Lucene search
+L

1014 matches found

CNNVD
CNNVD
added 2026/02/25 12:0 a.m.16 views

VMware Aria Operations 安全漏洞

VMware Aria Operations is a unified, AI-driven automated IT operations management platform provided by the American company VMware. It is suitable for private cloud, hybrid cloud, and multi-cloud environments. There is a security vulnerability in VMware Aria Operations, which stems from permissio...

7.2CVSS7.5AI score0.00686EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/02/25 12:0 a.m.10 views

VMware Aria Operations 安全漏洞

VMware Aria Operations is a unified, AI-driven automated IT operations management platform provided by the American company VMware. It is suitable for private cloud, hybrid cloud, and multi-cloud environments. There is a security vulnerability in VMware Aria Operations, which stems from a...

9CVSS7.3AI score0.00411EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.17 views

PT-2026-21684

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations versions 8.0 through 8.18.5 and 9.0 through 9.0.1. Description: VMware Aria Operations contains a command injection vulnerability that allows a malicious unauthenticated actor to execute arbitrary commands, potentially...

8.1CVSS8.2AI score0.17424EPSS
SaveExploits0References124
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.15 views

PT-2026-21686

Name of the Vulnerable Software and Affected Versions VMware Aria Operations affected versions not specified Description A malicious actor with privileges in vCenter to access VMware Aria Operations may leverage a privilege escalation issue to obtain administrative access in VMware Aria Operation...

7.2CVSS5.2AI score0.00686EPSS
SaveExploits0References21
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.12 views

PT-2026-21685

Name of the Vulnerable Software and Affected Versions VMware Aria Operations affected versions not specified Description VMware Aria Operations contains a stored cross-site scripting issue. An attacker with the ability to create custom benchmarks may inject script to perform administrative action...

9CVSS4.8AI score0.00411EPSS
SaveExploits0References15
VMware
VMware
added 2026/02/24 12:0 a.m.49 views

VMSA-2026-0001: VMware Aria Operations updates address multiple vulnerabilities (CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721)

Advisory ID: | VMSA-2026-0001.1 ---|--- Advisory Severity: | Important CVSSv3 Range: | 6.2 - 8.1 Synopsis: | VMware Aria Operations updates address multiple vulnerabilities CVE-2026-22719, CVE-2026-22720 and CVE-2026-22721 Issue date: | 2026-02-24 Updated on: | 2026-03-03 Updated Advisory CVEs |...

9CVSS8AI score0.17424EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/01/09 10:47 a.m.7 views

CVE-2022-31682

VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary files containing sensitive data...

4.9CVSS6.8AI score0.00599EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.7 views

Mozilla Firefox ESR < 52.4

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-22 advisory. - Mozilla developers and community members Christoph Diehl, Jan de Mooij, Jason Kratzer, Randell Jesup, Tom...

10CVSS8.2AI score0.03641EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2025/11/18 12:0 a.m.5 views

Mozilla Firefox < 56.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 56.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-21 advisory. - Mozilla developers and community members Christian Holler, Jason Kratzer, Tobias Schneider, Tyson Smith, Davi...

10CVSS8.2AI score0.03641EPSS
SaveExploits13References19
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.7 views

Astra Linux – Vulnerability in open-vm-tools

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges, who has access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled, may exploit this vulnerability to escalate...

7.8CVSS7.9AI score0.0788EPSS
SaveExploits3References3
The Hacker News
The Hacker News
added 2025/10/31 7:9 a.m.19 views

CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a high-severity security flaw impacting Broadcom VMware Tools and VMware Aria Operations to its Known Exploited Vulnerabilities KEV catalog, following reports of active exploitation in the wild. The vulnerability in...

7.8CVSS8.5AI score0.0788EPSS
SaveExploits3
CISA KEV Catalog
CISA KEV Catalog
added 2025/10/30 12:0 a.m.38 views

Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

Broadcom VMware Aria Operations and VMware Tools contain a privilege defined with unsafe actions vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this...

7.8CVSS6.9AI score0.0788EPSS
SaveIn wildExploits3
Tenable Nessus
Tenable Nessus
added 2025/10/28 12:0 a.m.5 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: open-vm-tools (UTSA-2025-988601)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988601 advisory. VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability.A malicious local actor with non-administrative privileges having access t...

7.8CVSS7.9AI score0.0788EPSS
SaveExploits3References4
Tenable Nessus
Tenable Nessus
added 2025/10/22 12:0 a.m.10 views

TencentOS Server 4: open-vm-tools (TSSA-2025:0776)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0776 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.8CVSS7.9AI score0.0788EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2025/10/16 12:0 a.m.9 views

Alibaba Cloud Linux 3 : 0159: open-vm-tools (ALINUX3-SA-2025:0159)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0159 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-41244: VMware Aria Operations and VMware...

7.8CVSS7.9AI score0.0788EPSS
SaveExploits3References2
Amazon
Amazon
added 2025/10/14 12:0 a.m.9 views

Important: open-vm-tools

Issue Overview: VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability ...

7.8CVSS7.1AI score0.0788EPSS
SaveExploits3
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2017-16760

Malware in sbrugna...

9.8CVSS9.2AI score0.04187EPSS
SaveExploits1References17
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2017-16793

Malware in sbrugna...

9.8CVSS9.2AI score0.0342EPSS
SaveExploits1References18
GithubExploit
GithubExploit
added 2025/10/06 1:35 a.m.306 views

Exploit for CVE-2025-41244

CVE-2025-41244 PoC VMware Aria Operations &1" VERSIONEND do...

7.8CVSS7.2AI score0.0788EPSS
SaveExploits3
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-19807

Malicious code in bioql PyPI...

6.7CVSS6.6AI score0.00194EPSS
SaveExploits0References2
Rows per page
Query Builder