Lucene search
+L

13365 matches found

BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.10 views

The vulnerability of the monitoring tool for VMware vRealize Operations, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the monitoring tool for VMware vRealize Operations is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

6.8CVSS6.7AI score0.00625EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.8 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.5CVSS6.9AI score0.01879EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.11 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.5CVSS7.3AI score0.00616EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.10 views

The vulnerability of the monitoring tool for VMware vRealize Operations, related to authentication errors, allows a perpetrator to create a user with administrative privileges.

The vulnerability of the monitoring tool for VMware vRealize Operations is related to authentication errors. Exploiting this vulnerability could allow a malicious actor to create a user with administrative privileges...

5.6CVSS7.5AI score0.00808EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.12 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS7.7AI score0.02221EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.11 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.5CVSS6.9AI score0.01879EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.12 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

10CVSS6.8AI score0.01879EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.14 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.5CVSS6.9AI score0.01879EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.14 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.5CVSS6.9AI score0.01879EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.8 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.5CVSS6.9AI score0.01879EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.11 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.5CVSS6.9AI score0.01879EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.9 views

The vulnerability of VMware Workstation’s hypervisor is related to insufficient protection of registration data, allowing attackers to disclose protected information.

The vulnerability of VMware Workstation hypervisor is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

5.7CVSS6.2AI score0.00297EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.10 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.5CVSS6.9AI score0.01879EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.11 views

The vulnerability of the monitoring tool for VMware vRealize Operations, related to the disclosure of information in the erroneous data area, allows a perpetrator to disclose protected information.

The vulnerability of the monitoring tool for VMware vRealize Operations relates to the disclosure of information in the erroneous data range. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...

6.8CVSS7.7AI score0.0163EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/08/16 12:00 a.m.128 views

VMware vRealize Operations 8.x < 8.6.4 Multiple Vulnerabilities (VMSA-2022-0022)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.6.4. It is, therefore, affected by a multiple vulnerabilities: - A malicious actor with administrative network access can escalate privileges to root. CVE-2022-31672 - A low-privileged malicious actor wit...

8.8CVSS6.9AI score0.0163EPSS
SaveExploits4References5
BDU FSTEC
BDU FSTEC
added 2022/08/15 12:00 a.m.13 views

The vulnerability of the software for managing virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, is related to insufficient checking of incoming requests. This allows a perpetrator to carry out an SSRF attack.

The vulnerability of the software for managing virtual infrastructure, such as VMware vCenter Server and VMware Cloud Foundation, is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack by sending specially craft...

5.3CVSS7.2AI score0.00946EPSS
SaveExploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/13 3:19 p.m.70 views

Security Bulletin: Vulnerabilities in vCenter affect IBM Cloud Pak System (CVE-2021-21980, CVE-2021-22049 )

Summary Vulnerabilities have beein found in VMware vCenter. vCenter is shipped with Cloud Pak System. Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID:CVE-2021-21980 DESCRIPTION: VMware vCenter Server could allow a remote attacker to obtain sensitive information,...

9.8CVSS9.7AI score0.04601EPSS
SaveExploits2Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/08/11 12:00 a.m.55 views

VMware Workstation 16.x < 16.2.4 Information Disclosure (VMSA-2022-0023)

The version of VMware Workstation installed on the remote host is 16.x prior to 16.2.4. It is, therefore, affected by an unprotected storage of credentials vulnerability. A local attacker can exploit this leading to the disclosure of user passwords of the remote server connected through VMware...

5.9CVSS6AI score0.00297EPSS
SaveExploits0References2
NVD
NVD
added 2022/08/10 8:15 p.m.50 views

CVE-2022-31675

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...

7.5CVSS0.00808EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/10 8:15 p.m.6 views

CVE-2022-31675

VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...

7.5CVSS7.1AI score0.00808EPSS
SaveExploits1References1
Rows per page
Query Builder