Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-5359 State: PUBLISHED Published: 2020-12-16T15:50:14.593923Z Last Updated: 2024-09-16T22:45:42.684Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Dell Products: Dell BSAFE Micro Edition Suite Problem Types: CWE-544 Description: Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to an Unchecked Return Value Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to modify and corrupt the encrypted data. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-multiple-security-vulne
- https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-multiple-security-vulnerabilities - https://www.oracle.com/security-alerts/cpuApr2021.html
CVE ID: CVE-2020-5360 State: PUBLISHED Published: 2020-12-16T15:50:15.206975Z Last Updated: 2024-09-16T22:57:09.417Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: Dell BSAFE Micro Edition Suite Problem Types: CWE-127 Description: Dell BSAFE Micro Edition Suite, versions prior to 4.5, are vulnerable to a Buffer Under-Read Vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability resulting in undefined behaviour, or a crash of the affected systems. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-mul
tainer: References: - https://www.dell.com/support/kbdoc/en-us/000181098/dsa-2020-114-dell-bsafe-micro-edition-suite-multiple-security-vulnerabilities - https://www.oracle.com/security-alerts/cpuApr2021.html
CVE ID: CVE-2020-5361 State: PUBLISHED Published: 2021-01-04T21:15:22.213309Z Last Updated: 2024-09-16T23:06:25.643Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-640 Description: Select Dell Client Commercial and Consumer platforms support a BIOS password reset capability that is designed to assist authorized customers who forget their passwords. Dell is aware of unauthorized password generation tools that can generate BIOS recovery passwords. The tools, which are not authorized by Dell, can be used by a physically present attacker to reset BIOS passwords and BIOS-managed Hard Disk Drive (HDD) passwords. An unaut
used by a physically present attacker to reset BIOS passwords and BIOS-managed Hard Disk Drive (HDD) passwords. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to bypass security restrictions for BIOS Setup configuration, HDD access and BIOS pre-boot authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000180741/dsa-2020-119-dell-client-products-unauthorized-bios-password-reset-tool-vulnerability
CVE ID: CVE-2020-5362 State: PUBLISHED Published: 2020-06-10T20:40:12.957208Z Last Updated: 2024-09-17T02:41:23.331Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:H) Vendors: Dell Products: Dell Client Consumer and Commercial platforms Problem Types: CWE-285 Description: Dell Client Consumer and Commercial platforms include an improper authorization vulnerability in the Dell Manageability interface for which an unauthorized actor, with local system access with OS administrator privileges, could bypass the BIOS Administrator authentication to restore BIOS Setup configuration to default values. Additional Analyst Notes: - CVE Program Container: References: - https://www.d
OS Setup configuration to default values. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/SLN321726
CVE ID: CVE-2020-5363 State: PUBLISHED Published: 2020-06-10T20:40:13.376982Z Last Updated: 2024-09-16T20:53:09.058Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: Dell Client Consumer and Commercial platforms Problem Types: CWE-158 Description: Select Dell Client Consumer and Commercial platforms include an issue that allows the BIOS Admin password to be changed through Dell's manageability interface without knowledge of the current BIOS Admin password. This could potentially allow an unauthorized actor, with physical access and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive. Addition
and/or OS administrator privileges to the device, to gain privileged access to the platform and the hard drive. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/SLN321604
CVE ID: CVE-2020-5364 State: PUBLISHED Published: 2020-05-20T20:45:18.127497Z Last Updated: 2024-09-16T19:10:16.543Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Isilon OneFS Problem Types: CWE-201 Description: Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability. The SNMPv2 services is enabled, by default, with a pre-configured community string. This community string allows read-only access to many aspects of the Isilon cluster, some of which are considered sensitive and can foster additional access. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/deta
ccess. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/details/543775/DSA-2020-124-Dell-EMC-Isilon-OneFS-Security-Update-for-Multiple-Vulnerabilities
