Show filters
1,218 Total Results
Displaying 41-50 of 1,218
Sort by:
Attacker Value
Unknown
CVE-2024-47984
Disclosure Date: December 13, 2024 (last updated February 05, 2025)
Dell RecoverPoint for Virtual Machines 6.0.x contains Denial of Service vulnerability. A User with Remote access could potentially exploit this vulnerability, leading to the disruption of most functionalities of the RPA persistent after reboot, resulting in need of technical support intervention in getting system back to stable state.
0
Attacker Value
Unknown
CVE-2024-28980
Disclosure Date: December 13, 2024 (last updated February 05, 2025)
Dell RecoverPoint for VMs, version(s) 6.0.x contain(s) a Use of a Broken or Risky Cryptographic Algorithm vulnerability in the SSH. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
0
Attacker Value
Unknown
CVE-2024-24902
Disclosure Date: December 13, 2024 (last updated February 05, 2025)
Dell RecoverPoint for Virtual Machines 6.0.x contains an Improper access control vulnerability. A low privileged local attacker could potentially exploit this vulnerability leading to gaining access to unauthorized data for a limited time.
0
Attacker Value
Unknown
CVE-2024-48008
Disclosure Date: December 13, 2024 (last updated February 05, 2025)
Dell RecoverPoint for Virtual Machines 6.0.x contains a OS Command Injection vulnerability. An Low privileged remote attacker could potentially exploit this vulnerability leading to information disclosure ,allowing of unintended actions like reading files that may contain sensitive information
0
Attacker Value
Unknown
CVE-2024-48007
Disclosure Date: December 13, 2024 (last updated February 05, 2025)
Dell RecoverPoint for Virtual Machines 6.0.x contains use of hard-coded credentials vulnerability. A Remote unauthenticated attacker could potentially exploit this vulnerability by gaining access to the source code, easily retrieving these secrets and reusing them to access the system leading to gaining access to unauthorized data.
0
Attacker Value
Unknown
CVE-2024-38488
Disclosure Date: December 13, 2024 (last updated February 05, 2025)
Dell RecoverPoint for Virtual Machines 6.0.x contains a vulnerability. An improper Restriction of Excessive Authentication vulnerability where a Network attacker could potentially exploit this vulnerability, leading to a brute force attack or a dictionary attack against the RecoverPoint login form and a complete system compromise.
This allows attackers to brute-force the password of valid users in an automated manner.
0
Attacker Value
Unknown
CVE-2024-22461
Disclosure Date: December 13, 2024 (last updated February 05, 2025)
Dell RecoverPoint for Virtual Machines 6.0.x contains an OS Command injection vulnerability. A low privileged remote attacker could potentially exploit this vulnerability by running any command as root, leading to gaining of root-level access and compromise of complete system.
0
Attacker Value
Unknown
CVE-2024-47238
Disclosure Date: December 12, 2024 (last updated February 05, 2025)
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
0
Attacker Value
Unknown
CVE-2024-53292
Disclosure Date: December 11, 2024 (last updated February 05, 2025)
Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable component with privileges of the compromised account.
0
Attacker Value
Unknown
CVE-2024-53290
Disclosure Date: December 11, 2024 (last updated February 05, 2025)
Dell ThinOS version 2408 contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Command execution
0