnerability in the logo module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51511 State: PUBLISHED Published: 2024-11-05T08:37:05.745Z Last Updated: 2024-11-05T14:54:07.708Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-20 Description: Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51512 State: PUBLISHED Published: 2024-11-05T08:39:59.207Z Last Updated: 2024-11-05T14:53:58.713Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-20 Description: Vulnerability of parameter type not being verified in the WantAgent module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51513 State: PUBLISHED Published: 2024-11-05T08:42:57.062Z Last Updated: 2025-09-18T06:44:12.357Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-400 Description: Vulnerability of processes not being fully terminated in the VPN module Impact: Successful exploitation of this vulnerability will affect power consumption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51514 State: PUBLISHED Published: 2024-11-05T08:59:40.741Z Last Updated: 2024-11-05T14:53:41.393Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-20 Description: Vulnerability of pop-up windows belonging to no app in the VPN module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51515 State: PUBLISHED Published: 2024-11-05T09:00:52.888Z Last Updated: 2024-11-05T14:53:34.113Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-362 Description: Race condition vulnerability in the kernel network module Impact:Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51516 State: PUBLISHED Published: 2024-11-05T09:03:15.961Z Last Updated: 2025-09-18T06:36:06.740Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-862 Description: Permission control vulnerability in the ability module Impact: Successful exploitation of this vulnerability may cause features to function abnormally. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51517 State: PUBLISHED Published: 2024-11-05T09:06:04.530Z Last Updated: 2024-11-05T14:53:19.101Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-129 Description: Vulnerability of improper memory access in the phone service module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51518 State: PUBLISHED Published: 2024-11-05T09:08:46.445Z Last Updated: 2024-11-05T17:15:46.262Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-248 Description: Vulnerability of message types not being verified in the advanced messaging modul Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51519 State: PUBLISHED Published: 2024-11-05T09:09:47.049Z Last Updated: 2024-11-05T14:53:11.838Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-20 Description: Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51520 State: PUBLISHED Published: 2024-11-05T09:10:45.930Z Last Updated: 2024-11-05T15:06:31.865Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-20 Description: Vulnerability of input parameters not being verified in the HDC module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51521 State: PUBLISHED Published: 2024-11-05T09:12:16.946Z Last Updated: 2024-11-05T15:06:11.788Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-269 Description: Input parameter verification vulnerability in the background service module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51522 State: PUBLISHED Published: 2024-11-05T09:13:41.926Z Last Updated: 2024-11-05T15:05:11.844Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-199 Description: Vulnerability of improper device information processing in the device management module Impact: Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51523 State: PUBLISHED Published: 2024-11-05T09:14:43.954Z Last Updated: 2024-11-05T15:36:13.829Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-840 Description: Information management vulnerability in the Gallery module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51524 State: PUBLISHED Published: 2024-11-05T09:15:43.707Z Last Updated: 2024-11-05T14:53:03.632Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-264 Description: Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51525 State: PUBLISHED Published: 2024-11-05T09:19:14.465Z Last Updated: 2025-09-18T06:36:48.214Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-285 Description: Permission control vulnerability in the clipboard module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51526 State: PUBLISHED Published: 2024-11-05T09:23:37.762Z Last Updated: 2024-11-05T15:35:52.114Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-347 Description: Permission control vulnerability in the hidebug module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51527 State: PUBLISHED Published: 2024-11-05T09:25:27.127Z Last Updated: 2024-11-05T14:52:48.790Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-264 Description: Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51528 State: PUBLISHED Published: 2024-11-05T09:33:14.126Z Last Updated: 2024-11-05T14:52:17.319Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-532 Description: Vulnerability of improper log printing in the Super Home Screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51529 State: PUBLISHED Published: 2024-11-05T11:18:31.133Z Last Updated: 2024-11-05T14:51:53.664Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-20 Description: Data verification vulnerability in the battery module Impact: Successful exploitation of this vulnerability may affect function stability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51530 State: PUBLISHED Published: 2024-11-05T11:19:57.997Z Last Updated: 2024-11-05T14:51:43.931Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L) Vendors: Huawei Products: HarmonyOS Problem Types: CWE-20 Description: LaunchAnywhere vulnerability in the account module Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/11/
CVE ID: CVE-2024-51532 State: PUBLISHED Published: 2024-12-19T01:40:17.525Z Last Updated: 2024-12-24T00:40:48.672Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-88 Description: Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-v
nces: - https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2024-51534 State: PUBLISHED Published: 2025-02-01T04:02:24.954Z Last Updated: 2025-02-12T20:41:39.859Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerProtect DD Problem Types: CWE-29 Description: Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged could potentially exploit this vulnerability to gain unauthorized overwrite of OS files stored on the server filesystem. Exploitation could lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000279157/dsa-2025-022-se
Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000279157/dsa-2025-022-security-update-for-dell-powerprotect-dd-multiple-vulnerabilities
CVE ID: CVE-2024-51539 State: PUBLISHED Published: 2025-02-25T13:45:04.224Z Last Updated: 2025-02-25T14:13:15.695Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Secure Connect Gateway - Application, Secure Connect Gateway - Appliance Problem Types: CWE-89 Description: The Dell Secure Connect Gateway (SCG) Application and Appliance, versions prior to 5.28, contains a SQL injection vulnerability due to improper neutralization of special elements used in an SQL command. This vulnerability can only be exploited locally on the affected system. A high-privilege attacker with access to the system could potentially exploit this vulnerability, leading t
cted system. A high-privilege attacker with access to the system could potentially exploit this vulnerability, leading to the disclosure of non-sensitive information that does not include any customer data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000289550/dsa-2024-464-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerability
CVE ID: CVE-2024-51540 State: PUBLISHED Published: 2024-12-26T15:53:49.735Z Last Updated: 2024-12-26T18:07:42.679Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: ECS Problem Types: CWE-190 Description: Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete objects. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000256642/dsa-2024-483-security-update
: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000256642/dsa-2024-483-security-update-for-dell-ecs-multiple-vulnerabilities