2677 matches found
CVE-2016-2081
The CVE-2016-2081 issue affects VMware vRealize Log Insight 2.x and 3.x prior to 3.3.2, with a cross-site scripting (XSS) vulnerability caused by improper validation of user-supplied input. An unauthenticated, remote attacker could inject arbitrary script or HTML via unspecified vectors, potentia...
CVE-2016-2082
CVE-2016-2082 affects VMware vRealize Log Insight 2.x and 3.x prior to 3.3.2. The issue is a cross-site request forgery (CSRF/XSRF) vulnerability that can hijack an authenticated user’s session. The root cause is insufficient CSRF protection for certain actions. A remediation present in the conne...
CVE-2016-2081: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-2082: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
PT-2016-5007
Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions 2.x through 3.x before 3.3.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions 2.x through...
PT-2016-5006
Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions 2.x through 3.x before 3.3.2 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 2.x through 3.x...
VMware vRealize Log Insight Cross-Site Scripting Vulnerability
VMware vRealize Log Insight is a suite of log management and analysis tools. A cross-site scripting vulnerability in VMware vRealize Log Insight allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information ...
HPE Insight Control server deployment information disclosure vulnerability
HPE Insight Control server deployment is a set of server management configuration tools from Hewlett Packard Enterprise HPE. An information disclosure vulnerability exists in HPE Insight Control server deployment, which allows remote attackers to obtain sensitive information via unspecified vecto...
HPE Insight Control server deployment elevation of privilege vulnerability
HPE Insight Control server deployment is a set of server management configuration tools from Hewlett Packard Enterprise HPE. An elevation of privilege vulnerability exists in HPE Insight Control server deployment that allows local users to gain privileges via unspecified vectors...
HPE Insight Control server deployment information disclosure vulnerability (CNVD-2016-03947)
HPE Insight Control server deployment is a set of server management configuration tools from Hewlett Packard Enterprise HPE. An information disclosure vulnerability exists in HPE Insight Control server deployment, which could allow an authenticated remote user to obtain sensitive information or...
HPE Systems Insight Manager Denial of Service Vulnerability
HPE Systems Insight Manager that HPE SIM, is the United States of America Hewlett Packard Enterprise Hewlett Packard Enterprise, HPE company's set of HP servers, storage devices for the management of the software, the software provides multi-system management, fault management and event processin...
HPE Insight Control server deployment file manipulation vulnerability
HPE Insight Control server deployment is a set of server management configuration tools from Hewlett Packard Enterprise HPE. A file manipulation add, delete, and modify vulnerability exists in HPE Insight Control server deployment, which allows remote attackers to modify data via unspecified...
VMware vRealize Log Insight / VMware Aria Operations for Logs Detection (HTTP)
HTTP based detection of VMware vRealize Log Insight or VMware Aria Operations for Logs. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...
VMware vRealize Log Insight Multiple Vulnerabilities (VMSA-2016-0008)
VMware vRealize Log Insight is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
VMware vRealize Log Insight Detection (SSH Login)
SSH login-based detection of VMware vRealize Log Insight. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
VMware Releases Security Updates
VMware has released security updates to address vulnerabilities in NSX, vCNS and vRealize Log Insight. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review VMware Security Advisories...
CVE-2016-4366
HPE Systems Insight Manager SIM before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors...
CVE-2016-4366
HPE Systems Insight Manager SIM before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors...