11483 matches found
CVE-2021-38649
CVE-2021-38649 is part of the OMIGOD family affecting Open Management Infrastructure (OMI) used by Azure VM Management Extensions. The vulnerability is an Elevation of Privilege flaw in OMI that can permit a local attacker to escalate privileges on Linux-based Azure VMs where OMI is exposed. Expl...
CVE-2021-38648 Open Management Infrastructure Elevation of Privilege Vulnerability
...
CVE-2021-38648 Open Management Infrastructure Elevation of Privilege Vulnerability
...
CVE-2021-38647 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
...
CVE-2021-38647 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
...
CVE-2021-38647
CVE-2021-38647 (OMIGOD) is an unauthenticated remote code execution vulnerability in Microsoft Open Management Infrastructure (OMI) commonly deployed on Azure Linux VMs. Exploitation is achieved by sending a crafted HTTP request without the Authorization header, enabling code execution with the O...
CVE-2021-38645 Open Management Infrastructure Elevation of Privilege Vulnerability
...
CVE-2021-38645
Open Management Infrastructure (OMI) in Azure VM Management Extensions contains CVE-2021-38645, an Elevation of Privilege vulnerability. OMI runs with root privileges; when vulnerable, it can be exploited locally to escalate privileges on affected hosts. Microsoft addressed the OMIGOD set (CVE-20...
CVE-2021-38645 Open Management Infrastructure Elevation of Privilege Vulnerability
...
Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability
A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such as Azure, Office, BitLocker, and Visual Studio, including an actively...
CVE-2021-38649: Undefined Security Weakness
Open Management Infrastructure Elevation of Privilege Vulnerability...
CVE-2021-33690: Server-Side Request Forgery (SSRF)
Server-Side Request Forgery SSRF vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the...
CVE-2021-38645: Undefined Security Weakness
Open Management Infrastructure Elevation of Privilege Vulnerability...
CVE-2021-38647: Undefined Security Weakness
Open Management Infrastructure OMI Remote Code Execution Vulnerability...
CVE-2021-38648: Undefined Security Weakness
Open Management Infrastructure Elevation of Privilege Vulnerability...
CVE-2021-38647
Open Management Infrastructure Remote Code Execution Vulnerability Recent assessments: wvu-r7 at September 15, 2021 4:37am UTC reported: RCE PoC using ExecuteScript multi-line shell script execution: wvu@kharak:/Downloads$ curl -vs http://127.0.0.1:5985/wsman -H "Content-Type: application/soap+xm...
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
