Product by Dell
Powerscale Onefs Node Firmware Package
18 known vulnerabilities in Powerscale Onefs Node Firmware Package (Dell), 0 of them actively exploited (CISA KEV).
Key figures
18
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-4741 | Use After Free with SSL_free_buffers | 7.5 | |
| High | CVE-2025-59375 | libexpat Project libexpat: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Medium | CVE-2023-6237 | Excessive time spent checking invalid RSA public keys | 5.9 | |
| High | CVE-2022-43680 | libexpat Project libexpat: Use-After-Free | 7.5 | |
| High | CVE-2023-52425 | libexpat Project libexpat: Denial of Service | 7.5 | |
| High | CVE-2024-28757 | libexpat Project libexpat: security vulnerability | 7.5 | |
| Critical | CVE-2025-23351 | NVIDIA BlueField GA: Out-of-bounds Write | 9.0 | |
| Critical | CVE-2025-23350 | NVIDIA BlueField GA: Out-of-bounds Write | 9.0 | |
| High | CVE-2026-25210 | libexpat Project libexpat: Integer Overflow or Wraparound | 6.9 | |
| Medium | CVE-2025-60876 | BusyBox: security vulnerability | 6.5 | |
| Medium | CVE-2025-23299 | NVIDIA BlueField GA: Out-of-bounds Write | 6.7 | |
| Medium | CVE-2025-31356 | Intel(R) Trust Domain Extensions (Intel(R) TDX): Insufficient Verification of Data Authenticity | — | |
| Low | CVE-2026-24515 | libexpat Project libexpat: NULL Pointer Dereference | 2.9 | |
| Medium | CVE-2023-52426 | libexpat Project libexpat: security vulnerability | 5.5 | |
| Medium | CVE-2026-32777 | libexpat Project libexpat: Infinite Loop | 4.0 | |
| Medium | CVE-2026-32776 | libexpat Project libexpat: NULL Pointer Dereference | 4.0 | |
| Low | CVE-2026-32778 | libexpat Project libexpat: NULL Pointer Dereference | 2.9 | |
| Medium | CVE-2025-66382 | libexpat Project libexpat: Inefficient Algorithmic Complexity | 2.9 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 26sans-atrisk-mail,