Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-21493 State: PUBLISHED Published: 2021-03-09T14:08:47 Last Updated: 2024-08-03T18:16:22.656Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: SAP SE Products: SAP 3D Visual Enterprise Viewer Problem Types: Improper Input Validation Description: When a user opens manipulated Graphics Interchange Format (.GIF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application. Additional Analyst Notes: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https:/
s: - CVE Program Container: References: - https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 - https://launchpad.support.sap.com/#/notes/3027758 - https://www.zerodayinitiative.com/advisories/ZDI-21-293/ - https://www.zerodayinitiative.com/advisories/ZDI-21-304/ - https://www.zerodayinitiative.com/advisories/ZDI-21-297/ - https://www.zerodayinitiative.com/advisories/ZDI-21-305/ - https://www.zerodayinitiative.com/advisories/ZDI-21-309/ - https://www.zerodayinitiative.com/advisories/ZDI-21-295/ - https://www.zerodayinitiative.com/advisories/ZDI-21-303/ - https://www.zerodayinitiative.com/advisories/ZDI-21-290/ - https://www.zerodayinitiative.com/advisories/ZDI-21-289/ - http
tps://www.zerodayinitiative.com/advisories/ZDI-21-290/ - https://www.zerodayinitiative.com/advisories/ZDI-21-289/ - https://www.zerodayinitiative.com/advisories/ZDI-21-301/ - https://www.zerodayinitiative.com/advisories/ZDI-21-302/ - https://www.zerodayinitiative.com/advisories/ZDI-21-300/ - https://www.zerodayinitiative.com/advisories/ZDI-21-291/ - https://www.zerodayinitiative.com/advisories/ZDI-21-296/ - https://www.zerodayinitiative.com/advisories/ZDI-21-307/ - https://www.zerodayinitiative.com/advisories/ZDI-21-308/
CVE ID: CVE-2021-21494 State: PUBLISHED Published: 2021-01-04T02:05:34 Last Updated: 2024-08-03T18:16:22.470Z Vendors: n/a Products: n/a Problem Types: n/a Description: MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read the centralmka2 (session token) cookie, which is not set to HTTPOnly. Additional Analyst Notes: - CVE Program Container: References: - http://mk-auth.com.br/ - https://gist.github.com/alacerda/380b8923e36a29a02ba1457c1eb3ec2f
CVE ID: CVE-2021-21495 State: PUBLISHED Published: 2021-01-04T02:05:46 Last Updated: 2024-08-03T18:16:22.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI. Additional Analyst Notes: - CVE Program Container: References: - http://mk-auth.com.br/ - https://gist.github.com/alacerda/98853283be6009e75b7d94968d50b88e
CVE ID: CVE-2021-21501 State: PUBLISHED Published: 2021-08-10T09:20:09 Last Updated: 2024-08-03T18:16:22.624Z Vendors: Apache Software Foundation Products: Apache ServiceComb Problem Types: CWE-22 Description: Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread.html/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cdev.servicecomb.apache.org%3E - https://lists.apache.org/thread.html/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cannounce.apache.org%3E - http://www.openwall.com/list
tml/r337be65e504eac52a12e89d7de40345e5d335deee9dd7288f7f59b81%40%3Cannounce.apache.org%3E - http://www.openwall.com/lists/oss-security/2021/08/10/3
CVE ID: CVE-2021-21502 State: PUBLISHED Published: 2021-02-09T21:25:23.168559Z Last Updated: 2024-09-16T17:07:42.336Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: Other Description: Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.