CVE ID: CVE-2020-5365 State: PUBLISHED Published: 2020-05-20T20:45:18.564948Z Last Updated: 2024-09-16T17:17:39.870Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Isilon OneFS Problem Types: CWE-341 Description: Dell EMC Isilon versions 8.2.2 and earlier contain a remotesupport vulnerability. The pre-configured support account, remotesupport, is bundled in the Dell EMC Isilon OneFS installation. This account is used for diagnostics and other support functions. Although the default password is different for every cluster, it is predictable. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/
is predictable. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/details/543775/DSA-2020-124-Dell-EMC-Isilon-OneFS-Security-Update-for-Multiple-Vulnerabilities
CVE ID: CVE-2020-5366 State: PUBLISHED Published: 2020-07-09T13:45:13.810635Z Last Updated: 2024-09-16T17:29:00.784Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-22 Description: Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/en-us/sln322125/dsa-2020
onal Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/en-us/sln322125/dsa-2020-128-idrac-local-file-inclusion-vulnerability?lang=en
CVE ID: CVE-2020-5367 State: PUBLISHED Published: 2020-06-23T20:00:17.667661Z Last Updated: 2024-09-16T17:58:28.646Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unisphere for PowerMax, Unisphere for PowerMax Virtual Appliance, PowerMax OS Problem Types: CWE-295 Description: Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certific
acker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim's data in transit. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-uk/000153935/dsa-2020-065-dell-emc-unisphere-for-powermax-dell-emc-unisphere-for-powermax-virtual-appliance-and-dell-emc-powermax-embedded-management-update-for-multiple-vulnerabilities
CVE ID: CVE-2020-5368 State: PUBLISHED Published: 2020-07-06T17:45:18.377089Z Last Updated: 2024-09-16T22:52:03.178Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: VxRail Problem Types: CWE-862 Description: Dell EMC VxRail versions 4.7.410 and 4.7.411 contain an improper authentication vulnerability. A remote unauthenticated attacker may exploit this vulnerability to obtain sensitive information in an encrypted form. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/details/544058/DSA-2020-136-Dell-EMC-VxRail-Appliance-Improper-Authentication-Vulnerability
CVE ID: CVE-2020-5369 State: PUBLISHED Published: 2020-09-02T20:55:17.768175Z Last Updated: 2024-09-16T19:46:53.889Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Isilon OneFS Problem Types: CWE-732 Description: Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability. An authenticated malicious user may exploit this vulnerability by using SyncIQ to gain unauthorized access to system management files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/details/546160/DSA-2020-142-Dell-EMC-Isilon-OneFS-and-De
iner: References: - https://www.dell.com/support/security/en-us/details/546160/DSA-2020-142-Dell-EMC-Isilon-OneFS-and-Dell-EMC-PowerScale-OneFS-Security-Update-for-SyncIQ-Privi
CVE ID: CVE-2020-5370 State: PUBLISHED Published: 2021-07-22T17:00:14.564773Z Last Updated: 2024-09-16T18:49:24.507Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L) Vendors: Dell Products: OpenManage Enterprise Problem Types: CWE-22 Description: Dell EMC OpenManage Enterprise (OME) versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar file to inject malicious RPMs which may cause a denial of service or perform unauthorized actions. Additional Analyst Notes: - CVE Pro
malicious RPMs which may cause a denial of service or perform unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000130360/dsa-2020-153-dell-emc-openmanage-enterprise-tar-file-extraction-vulnerability
CVE ID: CVE-2020-5371 State: PUBLISHED Published: 2020-07-06T17:45:18.792486Z Last Updated: 2024-09-16T19:52:24.613Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Isilon OneFS Problem Types: CWE-732 Description: Dell EMC Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale version 9.0.0 contain a file permissions vulnerability. An attacker, with network or local file access, could take advantage of insufficiently applied file permissions or gain unauthorized access to files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/details/544593/DSA-2020-155-Dell-EMC-Isilon-OneFS-and
ntainer: References: - https://www.dell.com/support/security/en-us/details/544593/DSA-2020-155-Dell-EMC-Isilon-OneFS-and-Dell-EMC-PowerScale-Security-Update-for-a-Permissions-Vuln
