23 matches found
EUVD-2021-9183
Malicious code in bioql PyPI...
CVE-2013-3079
VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface VAMI access...
The vulnerability of the VAMI management interface related to VMware vCenter Server and VMware Cloud Foundation, a virtualization platform, arises from improper code generation. This allows an attacker to execute arbitrary code.
The vulnerability of the VAMI management interface for VMware vCenter Server and VMware Cloud Foundation virtualization platforms is related to improper code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code on the operating system...
CVE-2021-22014
The vCenter Server contains an authenticated code execution vulnerability in VAMI Virtual Appliance Management Infrastructure. An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter...
Remote code execution
The vCenter Server contains an authenticated code execution vulnerability in VAMI Virtual Appliance Management Infrastructure. An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter...
CVE-2021-22014
CVE-2021-22014 is an authenticated code-execution vulnerability in VMware vCenter Server’s VAMI (port 5480). An authenticated VAMI user with network access to 5480 can execute arbitrary code on the underlying OS hosting vCenter Server. The issue is publicly discussed across multiple sources (e.g....
CVE-2021-22014
The vCenter Server contains an authenticated code execution vulnerability in VAMI Virtual Appliance Management Infrastructure. An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter...
CVE-2021-22014: Undefined Security Weakness
The vCenter Server contains an authenticated code execution vulnerability in VAMI Virtual Appliance Management Infrastructure. An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter...
CVE-2013-3080
VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface VAMI web-interface access...
Design/Logic Flaw
VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface VAMI web-interface access...
Design/Logic Flaw
VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface VAMI access...
CVE-2013-3080
VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface VAMI web-interface access...
CVE-2013-3080
Summary (CVE-2013-3080) : VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 contains a vulnerability in the Virtual Appliance Management Interface (VAMI). An authenticated remote attacker can upload files to an arbitrary location via VAMI, potentially overwriting files and enabling code ...
CVE-2013-3079: Improper Control of Generation of Code
VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface VAMI access...
CVE-2013-3080: Undefined Security Weakness
VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently execute arbitrary code or cause a denial of service, by leveraging Virtual Appliance Management Interface VAMI web-interface access...
vCenter Server Appliance 任意代码执行漏洞(CVE-2013-3079)
BUGTRAQ ID: 59507 CVECAN ID: CVE-2013-3079 VMware vCenter Server可以快速部署虚拟机，并监控物理服务器和虚拟机的性能，可通过单个界面部署、监控和管理虚拟化IT 环境，并确保最佳的服务级别。 vCenter Server Appliance 5.1存在远程代码漏洞。如果一个攻击者经过了身份验证，并且获取了VAMI的访问权，那么就可以以root权限运行现有文件。在默认的vCSA设置中，身份验证局限于root，因为root是唯一定义用户。 0 VMWare vCenter Server 5.x 厂商补丁： VMWare ------...
CVE-2010-2667
Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure VAMI in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving 1 the Studio virtual appliance or 2 a virtual appliance created by the Studio virtual appliance...
CVE-2010-2667
Summary (CVE-2010-2667) : VMware Studio 2.0 and virtual appliances created with Studio 2.0 are affected by a vulnerability in Virtual Appliance Management Infrastructure (VAMI) that allows remote authenticated users to execute arbitrary commands. The issue requires authentication and affects Stud...
CVE-2010-2667
Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure VAMI in VMware Studio 2.0 allow remote authenticated users to execute arbitrary commands via vectors involving 1 the Studio virtual appliance or 2 a virtual appliance created by the Studio virtual appliance...
