Lucene search
+L

7996 matches found

VulnCheck KEV
VulnCheck KEV
added 2021/09/24 12:00 a.m.13 views

VulnCheck KEV: CVE-2021-22005

VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute code...

9.8CVSS7.4AI score0.99999EPSS
SaveExploits11References1
OSV
OSV
added 2021/09/23 1:15 p.m.10 views

CVE-2021-22020

The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server...

5.5CVSS7AI score0.00227EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/23 1:15 p.m.33 views

CVE-2021-22020

The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server...

5.5CVSS0.00227EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/23 1:15 p.m.34 views

Denial of service

The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server...

2.1CVSS6.4AI score0.00227EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2021/09/23 12:16 p.m.111 views

CVE-2021-22020

CVE-2021-22020 is a denial-of-service vulnerability in the Analytics service of VMware vCenter Server. Exploitation relies on input handling in Analytics, leading to DoS. VMware's VMSA-2021-0020 provides updates/patches; CVSSv3.1 shows MEDIUM (5.5) with LOCAL/low complexity. No exploit details ar...

5.5CVSS7.1AI score0.00227EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/09/23 12:16 p.m.35 views

CVE-2021-22020

The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server...

7.5AI score0.00227EPSS
SaveExploits0References1
OSV
OSV
added 2021/09/23 12:15 p.m.11 views

CVE-2021-22007

The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sensitive information...

5.5CVSS7.3AI score0.00243EPSS
SaveExploits0References1
NVD
NVD
added 2021/09/23 12:15 p.m.29 views

CVE-2021-22005

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...

9.8CVSS0.99999EPSS
SaveExploits11References3
OSV
OSV
added 2021/09/23 12:15 p.m.6 views

CVE-2021-22005

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits11References3
NVD
NVD
added 2021/09/23 12:15 p.m.35 views

CVE-2021-22007

The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sensitive information...

5.5CVSS0.00243EPSS
SaveExploits0References1
Prion
Prion
added 2021/09/23 12:15 p.m.24 views

Information disclosure

The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sensitive information...

2.1CVSS6.3AI score0.00243EPSS
SaveExploits0References1Affected Software2
Prion
Prion
added 2021/09/23 12:15 p.m.38 views

Design/Logic Flaw

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...

7.5CVSS9.4AI score0.99999EPSS
SaveExploits11References2Affected Software2
Cvelist
Cvelist
added 2021/09/23 11:41 a.m.34 views

CVE-2021-22007

The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sensitive information...

7.3AI score0.00243EPSS
SaveExploits0References1
CVE
CVE
added 2021/09/23 11:41 a.m.110 views

CVE-2021-22007

CVE-2021-22007 affects VMware vCenter Server in the Analytics service. An authenticated user with non-administrative privileges can disclose sensitive information via a local information disclosure vulnerability in Analytics. The issue is classified with CVSSv3.1 base score 5.5 (vector: CVSS:3.1/...

5.5CVSS6.9AI score0.00243EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/09/23 11:37 a.m.43 views

CVE-2021-22005

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...

9.7AI score0.99999EPSS
SaveExploits11References2
Vulnrichment
Vulnrichment
added 2021/09/23 11:37 a.m.4 views

CVE-2021-22005

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file...

8.9AI score0.99999EPSS
SaveExploits11References2
CVE
CVE
added 2021/09/23 11:37 a.m.1333 views

CVE-2021-22005

CVE-2021-22005 affects VMware vCenter Server via an arbitrary file upload vulnerability in the Analytics service. With network access to port 443, an attacker can upload a crafted file to trigger remote code execution. Public PoCs and exploits exist (e.g., VM attack surfaces and multiple advisori...

9.8CVSS8.7AI score0.99999EPSS
SaveIn wildExploits11References3Affected Software2
IBM Security Bulletins
IBM Security Bulletins
added 2021/09/23 5:05 a.m.57 views

Security Bulletin: Public disclosed vulnerability from OpenSSL affects IBM Netezza Host Management

Summary OpenSSL is used by IBM Netezza Host Management. IBM Netezza Host Management has addressed the applicable CVE. Vulnerability Details CVEID: CVE-2020-1971 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference. If the GENERALNAMEcmp function contain ...

5.9CVSS5.8AI score0.07051EPSS
SaveExploits3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/23 12:00 a.m.238 views

CVE-2021-22005

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file. Recent assessments: wvu-r7 at September...

10CVSS9.2AI score0.99999EPSS
SaveIn wildExploits58References3
BDU FSTEC
BDU FSTEC
added 2021/09/23 12:00 a.m.11 views

The vulnerability of the analytics service for managing virtual infrastructure in VMware vCenter Server, related to the possibility of loading arbitrary files, allows a attacker to execute arbitrary code.

The vulnerability of the analytics service for managing virtual infrastructure in VMware vCenter Server relates to the possibility of loading any file through port 443. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8.2AI score0.99999EPSS
SaveExploits11References5Affected Software2
Rows per page
Query Builder