CVE ID: CVE-2020-5372 State: PUBLISHED Published: 2020-07-06T17:45:19.201158Z Last Updated: 2024-09-16T16:33:52.521Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H) Vendors: Dell Products: PowerStore Problem Types: CWE-1244 Description: Dell EMC PowerStore versions prior to 1.0.1.0.5.002 contain a vulnerability that exposes test interface ports to external network. A remote unauthenticated attacker could potentially cause Denial of Service via test interface ports which are not used during run time environment. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/details/544738/DSA-2020-159-Dell-EMC-PowerStore-Fam
Container: References: - https://www.dell.com/support/security/en-us/details/544738/DSA-2020-159-Dell-EMC-PowerStore-Family-Improper-Authorization-Vulnerability
CVE ID: CVE-2020-5373 State: PUBLISHED Published: 2020-07-14T19:30:14.797364Z Last Updated: 2024-09-17T03:02:58.871Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Dell Products: OMIMSSC (OpenManage Integration for Microsoft System Center) Problem Types: CWE-306 Description: Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to retrieve the system inventory data of the managed device. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/su
ory data of the managed device. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en
CVE ID: CVE-2020-5374 State: PUBLISHED Published: 2020-07-14T19:30:15.221914Z Last Updated: 2024-09-16T18:43:38.509Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L) Vendors: Dell Products: OMIMSSC (OpenManage Integration for Microsoft System Center) Problem Types: CWE-256 Description: Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain a hard-coded cryptographic key vulnerability. A remote unauthenticated attacker may exploit this vulnerability to gain access to the appliance data for remotely managed devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/suppor
r remotely managed devices. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/en-us/sln322169/dsa-2020-163-dell-emc-openmanage-integration-for-microsoft-system-center-multiple-vulnerabilities?lang=en
CVE ID: CVE-2020-5376 State: PUBLISHED Published: 2020-09-02T20:55:18.175503Z Last Updated: 2024-09-16T22:55:30.381Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-416 Description: Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM). Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/SLN322616
CVE ID: CVE-2020-5377 State: PUBLISHED Published: 2020-07-28T17:50:11.643992Z Last Updated: 2024-09-17T00:02:29.147Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: Dell Products: Dell Open Manage Server Administrator Problem Types: CWE-22 Description: Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities. An unauthenticated remote attacker could potentially exploit these vulnerabilities by sending a crafted Web API request containing directory traversal character sequences to gain file system access on the compromised management station. Additional Analyst Notes: - CVE Program Container: Ref
to gain file system access on the compromised management station. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/en-us/sln322304/dsa-2020-172-dell-emc-openmanage-server-administrator-omsa-path-traversal-vulnerability?lang=en - http://packetstormsecurity.com/files/162110/Dell-OpenManage-Server-Administrator-9.4.0.0-File-Read.html
CVE ID: CVE-2020-5378 State: PUBLISHED Published: 2020-09-02T20:55:18.598478Z Last Updated: 2024-09-17T01:51:46.170Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-416 Description: Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM). Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/SLN322616
CVE ID: CVE-2020-5379 State: PUBLISHED Published: 2020-09-02T20:55:19.005312Z Last Updated: 2024-09-16T19:30:42.663Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-693 Description: Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the EFI_BOOT_SERVICES structure to execute arbitrary code in System Management Mode (SMM). Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/SLN322616
CVE ID: CVE-2020-5383 State: PUBLISHED Published: 2020-08-27T18:25:11.098840Z Last Updated: 2024-09-16T22:46:50.183Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Isilon OneFS Problem Types: CWE-119 Description: Dell EMC Isilon OneFS version 8.2.2 and Dell EMC PowerScale OneFS version 9.0.0 contains a buffer overflow vulnerability in the Likewise component. A remote unauthenticated malicious attacker may potentially exploit this vulnerability to cause a process restart. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/details/546005/DSA-2020-189-Dell-EMC-Isilon-OneFS-and-Dell-EMC-Po
erences: - https://www.dell.com/support/security/en-us/details/546005/DSA-2020-189-Dell-EMC-Isilon-OneFS-and-Dell-EMC-PowerScale-Security-Update-for-Buffer-Overflow-Vu
CVE ID: CVE-2020-5384 State: PUBLISHED Published: 2020-07-31T17:45:14.625407Z Last Updated: 2024-09-16T23:30:37.701Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: RSA Authentication Agent for Microsoft Windows Problem Types: CWE-288 Description: Authentication Bypass Vulnerability RSA MFA Agent 2.0 for Microsoft Windows contains an Authentication Bypass vulnerability. A local unauthenticated attacker could potentially exploit this vulnerability by using an alternate path to bypass authentication in order to gain full access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://community.rsa.com/docs/DOC-113541
CVE ID: CVE-2020-5385 State: PUBLISHED Published: 2020-08-18T20:40:11.411406Z Last Updated: 2024-09-17T02:01:32.478Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Encryption Enterprise Problem Types: CWE-732 Description: Dell Encryption versions prior to 10.8 and Dell Endpoint Security Suite versions prior to 2.8 contain a privilege escalation vulnerability because of an incomplete fix for CVE-2020-5358. A local malicious user with low privileges could potentially exploit this vulnerability to gain elevated privilege on the affected system with the help of a symbolic link. Additional Analyst Notes: - CVE Program Container: References: -
n the affected system with the help of a symbolic link. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/SLN322456
CVE ID: CVE-2020-5386 State: PUBLISHED Published: 2020-09-02T20:55:19.410906Z Last Updated: 2024-09-16T20:58:12.206Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Elastic Cloud Storage Problem Types: CWE-668 Description: Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running services and gain knowledge of sensitive data of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/security/en-us/details/545893/DSA-2020-208-Dell-EMC-ECS-Security-Update-for-an
eferences: - https://www.dell.com/support/security/en-us/details/545893/DSA-2020-208-Dell-EMC-ECS-Security-Update-for-an-Exposure-of-Resource-vulnerability
CVE ID: CVE-2020-5387 State: PUBLISHED Published: 2020-10-01T20:05:14.389691Z Last Updated: 2024-09-16T23:21:56.887Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: CPG BIOS Problem Types: CWE-755 Description: Dell XPS 13 9370 BIOS versions prior to 1.13.1 contains an Improper Exception Handling vulnerability. A local attacker with physical access could exploit this vulnerability to prevent the system from booting until the exploited boot device is removed. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/SLN322626
CVE ID: CVE-2020-5388 State: PUBLISHED Published: 2020-11-10T14:50:14.538262Z Last Updated: 2024-09-16T22:31:03.611Z Severity: MEDIUM (CVSS 6.9 CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-119 Description: Dell Inspiron 15 7579 2-in-1 BIOS versions prior to 1.31.0 contain an Improper SMM communication buffer verification vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/en-us/sln322869/dsa-2020-215-dell-inspiron-15-7579-2-in-1-improper-s
References: - https://www.dell.com/support/article/en-us/sln322869/dsa-2020-215-dell-inspiron-15-7579-2-in-1-improper-smm-communication-buffer-boundary-verification-vulnerability
CVE ID: CVE-2020-5389 State: PUBLISHED Published: 2020-10-08T14:50:12.102428Z Last Updated: 2024-09-16T22:45:47.550Z Severity: CRITICAL (CVSS 9 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: OMIMSSC (OpenManage Integration for Microsoft System Center) Problem Types: CWE-532 Description: Dell EMC OpenManage Integration for Microsoft System Center (OMIMSSC) for SCCM and SCVMM versions prior to 7.2.1 contain an information disclosure vulnerability. Authenticated low privileged OMIMSCC users may be able to retrieve sensitive information from the logs. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/en-de/sln322859/dsa-2
itional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/article/en-de/sln322859/dsa-2020-224-dell-emc-openmanage-integration-for-microsoft-system-center-information-disclosure-vulnerability?lang=en
CVE ID: CVE-2020-5390 State: PUBLISHED Published: 2020-01-13T18:11:37 Last Updated: 2024-08-04T08:30:23.936Z Vendors: n/a Products: n/a Problem Types: n/a Description: PySAML2 before 5.0.0 does not check that the signature in a SAML document is enveloped and thus signature wrapping is effective, i.e., it is affected by XML Signature Wrapping (XSW). The signature information and the node/object that is signed can be in different places and thus the signature verification will succeed, but the wrong data will be used. This specifically affects the verification of assertion that have been signed. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/IdentityPython/