iration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21503 State: PUBLISHED Published: 2021-03-08T21:44:46.106447Z Last Updated: 2024-09-17T03:43:52.638Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-78 Description: PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000183717
CVE ID: CVE-2021-21505 State: PUBLISHED Published: 2021-05-06T12:40:35.398145Z Last Updated: 2024-09-17T02:16:42.090Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell EMC Integrated System for Microsoft Azure Stack Hub Problem Types: CWE-255 Description: Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauthenticated attacker, with the knowledge of the default credentials, could potentially exploit this to log in to the system to gain root privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/0
privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000186008/dsa-2021-020-dell-emc-integrated-system-for-microsoft-azure-stack-hub-security-update-for-an-idrac-undocumented-account-vulnerability
CVE ID: CVE-2021-21506 State: PUBLISHED Published: 2021-03-08T21:44:55.278934Z Last Updated: 2024-09-16T16:29:02.819Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: Other Description: PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISI_PRIV_SYS_SUPPORT and ISI_PRIV_LOGIN_PAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000183717
CVE ID: CVE-2021-21507 State: PUBLISHED Published: 2021-04-30T21:10:17.341849Z Last Updated: 2024-09-16T22:51:51.501Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: VRTX Switch Modules Problem Types: CWE-261 Description: Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges
er credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185252
CVE ID: CVE-2021-21510 State: PUBLISHED Published: 2021-03-08T21:45:26.966579Z Last Updated: 2024-09-16T19:15:28.050Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-20 Description: Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000183758/dsa-2021-041-dell-emc-idrac-
: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000183758/dsa-2021-041-dell-emc-idrac-8-security-update-for-a-host-header-injection-vulnerability
CVE ID: CVE-2021-21511 State: PUBLISHED Published: 2021-02-15T22:10:13.905053Z Last Updated: 2024-09-16T19:20:26.900Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Dell Products: Avamar Problem Types: CWE-285 Description: Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000182926/dsa-2021-033-dell-emc-avamar-server-improper-authorization-vu
nces: - https://www.dell.com/support/kbdoc/en-us/000182926/dsa-2021-033-dell-emc-avamar-server-improper-authorization-vulnerability
CVE ID: CVE-2021-21512 State: PUBLISHED Published: 2021-02-19T16:30:13.791574Z Last Updated: 2024-09-17T00:56:16.036Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: Dell Products: Cyber Recovery Problem Types: CWE-200 Description: Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000183169/dsa-2021-038-dell-emc-powerprotect-cyber-recovery-se
r: References: - https://www.dell.com/support/kbdoc/en-us/000183169/dsa-2021-038-dell-emc-powerprotect-cyber-recovery-security-update-for-unintended-information-disclosure
CVE ID: CVE-2021-21513 State: PUBLISHED Published: 2021-03-02T16:00:18.811973Z Last Updated: 2024-09-16T20:37:47.838Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: Dell Products: Dell Open Manage Server Administrator Problem Types: CWE-287 Description: Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/sec
ess on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://www.tenable.com/security/research/tra-2021-07 - https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21514 State: PUBLISHED Published: 2021-03-02T16:00:19.469101Z Last Updated: 2024-09-17T02:41:33.963Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell Open Manage Server Administrator Problem Types: CWE-22 Description: Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-de
Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21515 State: PUBLISHED Published: 2021-03-01T20:25:14.063592Z Last Updated: 2024-09-16T22:36:29.057Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: SourceOne Problem Types: CWE-79 Description: Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000183430/dsa-2021-043-dell-emc-sourceon
- CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000183430/dsa-2021-043-dell-emc-sourceone-java-script-xss-stored-vulnerability
CVE ID: CVE-2021-21517 State: PUBLISHED Published: 2021-03-01T20:25:14.681501Z Last Updated: 2024-09-17T00:25:38.048Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L) Vendors: Dell Products: SRS Policy Manager Problem Types: CWE-611 Description: SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a non-root user and may be able to temporarily disrupt the ESRS service. Additional Analyst Notes: - CVE Program Container: References:
and may be able to temporarily disrupt the ESRS service. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000183576/dsa-2021-045-dell-emc-srs-policy-manager-security-update-for-external-entity-injection-vulnerability
CVE ID: CVE-2021-21518 State: PUBLISHED Published: 2021-03-12T20:10:14.050686Z Last Updated: 2024-09-16T19:31:02.435Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell SupportAssist Client Problem Types: CWE-427 Description: Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2.1.x, 2.2.x, and Dell SupportAssist Client ProManage 1.x contain a DLL injection vulnerability in the Costura Fody plugin. A local user with low privileges could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with SYSTE
