CVE-2021-22033

Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery SSRF vulnerability...

CVE-2021-22033

CVE-2021-22033 affects VMware vRealize Operations prior to 8.6. The root cause is a Server Side Request Forgery (SSRF) vulnerability. Impact is Low CVSS v3.1 (2.7) with network access, requiring admin privileges and no user interaction. Remediation is to apply the fixed versions: vRealize Operati...

CVE-2021-20795

Cross-site request forgery CSRF vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in OG Tags versions prior to 2.0.2 allows a remote attacker to hijack the authentication of administrators and unintended operation may be performed via unspecified vectors...

CVE-2021-41352

SCOM Information Disclosure Vulnerability...

[SECURITY] Fedora 34 Update: redis-6.2.6-1.fc34

Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...

Update for IDOR vulnerability in System Center Operations Manager (KB5006871)

Update for IDOR vulnerability in System Center Operations Manager KB5006871 Applies to: System Center 2019 Operations Manager, System Center 2016 Operations Manager, System Center 2012 R2 Operations Manager Introduction This article describes an issue that is fixed for System Center Operations...

October 12, 2021—KB5006728 (Security-only update)

None None...

Microsoft System Center Operations Manager 信息泄露漏洞

Microsoft System Center Operations Manager is a large-scale monitoring and management software for corporate environments from Microsoft. Formerly known as MOM Microsoft Operations Manager, the software is primarily used to monitor IT systems and provide monitoring support for distributed...

Vulnerability fixed in Microsoft System Center Operations Manager

Microsoft has fixed a vulnerability in System Center Operations Manager SCOM. The vulnerability allows a malicious remotely able to view files. The vulnerability is only exploitable on SCOM systems that have the web console installed. System Center:...

PT-2021-4914 · Microsoft · System Center Operations Manager

Name of the Vulnerable Software and Affected Versions: System Center Operations Manager SCOM affected versions not specified Description: The issue is related to insufficient protection of service data in System Center Operations Manager SCOM, which can allow a remote attacker to gain unauthorize...

Siemens SIMATIC Process Historian

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC Process Historian Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could enable the execution of...

CVE-2021-37123

There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do certain operation, the software does not insufficiently validate the user's identity. Successful exploit could allow the attacker to do certain operations...

Tad Honor Authorization Issues Vulnerabilities

Tad Honor is a module for a simple honor roll by the individual developer of Tad in Taiwan, China. Tad Honor suffers from an authorization issue vulnerability that can be exploited by remote attackers to perform deletion operations without logging in...

Jenkins Enterprise and Operations Center < 2.249.32.0.1 / 2.277.41.0.1 / 2.303.1.5 Bad Permissions (CloudBees Security Advisory 2021-08-25)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.x prior to 2.303.1.5, 2.249.x prior to 2.249.32.0.1, or 2.277.x prior to 2.277.41.0.1. It is, therefore, affected by a vulnerability when using RBAC. When using LDAP to grant users new permissions...

Jenkins Enterprise and Operations Center < 2.249.31.0.5 / 2.289.1.2 Multiple Vulnerabilities (CloudBees Security Advisory 2021-06-02)

The version of Jenkins Enterprise or Jenkins Operations Center running on the remote web server is 2.249.x prior to 2.249.31.0.5, or 2.x prior to 2.289.1.2. It is, therefore, affected by multiple vulnerabilities, including the following: - A flaw exists in CloudBees Jenkins due to RBAC role...

VMSA-2021-0021:VMware vRealize Operations update addresses SSRF Vulnerability

Advisory ID: VMSA-2021-0021.1 CVSSv3 Range: 2.7 Issue Date:2021-10-12 Updated On: 2022-10-31 CVEs: CVE-2021-22033 Synopsis: VMware vRealize Operations update addresses SSRF Vulnerability CVE-2021-22033 RSS Feed Download PDF Download Text File Share this page on social media: 1. Impacted Products...

Denial Of Service (DoS)

firefox:devel is vulnerable to denial of service. An attacker can cause an application crash during the MessageTasks operations by removing the scheduled task...

VulnCheck KEV: CVE-2021-21983

Arbitrary file write vulnerability in vRealize Operations Manager API CVE-2021-21983 prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system...