2725 matches found
CVE-2020-3956
CVE-2020-3956 PoC exploit for VMware Cloud Director RCE CVE-2020-3956 Technical advisory is available here: https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/...
gxdlmsdirector-cve
Multiple vulnerabilities in Gurux GXDLMS Director – remote code execution Gurux GXDLMS Director is an open-source Windows program for interacting with energy meters through the use of DLMS/COSEM protocol. The software has a remote update functionality for add-in DLLs as well as for files containi...
Multiple Vulnerabilities in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center
Overview Multiple vulnerabilities have been found in Hitachi Command Suite, Hitachi Automation Director, Hitachi Configuration Manager, Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center. The product name in Hitachi Command Suite is changed in Hitachi Ops Center series on some...
Important: Red Hat Security Advisory: Updated Red Hat OpenStack Platform 17.1 director Operator container images
Updated container images are now available for director Operator for Red Hat OpenStack Platform 17.1 Wallaby for RHEL 9.2. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud running on commonly...
CVE-2026-102731
Memory allocation with excessive size value vulnerability in Apache Directory LDAP API. A malicious peer or a MITM can send a small BER-encoded response causing a large memory allocation before any data is received. This can lead to an OutOfMemoryError and denial of service. The client JVM OOMs...
CLEANSTART-2024-OX27386 In Bareos Director less than or equal to 16
Security vulnerability affects the bareos package. In Bareos Director less than or equal to 16...
CVE-2026-88743
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
CVE-2026-88743
Versions 4.7.0 - 6.5.0 of Bacularis are vulnerable to Stored cross-site scripting (XSS) within director tags . This vulnerability is caused by the improper neutralization of input during web page generation. The documents do not provide specific information regarding a root cause, practical impac...
CVE-2026-88743: Improper Neutralization of Input During Web Page Generation
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
PT-2026-92471
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
CVE-2026-88743
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
EUVD-2026-79297
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
CVE-2026-88743
Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in director tags...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: i40e: Fixed queue reservation for XDP When XDP was configured on a system with a large number of CPUs and X722 NIC, there was a call trace involving a NULL pointer dereference. i40e 0000:87:00.0: Failed to obtain tracking for...
Astra Linux – Vulnerability in Bacula
In Bareos Director versions 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow vulnerability allows a malicious client to corrupt the director’s memory by sending overly large digest strings during the initialization of a verify job. Disabling verify jobs can mitigate this problem. This issue h...
Important: Red Hat Security Advisory: Updated Red Hat OpenStack Platform 16.2 director Operator container images
Updated container images are now available for director Operator for Red Hat OpenStack Platform 16.2 Train for RHEL 8.4. Red Hat OpenStack Platform provides the facilities for building, deploying and monitoring a private or public infrastructure-as-a-service IaaS cloud running on commonly availab...
CVE-2026-41012
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
CVE-2026-41012: Improper Certificate Validation
Traffic interception vulnerability in BOSH Director vCenter CPI allows attackers positioned between BOSH Director and vCenter to impersonate vCenter REST API and capture administrator credentials via HTTP Basic auth, leading to complete virtualization infrastructure takeover. An attacker who can...
PT-2026-83390
Name of the Vulnerable Software and Affected Versions BOSH vSphere CPI versions prior to 98.0.6 Description An issue in the communication protocol between BOSH Director and vCenter allows an attacker positioned between these two entities to intercept traffic and impersonate the vCenter REST API...
