Known vulnerabilities in PowerScale OneFS - page 7
Vendor:
Dell
Software:
PowerScale OneFS
Software CPE:
cpe:2.3:h:dell:powerscale_onefs:*:*:*:*:*:*:*:*
Total vulnerabilities:
159
Public exploits:
10
Known exploited (KEV):
1
Breakdown by Severity Chart
9.11.0.1
9.10.1.3
9.5.1.3
9.7.1.8
9.10.0.0
9.7.1.5
9.10.1.2
9.9.0.1
9.5.1.2
9.7.1.3
9.4.0.20
9.5.1.1
9.5.1.0
9.4.0.19
9.7.1.2
9.9.0.0
9.7.1.0
9.4.0.18
12.0
9.5.0.6
9.2.1.21
9.4.0.12
9.4.0.11
9.4.0.9
9.4.0.8
9.4.0.7
11.7
9.1.0.28
9.5.0.0
9.5.0.1
9.4.0.13
9.2.1.22
9.4.0.14
9.5.0.2
9.4.0.10
9.2.1.19
9.1.0.26
9.1.0.24
9.1.0.23
9.1.0.22
9.2.1.17
9.2.1.16
9.2.1.15
9.4.0.6
9.4.0.5
9.3.0.8
9.3.0.9
8.2.2
8.1.2
9.1.0
9.0.0
9.1.0.20
9.1.0.19
9.1.0.18
9.1.0.17
9.1.0.16
9.1.0.15
9.1.0.14
9.1.0.13
9.1.0.12
9.1.0.11
9.1.0.10
9.1.0.9
9.1.0.8
9.1.0.7
9.1.0.6
9.1.0.5
9.1.0.4
9.1.0.3
9.1.0.2
9.1.0.1
9.1.0.0
9.2.1.13
9.2.1.12
9.2.1.11
9.2.1.10
9.2.1.9
9.2.1.8
9.2.1.7
9.2.1.6
9.2.1.5
9.2.1.4
9.2.1.3
9.2.1.2
9.2.1.1
9.2.1.0
9.3.0.6
9.3.0.5
9.3.0.4
9.3.0.3
9.3.0.2
9.3.0.1
9.3.0.0
9.4.0.3
9.4.0.2
9.4.0.1
9.4.0.0
9.4.0.4
9.3.0.7
9.2.1.14
9.1.0.21
Vulnerabilities (159)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU78999 - Improper control of a resource through its lifetime CVE-2023-25942 |
CWE-664 | Low | 9.2.1.22, 9.4.0.13, 9.5.0.1, 9.1.0.28 | 07.08.2023 |
SB2023080721 |
||
| #VU78998 - Improper Link Resolution Before File Access ('Link Following') CVE-2023-25940 |
CWE-59 | Low | 9.5.0.1, 9.1.0.28, 9.2.1.22, 9.4.0.13 | 07.08.2023 |
SB2023080721 |
||
| #VU78997 - Incorrect Default Permissions CVE-2023-25941 |
CWE-276 | Medium | 9.2.1.22, 9.4.0.13, 9.5.0.2, 9.1.0.28, 9.5.0.1 | 07.08.2023 |
SB2023080721 |
||
| #VU71753 - Stack-based buffer overflow CVE-2022-28331 |
CWE-121 | High | 9.4.0.14 | 02.02.2023 |
SB2023020208 SB2023022708 SB2023033122 and 5 more |
||
| #VU71752 - Integer overflow CVE-2022-24963 |
CWE-190 | High | 9.4.0.14 | 02.02.2023 |
SB2023020209 SB2023020211 SB2023022704 and 19 more |
||
| #VU71454 - Heap-based Buffer Overflow CVE-2022-3715 |
CWE-122 | Low | 9.5.0.2 | 23.01.2023 |
SB2023012382 SB2023012383 SB2023021625 and 14 more |
||
| #VU70528 - Security Features CVE-2022-46908 |
CWE-254 | Low | 9.4.0.14 | 28.12.2022 |
SB2022122824 SB2022122826 SB2022122827 and 24 more |
||
| #VU64682 - Resource exhaustion CVE-2022-32206 |
CWE-400 | Medium | 9.1.0.26, 9.2.1.19, 9.4.0.10 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 80 more |
||
| #VU64681 - Resource exhaustion CVE-2022-32205 |
CWE-400 | Medium | 9.1.0.26, 9.2.1.19, 9.4.0.10 | 27.06.2022 |
SB2022062711 SB2022062724 SB2022062816 and 32 more |
||
| #VU64081 - Out-of-bounds read CVE-2022-28614 |
CWE-125 | Low | 9.1.0.28, 9.2.1.22, 9.4.0.13, 9.5.0.1 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 36 more |
||
| #VU64080 - Out-of-bounds read CVE-2022-28330 |
CWE-125 | Medium | 9.1.0.28, 9.2.1.22, 9.4.0.13, 9.5.0.1 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022070730 and 11 more |
||
| #VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-26377 |
CWE-444 | Medium | 9.1.0.28, 9.2.1.22, 9.4.0.13, 9.5.0.1 | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 39 more |
||
| #VU63627 - Memory corruption CVE-2021-36690 |
CWE-119 | Low | 9.4.0.14 | 25.05.2022 |
SB2022050533 SB2022071831 SB2022092034 and 16 more |
||
| #VU63011 - Cleartext Transmission of Sensitive Information CVE-2022-30115 |
CWE-319 | Low | 9.1.0.26, 9.2.1.19, 9.4.0.10 | 11.05.2022 |
SB2022051112 SB2022051170 SB2022072605 and 11 more |
||
| #VU63009 - Incorrect Implementation of Authentication Algorithm CVE-2022-27782 |
CWE-303 | Medium | 9.1.0.26, 9.2.1.19, 9.4.0.10 | 11.05.2022 |
SB2022051112 SB2022051136 SB2022051170 and 68 more |
||
| #VU63008 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-27781 |
CWE-835 | Medium | 9.1.0.26, 9.2.1.19, 9.4.0.10 | 11.05.2022 |
SB2022051112 SB2022051136 SB2022051170 and 36 more |
||
| #VU63007 - Improper input validation CVE-2022-27780 |
CWE-20 | Low | 9.1.0.26, 9.2.1.19, 9.4.0.10 | 11.05.2022 |
SB2022051112 SB2022051136 SB2022051170 and 14 more |
||
| #VU63005 - Exposure of sensitive information to an unauthorized actor CVE-2022-27779 |
CWE-200 | Low | 9.1.0.26, 9.2.1.19, 9.4.0.10 | 11.05.2022 |
SB2022051112 SB2022051170 SB2022072605 and 9 more |
||
| #VU63004 - Improper control of a resource through its lifetime CVE-2022-27778 |
CWE-664 | Low | 9.1.0.26, 9.2.1.19, 9.4.0.10 | 11.05.2022 |
SB2022051112 SB2022051170 SB2022072054 and 9 more |
||
| #VU51834 - Use After Free CVE-2021-20227 |
CWE-416 | Medium | 9.4.0.14 | 01.04.2021 |
SB2021040101 SB2021040102 SB2021042535 and 9 more |
Showing elements 121 - 140 out of 159