Lucene search
+L

1184 matches found

ATTACKERKB
ATTACKERKB
added 2022/03/17 9:15 p.m.2 views

CVE-2022-26504

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...

9CVSS7.5AI score0.02474EPSS
SaveExploits0References3
NVD
NVD
added 2022/03/17 9:15 p.m.39 views

CVE-2022-26504

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...

9CVSS0.02474EPSS
SaveExploits0References2
Prion
Prion
added 2022/03/17 9:15 p.m.32 views

Authentication flaw

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...

9CVSS9.3AI score0.02474EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/03/17 8:48 p.m.42 views

CVE-2022-26504

Improper authentication in Veeam Backup & Replication 9.5U3, 9.5U4,10.x and 11.x component used for Microsoft System Center Virtual Machine Manager SCVMM allows attackers execute arbitrary code via Veeam.Backup.PSManager.exe...

9.2AI score0.02474EPSS
SaveExploits0References2
CVE
CVE
added 2022/03/17 8:48 p.m.142 views

CVE-2022-26504

CVE-2022-26504 affects Veeam Backup & Replication (versions 9.5U3/U4, 10.x, 11.x) where the SCVMM-related Veeam.Backup.PSManager.exe component suffers improper authentication, enabling an attacker to execute arbitrary code remotely. Public sources describe this as a high-severity, network-exposed...

9CVSS9AI score0.02474EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/17 12:0 a.m.7 views

PT-2022-17907 · Microsoft +1 · System Center Virtual Machine Manager +1

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication versions 9.5U3 through 11.x Description: The issue is related to improper authentication in the component used for Microsoft System Center Virtual Machine Manager SCVMM, allowing attackers to execute arbitrary code...

9CVSS9.9AI score0.02474EPSS
SaveExploits0References7
Kaspersky
Kaspersky
added 2022/03/08 12:0 a.m.69 views

KLA12481 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Defender for IoT c...

8.8CVSS8AI score0.02737EPSS
SaveExploits0References12
Kaspersky
Kaspersky
added 2021/12/16 12:0 a.m.313 views

KLA12393 RCE vulnerability in Microsoft System Center

Remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-44228 Exploitation Public exploits exist for this vulnerability. Malware exists for this vulnerability. Usually such...

10CVSS9.8AI score0.99999EPSS
SaveExploits356References4
Kaspersky
Kaspersky
added 2021/12/14 12:0 a.m.45 views

KLA12383 Multiple vulnerabilities in Microsoft System Center

Multiple vulnerabilities were found in Microsoft System Center. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Defender f...

10CVSS9.3AI score0.0403EPSS
SaveExploits1References12
OSV
OSV
added 2021/12/07 1:15 p.m.7 views

CVE-2021-40092

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS6.1AI score0.00585EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/07 1:15 p.m.8 views

CVE-2021-40096

A cross-site scripting XSS vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration configurations...

5.4CVSS6.1AI score0.00742EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/12/07 1:15 p.m.5 views

CVE-2021-40092

A cross-site scripting XSS vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file...

5.4CVSS5.8AI score0.00585EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/12/07 12:0 a.m.7 views

SquaredUp跨站脚本漏洞

A cross-site scripting vulnerability exists in the integration configuration of SquaredUp for SCOM version 5.2.1.6654, which could be exploited by remote attackers to inject arbitrary web scripts or HTML...

5.4CVSS5.4AI score0.00585EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2021/12/07 12:0 a.m.5 views

Squaredup 跨站脚本漏洞

A cross-site scripting vulnerability exists in Squaredup for SCOM version 5.2.1.6654, which could be exploited by remote attackers to inject malicious code into a user's device...

5.4CVSS5.3AI score0.00458EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/12/06 12:0 a.m.8 views

Squaredup 代码问题漏洞

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. SSRF vulnerabilities exist in SquaredUp for SCOM, and no detailed vulnerability details are available...

9.8CVSS5.5AI score0.01056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/11/25 12:0 a.m.8 views

The vulnerability of the System Center Operations Manager (SCOM) program for managing and monitoring IT services lies in the insufficient protection of operational data, which allows an attacker to gain unauthorized access to protected information.

The vulnerability of the System Center Operations Manager SCOM software for managing and monitoring IT services is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected...

7.5CVSS7.2AI score0.02786EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2021/11/11 12:0 a.m.4 views

Zoho ManageEngine Patch Connect Plus 代码问题漏洞

Zoho ManageEngine Patch Connect Plus is a tool that leverages existing Microsoft System Center Configuration Manager servers to help deploy patches to over 250 third-party applications e.g., Adobe applications, Java and WinRAR. A remote code execution vulnerability exists in Zoho ManageEngine Pat...

9.8CVSS6.6AI score0.07761EPSS
SaveExploits0References3
Kaspersky
Kaspersky
added 2021/11/09 12:0 a.m.43 views

KLA12339 RCE vulnerability in Microsoft System Center

Remote code execution vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2021-42298 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details...

9.3CVSS8.8AI score0.05293EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2021/10/15 12:0 a.m.44 views

Security Updates for Microsoft System Center Operations Manager (October 2021)

The version of Microsoft System Center Operations Manager installed on the remote Windows host is affected by an information disclosure vulnerability. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to an affected SCOM instance in order to...

7.5CVSS7.4AI score0.02786EPSS
SaveExploits0References3
OSV
OSV
added 2021/10/13 1:15 a.m.2 views

CVE-2021-41352

SCOM Information Disclosure Vulnerability...

7.5CVSS5.8AI score0.02786EPSS
SaveExploits0References1
Rows per page
Query Builder