Lucene search
+L

83 matches found

NVD
NVD
•added 2025/01/31 10:15 p.m.•24 views

CVE-2024-57587

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to /api/auth/login...

9.1CVSS0.00582EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/31 10:15 p.m.•72 views

CVE-2024-55062

Code Injection vulnerability in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/...

9.8CVSS0.01109EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/31 10:15 p.m.•12 views

CVE-2024-53356

Weak JWT Secret vulnerabilitiy in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the...

9.8CVSS5.8AI score0.00663EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/31 10:15 p.m.•25 views

CVE-2024-53355

Multiple incorrect access control issues in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers, with low privileges, to 1 add an admin user via the /api/user/addalias route; 2 modifiy a user via the /api/user/updatealias route; 4 delete users via the...

8.8CVSS0.0055EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/31 10:15 p.m.•20 views

CVE-2024-53354

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 user parameter to /api/management/findfilterlist; the 2 user or 3 filter parameter to /api/audit/findmetawatcher; the 4 user...

6.5CVSS0.00501EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/31 10:15 p.m.•13 views

CVE-2024-53354

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 user parameter to /api/management/findfilterlist; the 2 user or 3 filter parameter to /api/audit/findmetawatcher; the 4 user...

6.5CVSS6.1AI score0.00501EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/31 10:15 p.m.•13 views

CVE-2024-53355

Multiple incorrect access control issues in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers, with low privileges, to 1 add an admin user via the /api/user/addalias route; 2 modifiy a user via the /api/user/updatealias route; 4 delete users via the...

8.8CVSS5.8AI score0.0055EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/31 10:15 p.m.•16 views

CVE-2024-53357

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers, with low privileges, to 1 add an admin user via the /api/user/addalias route; 2 modifiy a user via the /api/user/updatealiasroute; 4 delete users via the /api/user/delali...

7.5CVSS5.9AI score0.00511EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/31 10:15 p.m.•25 views

CVE-2024-53357

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers, with low privileges, to 1 add an admin user via the /api/user/addalias route; 2 modifiy a user via the /api/user/updatealiasroute; 4 delete users via the /api/user/delali...

7.5CVSS0.00511EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/31 12:00 a.m.•30 views

CVE-2024-55062

Code Injection vulnerability in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/...

0.01109EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/01/31 12:00 a.m.•27 views

CVE-2024-57587

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to /api/auth/login...

0.00582EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/31 12:00 a.m.•11 views

CVE-2024-55062

Code Injection vulnerability in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary code to /api/license/sendlicense/...

10AI score0.01109EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/31 12:00 a.m.•12 views

CVE-2024-57587

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via the 1 username or 2 password parameter to /api/auth/login...

8.5AI score0.00582EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/31 12:00 a.m.•13 views

EasyVirt DC Scope和EasyVirt CO2 Scope 安全漏洞

EasyVirt DC Scope and EasyVirt CO2 Scope are both products of the French company EasyVirt.EasyVirt DC Scope is a monitoring and management solution for VMware Virtualization VMware.EasyVirt CO2 Scope is a real-time monitoring and control solution for IT services, virtual machines and servers in...

9.8CVSS6.5AI score0.00663EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•0 views

CVE-2024-53356: Use of Hard-coded Credentials

Weak JWT Secret vulnerabilitiy in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote attackers to generate JWT for privilege escalation. The HMAC secret used for generating tokens is hardcoded as "somerandomaccesstoken". A weak HMAC secret poses a risk because attackers can use the...

9.8CVSS5.8AI score0.00663EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•0 views

CVE-2024-53357: Use of Hard-coded Credentials

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers, with low privileges, to 1 add an admin user via the /api/user/addalias route; 2 modifiy a user via the /api/user/updatealiasroute; 4 delete users via the /api/user/delali...

7.5CVSS5.9AI score0.00511EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/01/31 12:00 a.m.•23 views

PT-2025-2960 · Easyvirt · Easyvirt Dcscope

Name of the Vulnerable Software and Affected Versions: EasyVirt DCScope versions 8.6.0 and earlier CO2Scope versions 1.3.0 and earlier Description: The issue allows remote attackers to generate JSON Web Tokens JWTs for privilege escalation due to a weak JWT secret. The HMAC secret used for...

9.8CVSS7.3AI score0.00663EPSS
SaveExploits1References4
CVE
CVE
•added 2025/01/31 12:00 a.m.•128 views

CVE-2024-53355

Multiple incorrect access control issues exist in EasyVirt DCScope (versions <= 8.6.0) and EasyVirt CO2Scope (versions

8.4AI score0.0055EPSS
SaveExploits1References1Affected Software2
CVE
CVE
•added 2025/01/31 12:00 a.m.•104 views

CVE-2024-53357

Multiple SQL injection vulnerabilities exist in EasyVirt DCScope (versions <= 8.6.0) and EasyVirt CO2Scope (versions

7.8AI score0.00511EPSS
SaveExploits1References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•1 views

CVE-2024-53354: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in EasyVirt DCScope = 8.6.0 and CO2Scope = 1.3.0 allows remote authenticated attackers to execute arbitrary SQL commands via the 1 user parameter to /api/management/findfilterlist; the 2 user or 3 filter parameter to /api/audit/findmetawatcher; the 4 user...

6.5CVSS6.3AI score0.00501EPSS
SaveExploits1References1
Rows per page
Query Builder