Lucene search
+L

15057 matches found

CNVD
CNVD
•added 2020/04/16 12:00 a.m.•22 views

VMware vRealize Log Insight Input Validation Error Vulnerability

VMware vRealize Log Insight provides real-time log management capabilities for VMware environments. An input validation error vulnerability exists in VMware vRealize Log Insight, which stems from the program's inability to properly validate user input. An attacker could exploit the vulnerability...

6.1CVSS6.8AI score0.00793EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/04/16 12:00 a.m.•41 views

Huawei EulerOS: Security Advisory for openslp (EulerOS-SA-2020-1418)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.7AI score0.98129EPSS
SaveExploits2References4
NVD
NVD
•added 2020/04/15 6:15 p.m.•38 views

CVE-2020-3953

Cross Site Scripting XSS vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

4.8CVSS5.1AI score0.00653EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/15 6:15 p.m.•39 views

CVE-2020-3954

Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

6.1CVSS6.2AI score0.00793EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2020/04/15 6:15 p.m.•18 views

CVE-2020-3954

Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

6.1CVSS5.8AI score0.00793EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/15 6:15 p.m.•37 views

Open redirect

Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

5.8CVSS6.1AI score0.00793EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2020/04/15 6:15 p.m.•29 views

Cross site scripting

Cross Site Scripting XSS vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

3.5CVSS5.1AI score0.00653EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/04/15 5:20 p.m.•77 views

CVE-2020-3953

CVE-2020-3953 (and CVE-2020-3954) affect VMware vRealize Log Insight prior to 8.1.0 (and 4.x) due to improper input validation. Root cause: input validation failure enabling Cross Site Scripting (XSS) in the UI. Impact described as stored XSS potentially allowing payloads to execute in other user...

4.8CVSS5.1AI score0.00653EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/04/15 5:20 p.m.•51 views

CVE-2020-3953

Cross Site Scripting XSS vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

5.1AI score0.00653EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/15 5:17 p.m.•42 views

CVE-2020-3954

Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

6.2AI score0.00793EPSS
SaveExploits0References1
CVE
CVE
•added 2020/04/15 5:17 p.m.•74 views

CVE-2020-3954

CVE-2020-3954 is an Open Redirect vulnerability in VMware vRealize Log Insight caused by improper input validation. The VMware VMSA-2020-0007 advisory and accompanying tables indicate impact on vRealize Log Insight 8.x (and 4.x) with Open Redirect exploitable via crafted URLs, enabling phishing-s...

6.1CVSS6.1AI score0.00793EPSS
SaveExploits0References1Affected Software1
Carbon Black Blog
Carbon Black Blog
•added 2020/04/15 4:13 p.m.•39 views

Amid COVID-19, Global Orgs See a 148% Spike in Ransomware Attacks; Finance Industry Heavily Targeted

Cyber criminals often exploit fear and uncertainty during major world events by launching cyberattacks. These attacks are often performed with social engineering campaigns leveraging malicious emails that lure victims to install malware that steals financial data and other valuable personal...

7.4AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2020/04/15 12:51 a.m.•58 views

Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server

It is an offensive tool for vulnerability scanning. The tool, na...

9.8CVSS6.9AI score0.90384EPSS
SaveExploits20
GithubExploit
GithubExploit
•added 2020/04/15 12:51 a.m.•40 views

Exploit for Missing Authentication for Critical Function in Vmware Vcenter_Server

It is an offensive tool for vulnerability assessment. This repos...

9.8CVSS6.5AI score0.90384EPSS
SaveExploits20
Tenable Nessus
Tenable Nessus
•added 2020/04/15 12:00 a.m.•40 views

Photon OS 1.0: Openvswitch PHSA-2020-1.0-0288

An update of the openvswitch package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0288. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

4.9CVSS6.3AI score0.02046EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2020/04/15 12:00 a.m.•61 views

EulerOS 2.0 SP3 : openslp (EulerOS-SA-2020-1418)

According to the version of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the...

9.8CVSS8.1AI score0.98129EPSS
SaveExploits2References2
Tenable Nessus
Tenable Nessus
•added 2020/04/15 12:00 a.m.•41 views

Photon OS 1.0: Bindutils PHSA-2020-1.0-0287

An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0287. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

7.5CVSS6.6AI score0.08813EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/04/15 12:00 a.m.•45 views

Photon OS 1.0: Linux PHSA-2020-1.0-0287

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0287. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135485...

5.5CVSS6.6AI score0.02179EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/04/15 12:00 a.m.•5 views

PT-2020-2045

Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions prior to 8.1.0 Description The issue is related to a Cross Site Scripting XSS vulnerability due to improper input validation, which may allow a remote attacker to perform a cross-site scripting attack...

4.9CVSS0.00653EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•14 views

CVE-2020-3954: Improper Input Validation

Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...

6.1CVSS6.3AI score0.00793EPSS
SaveExploits0References3
Rows per page
Query Builder