entially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with SYSTEM privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184012/dsa-2021-052-dell-supportassist-for-home-pcs-business-pcs-security-update-for-pc-doctor-plugin-vulnerability
CVE ID: CVE-2021-21522 State: PUBLISHED Published: 2021-09-28T19:20:18.180798Z Last Updated: 2024-09-17T03:23:12.635Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CPG BIOS Problem Types: CWE-255 Description: Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000191495
CVE ID: CVE-2021-21524 State: PUBLISHED Published: 2021-04-12T19:50:16.680487Z Last Updated: 2024-09-16T16:52:52.472Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell EMC Storage Monitoring and Reporting Problem Types: CWE-502 Description: Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is Critical as this may lead to system compromise by unauthenticated attackers. Additional Analyst Notes: - CV
severity is Critical as this may lead to system compromise by unauthenticated attackers. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184753/dsa-2021-054-dell-emc-srm-and-dell-emc-storage-monitoring-and-reporting-smr-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21526 State: PUBLISHED Published: 2021-04-20T16:45:17.109507Z Last Updated: 2024-09-17T00:06:44.489Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-78 Description: Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185202
CVE ID: CVE-2021-21527 State: PUBLISHED Published: 2021-05-06T12:40:36.046664Z Last Updated: 2024-09-16T18:28:26.897Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-78 Description: Dell PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability may allow an authenticated user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE privileges to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185978
CVE ID: CVE-2021-21528 State: PUBLISHED Published: 2021-11-12T22:15:15.785173Z Last Updated: 2024-09-16T19:14:56.490Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-548 Description: Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is triggered when upgrading from a previous versions. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000193005/
CVE ID: CVE-2021-21529 State: PUBLISHED Published: 2021-04-02T21:20:13.974403Z Last Updated: 2024-09-17T00:00:36.170Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L) Vendors: Dell Products: DellEMC System Update - DSU Problem Types: CWE-400 Description: Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184608/dsa-2021-059-
l Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184608/dsa-2021-059-dell-emc-system-update-dsu-security-update-for-denial-of-service-vulnerability
CVE ID: CVE-2021-21530 State: PUBLISHED Published: 2021-04-30T21:10:17.979004Z Last Updated: 2024-09-16T20:42:42.744Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H) Vendors: Dell Products: OpenManage Enterprise Problem Types: CWE-78 Description: Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: -
g in information disclosure and elevation of privilege. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185205
CVE ID: CVE-2021-21531 State: PUBLISHED Published: 2021-04-30T21:10:18.600627Z Last Updated: 2024-09-17T03:48:26.799Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: Unisphere for PowerMax Problem Types: CWE-602 Description: Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000184565
CVE ID: CVE-2021-21532 State: PUBLISHED Published: 2021-04-02T21:20:14.618230Z Last Updated: 2024-09-16T17:28:09.912Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Dell Products: Wyse Proprietary OS (ThinOS) Problem Types: CWE-16 Description: Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184665/dsa-2021-069-dell
alyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184665/dsa-2021-069-dell-wyse-thinos-8-6-security-update-for-an-improper-management-server-validation-vulnerabilitydsa-2021-069-dell-wyse-thinos-8-6-security-update-for-an-improper-management-server-validation-
CVE ID: CVE-2021-21533 State: PUBLISHED Published: 2021-04-02T21:20:15.243701Z Last Updated: 2024-09-17T00:56:07.667Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: Wyse Management Suite Problem Types: CWE-20 Description: Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in the job status retrieval page, also affecting other users that would have normally access to the same subset of job details Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184666/dsa-2021-070-dell-wyse-management-suite-security-u
ner: References: - https://www.dell.com/support/kbdoc/en-us/000184666/dsa-2021-070-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21534 State: PUBLISHED Published: 2021-04-30T17:40:17.352992Z Last Updated: 2024-09-16T22:08:57.541Z Severity: MEDIUM (CVSS 4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Dell Products: Dell Hybrid Client (DHC) Problem Types: CWE-200 Description: Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain access to sensitive information via the local API. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21535 State: PUBLISHED Published: 2021-04-30T17:40:18.031434Z Last Updated: 2024-09-16T23:35:32.828Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Hybrid Client (DHC) Problem Types: CWE-306 Description: Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain root level access to the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities