EUVD-2012-6180

Malware in sbrugna...

CVE-2013-3079

VMware vCenter Server Appliance vCSA 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by leveraging Virtual Appliance Management Interface VAMI access...

VMware vCenter Server Appliance Update Manager Directory Traversal Arbitrary File Deletion Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on affected installations of VMware vCenter Server Appliance. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Update Manager. The issue results from the lack of proper validation...

CVE-2019-5538

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

CVE-2019-5537: Improper Certificate Validation

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over FTP...

CVE-2019-5538: Improper Certificate Validation

Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance 6.7 before 6.7u3a and 6.5 before 6.5u3d may allow a malicious actor to intercept sensitive data in transit over SCP...

PT-2019-4032

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance versions 6.7 before 6.7u3a VMware vCenter Server Appliance versions 6.5 before 6.5u3d Description The issue is related to a lack of certificate validation during File-Based Backup and Restore operations, which m...

PT-2019-4033

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance versions 6.7 before 6.7u3a VMware vCenter Server Appliance versions 6.5 before 6.5u3d Description The issue is related to a lack of certificate validation during File-Based Backup and Restore operations, which m...

CVE-2017-4943

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

PT-2017-16225

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 6.5 before 6.5 U1d Description The issue is a local privilege escalation vulnerability via the showlog plugin. Successful exploitation could result in a low-privileged user gaining root-level...

CVE-2017-4943: Out-of-bounds Write

VMware vCenter Server Appliance vCSA 6.5 before 6.5 U1d contains a local privilege escalation vulnerability via the 'showlog' plugin. Successful exploitation of this issue could result in a low privileged user gaining root level privileges over the appliance base OS...

VMware vCenter Server Appliance Unspecified XSS (VMSA-2014-0012)

The version of VMware vCenter Server Appliance installed on the remote host is 5.1 prior to Update 3. It is, therefore, affected by an unspecified cross-site scripting vulnerability. A remote attacker can exploit this by means of a specially crafted URL or malicious web page, which can result in...

CVE-2014-3797

Cross-site scripting XSS vulnerability in VMware vCenter Server Appliance vCSA 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-8371: Undefined Security Weakness

VMware vCenter Server Appliance vCSA 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecting to a CIM Server on an ESXi host, which allows man-in-the-middle attackers to spoof CIM servers via a crafted certificate...

CVE-2014-3797: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VMware vCenter Server Appliance vCSA 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-5506

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.1 before Update 3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions 5.1 before Upda...

PT-2014-8495

Name of the Vulnerable Software and Affected Versions VMware vCenter Server Appliance vCSA versions 5.0 through 5.0 before Update 3c VMware vCenter Server Appliance vCSA versions 5.1 through 5.1 before Update 3 VMware vCenter Server Appliance vCSA versions 5.5 through 5.5 before Update 2...

CVE-2014-3790

Ruby vSphere Console RVC in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail...

CVE-2014-3790

Ruby vSphere Console RVC in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail...

CVE-2014-3790: Undefined Security Weakness

Ruby vSphere Console RVC in VMware vCenter Server Appliance allows remote authenticated users to execute arbitrary commands as root by escaping from a chroot jail...