1826 matches found
Input validation
Dell RecoverPoint for Virtual Machines 5.3.x contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against the RecoverPoint login form. This allows...
Command injection
Dell RecoverPoint for Virtual Machines 5.3.x contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user, resulting ...
CVE-2024-22426
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user,...
CVE-2024-22426
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains an OS Command injection vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to execute arbitrary operating system commands, which will get executed in the context of the root user,...
CVE-2024-22426
Summary: CVE-2024-22426 affects Dell RecoverPoint for Virtual Machines (versions 5.3.x and 6.0.SP1). It is an OS command injection vulnerability that could allow an unauthenticated remote attacker to execute arbitrary OS commands as root, enabling full host compromise. What’s affected: Dell Recov...
CVE-2024-22425
Dell RecoverPoint for Virtual Machines 5.3.x, 6.0.SP1 contains a brute force/dictionary attack vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to launch a brute force attack or a dictionary attack against the RecoverPoint login form. This...
CVE-2024-22425
CVE-2024-22425 affects Dell RecoverPoint for Virtual Machines (versions 5.3.x through 6.0.SP1). The issue is a brute force/dictionary attack vulnerability on the RecoverPoint login form; an unauthenticated remote attacker could automate password guessing. According to the sources, CVSS metrics in...
PT-2024-19414 · Dell · Dell Recoverpoint For Virtual Machines
Name of the Vulnerable Software and Affected Versions: Dell RecoverPoint for Virtual Machines versions 5.3.x through 6.0.SP1 Description: The issue allows an unauthenticated remote attacker to launch a brute force attack or a dictionary attack against the RecoverPoint login form, enabling them to...
Dell EMC RecoverPoint 代码问题漏洞
Dell RecoverPoint for VMs is a disaster recovery solution for VMware environments from Dell, Inc. A code issue vulnerability exists in Dell RecoverPoint for Virtual Machines version 5.3.x, which stems from the inclusion of an operating system command injection vulnerability. No details of the...
Dell EMC RecoverPoint 安全漏洞
Dell RecoverPoint for Virtual Machines is a disaster recovery solution for VMware environments from Dell. A brute force vulnerability exists in Dell RecoverPoint for Virtual Machines, which can be exploited by an attacker to brute-force break a valid user's password in an automated fashion...
[SECURITY] Fedora 38 Update: xen-4.17.2-6.fc38
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
[SECURITY] Fedora 39 Update: xen-4.17.2-6.fc39
This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...
Fedora: Security Advisory for xen (FEDORA-2024-4b2cf8c375)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the SEV-SNP secure nested paging implementation for virtual machines running on AMD processor-based servers allows a attacker to compromise the integrity of the protected information.
The vulnerability of the SEV-SNP secure nested paging implementation for virtual machines running on AMD processor-based servers is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected...
kernel: SEV-ES local priv escalation
A buffer overflow and null pointer dereference flaw was found in the Linux kernel's Secure Encrypted Virtualization SEV implementation for AMD functionality. This issue occurs when a user in SEV guest VM accesses MMIO registers, which could allow a local user to crash the system or escalate their...
Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years
An advanced China-nexus cyber espionage group previously linked to the exploitation of security flaws in VMware and Fortinet appliances has been attributed to the abuse of a critical vulnerability in VMware vCenter Server as a zero-day since late 2021. "UNC3886 has a track record of utilizing...
edk2 bug fix update
An update is available for edk2. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list EDK Embedded Development Kit is a project to enable UEFI support for Virtual...
PT-2024-1555 · Amd · Amd Sev-Snp
Name of the Vulnerable Software and Affected Versions: AMD SEV-SNP affected versions not specified Description: A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests, potentially resulting in guests not receiving expected debug information. The issue is related to the...
Azure Serial Console Attack and Defense - Part 2
This is the second installment of the Azure Serial Console blog, which provides insights to improve defenders’ preparedness when investigating Azure Serial Console activity on Azure Linux virtual machines. While the first blog post discussed various tracing activities, such as using Azure activit...
