567 matches found
VMware vCenter SOAP API Settings
Binary data vmwarevcentersettings.nbin...
VMware vCenter Data Collection
Binary data vmwarevcentercollect.nbin...
Cross site scripting
Cross-site scripting XSS vulnerability in the server in VMware vCenter Operations aka vCOps before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-5050
Cross-site scripting XSS vulnerability in the server in VMware vCenter Operations aka vCOps before 5.0.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2012-1472
VMware vCenter Chargeback Manager aka CBM before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of service via unspecified vectors...
VMware vCenter Update Manager Directory Traversal (VMSA-2011-0014)
The version of Jetty web server included with VMware vCenter Update Manager on the remote host has a directory traversal vulnerability. This is a variant of the issue previously addressed by VMware advisory VMSA-2010-0012. The web server runs as SYSTEM by default. A remote, unauthenticated attack...
VMware vCenter Update Manager Detection
VMware vCenter Update Manager also known as vSphere Update Manager was detected on the remote host. This application is used to manage patches on vSphere hosts. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56957; scriptversion"1.5"; scriptcvsdate"Date: 2019/11/22";...
Jetty Web server / VMware vCenter directory traversal
No description provided...
CVE-2011-4404
The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...
CVE-2011-4404
The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...
Directory traversal
The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...
CVE-2011-4404
The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to...
VMware vCenter产品JRE多个安全漏洞
VMware vCenter是VMware vSphere套件中一个强大的主机和虚拟机集中管理组件。 多个VMware vCenter产品在实现上存在多个漏洞，可被本地恶意用户利用泄露敏感信息、操作某些数据、绕过某些安全限制、执行欺骗攻击、执行DNS投毒攻击。 VMWare VirtualCenter 2.x VMWare vCenter Server 4.x VMWare vCenter Update Manager 4.x 厂商补丁： VMWare ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.vmware.com...
Empty sockets counter in nworks Enterprise Manager
VMware vCenter or hosts have been added into Enterprise Manager and the amount of sockets is displayed correctly; however, once the maintenance procedure has been performed against the hosts and the hosts are restarted, then some of the hosts become unlicensed Enterprise Manager shows "0" instead...
The service discovery portion of the SPI frequently fails due to a timeout
Challenge Due to weak virtual infrastructure, the discovery process takes more time than the default timeout in the HP agent. Cause Performance related problems on VMware vCenter side. Solution Workaround is to adjust settings of the agent timeout by using the following commands: ovconfchg -ns...
CVE-2011-1788
vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors...
Code injection
vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors...
CVE-2011-1788
vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1 allows local users to discover the SOAP session ID via unspecified vectors...
CVE-2011-1789
The CVE-2011-1789 entry describes an unsigned self-extracting installer in the vSphere Client Installer for VMware vCenter 4.0 (before Update 3) and 4.1 (before Update 1), as well as VMware ESXi 4.x (before 4.1 Update 1) and ESX 4.x (before 4.1 Update 1). The root cause is the lack of a digital s...