9771 matches found
CVE-2021-38649
CVE-2021-38649 is part of the OMIGOD family affecting Open Management Infrastructure (OMI) used by Azure VM Management Extensions. The vulnerability is an Elevation of Privilege flaw in OMI that can permit a local attacker to escalate privileges on Linux-based Azure VMs where OMI is exposed. Expl...
CVE-2021-38648 Open Management Infrastructure Elevation of Privilege Vulnerability
...
CVE-2021-38648 Open Management Infrastructure Elevation of Privilege Vulnerability
...
CVE-2021-38647
CVE-2021-38647 (OMIGOD) is an unauthenticated remote code execution vulnerability in Microsoft Open Management Infrastructure (OMI) commonly deployed on Azure Linux VMs. Exploitation is achieved by sending a crafted HTTP request without the Authorization header, enabling code execution with the O...
CVE-2021-38647 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
...
CVE-2021-38647 Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
...
CVE-2021-38645 Open Management Infrastructure Elevation of Privilege Vulnerability
...
CVE-2021-38645 Open Management Infrastructure Elevation of Privilege Vulnerability
...
CVE-2021-38645
Open Management Infrastructure (OMI) in Azure VM Management Extensions contains CVE-2021-38645, an Elevation of Privilege vulnerability. OMI runs with root privileges; when vulnerable, it can be exploited locally to escalate privileges on affected hosts. Microsoft addressed the OMIGOD set (CVE-20...
Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability
A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such as Azure, Office, BitLocker, and Visual Studio, including an actively...
CVE-2021-38647
Open Management Infrastructure Remote Code Execution Vulnerability Recent assessments: wvu-r7 at September 15, 2021 4:37am UTC reported: RCE PoC using ExecuteScript multi-line shell script execution: wvu@kharak:/Downloads$ curl -vs http://127.0.0.1:5985/wsman -H "Content-Type: application/soap+xm...
CVE-2021-38649
Open Management Infrastructure Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2021-38645
Open Management Infrastructure Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Open Management Infrastructure Elevation of Privilege Vulnerability
...
Open Management Infrastructure Elevation of Privilege Vulnerability
...
Open Management Infrastructure Elevation of Privilege Vulnerability
...
Microsoft Azure Open Management Infrastructure 权限许可和访问控制问题漏洞
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A vulnerability exists in Microsoft Azure Open Management Infrastructure with privilege license and access control issues. The following products and versions are...
microsoft Azure Open Management Infrastructure 权限许可和访问控制问题漏洞
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A vulnerability exists in Microsoft Azure Open Management Infrastructure with privilege permission and access control issues. The following products and versions are...
PT-2021-5101 · Microsoft · Open Management Infrastructure
Name of the Vulnerable Software and Affected Versions: Open Management Infrastructure OMI affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Open Management Infrastructure OMI. It is associated with inadequate access controls in OMI...
Siemens SIMATIC CP (Update A)
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: SIMATIC CP 1543-1 incl. SIPLUS variants and SIMATIC CP 1545-1 Vulnerability: Cleartext Storage of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a follow-up to...