Lucene search
+L

13132 matches found

Zero Day Initiative
Zero Day Initiative
•added 2020/10/28 12:00 a.m.•40 views

Micro Focus Operations Bridge Manager WatchServerAPI Deserialization Of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Micro Focus Operations Bridge Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

8.8CVSS3.6AI score0.7699EPSS
SaveExploits6References1
Metasploit
Metasploit
•added 2020/10/28 12:00 a.m.•195 views

Micro Focus UCMDB Java Deserialization Unauthenticated Remote Code Execution

This module exploits two vulnerabilities, that when chained allow an attacker to achieve unauthenticated remote code execution in Micro Focus UCMDB. UCMDB included in versions 2020.05 and below of Operations Bridge Manager are affected, but this module can probably also be used to exploit...

6.3AI score
SaveExploits0
Metasploit
Metasploit
•added 2020/10/28 12:00 a.m.•107 views

Micro Focus Operations Bridge Manager Authenticated Remote Code Execution

This module exploits an authenticated Java deserialization that affects a truckload of Micro Focus products: Operations Bridge Manager, Application Performance Management, Data Center Automation, Universal CMDB, Hybrid Cloud Management and Service Management Automation. However this module was on...

8.8CVSS8.7AI score0.7699EPSS
SaveExploits6
Metasploit
Metasploit
•added 2020/10/28 12:00 a.m.•127 views

Micro Focus Operations Bridge Manager / Reporter Local Privilege Escalation

This module exploits an incorrectly permissioned folder in Micro Focus Operations Bridge Manager and Operations Bridge Reporter. An unprivileged user such as Guest can drop a JSP file in an exploded WAR directory and then access it without authentication by making a request to the OBM / OBR serve...

5.9AI score
SaveExploits0
NVD
NVD
•added 2020/10/27 5:15 p.m.•64 views

CVE-2020-11858

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge containerized. The vulneravility affects: 1. Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10...

7.8CVSS7.8AI score0.02687EPSS
SaveExploits2References4
NVD
NVD
•added 2020/10/27 5:15 p.m.•53 views

CVE-2020-11854

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge containerized vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge containerized and Application Performance Management. The vulneravili...

10CVSS9.8AI score0.74449EPSS
SaveExploits3References5
osv_cve
osv_cve
•added 2020/10/27 5:15 p.m.•22 views

CVE-2020-11858

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge containerized. The vulneravility affects: 1. Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10...

7.8CVSS6AI score0.02687EPSS
SaveExploits2References4
Prion
Prion
•added 2020/10/27 5:15 p.m.•38 views

Design/Logic Flaw

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge containerized vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge containerized and Application Performance Management. The vulneravili...

10CVSS9.7AI score0.74449EPSS
SaveExploits3References5Affected Software3
Prion
Prion
•added 2020/10/27 5:15 p.m.•37 views

Design/Logic Flaw

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge containerized. The vulneravility affects: 1. Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10...

4.6CVSS7.7AI score0.02687EPSS
SaveExploits2References4Affected Software2
Cvelist
Cvelist
•added 2020/10/27 4:45 p.m.•70 views

CVE-2020-11858 Code execution with escalated privilegesn vlnerability in Operation bridge Manager and Operations Bridge (containerized) products.

Code execution with escalated privileges vulnerability in Micro Focus products Operation Bridge Manager and Operation Bridge containerized. The vulneravility affects: 1. Operation Bridge Manager versions: 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63,10.62, 10.61, 10.60, 10.12, 10.11, 10.10...

7.8CVSS7.8AI score0.02687EPSS
SaveExploits2References4
CVE
CVE
•added 2020/10/27 4:45 p.m.•98 views

CVE-2020-11858

CVE-2020-11858 is a local privilege-escalation vulnerability affecting Micro Focus Operations Bridge Manager (OBM) and Operations Bridge Reporter/Containerized OBM. Affected OBM versions include 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63, 10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and earli...

7.8CVSS7.7AI score0.02687EPSS
SaveExploits2References4Affected Software2
Cvelist
Cvelist
•added 2020/10/27 4:29 p.m.•50 views

CVE-2020-11854 Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge (containerized) products.

Arbitrary code execution vlnerability in Operation bridge Manager, Application Performance Management and Operations Bridge containerized vulnerability in Micro Focus products products Operation Bridge Manager, Operation Bridge containerized and Application Performance Management. The vulneravili...

9.8CVSS9.8AI score0.74449EPSS
SaveExploits3References5
CVE
CVE
•added 2020/10/27 4:29 p.m.•153 views

CVE-2020-11854

Summary (CVE-2020-11854) : The Micro Focus UCMDB component is susceptible to remote code execution. Impacted products include: Operation Bridge Manager versions 2020.05, 2019.11, 2019.05, 2018.11, 2018.05, 10.63, 10.62, 10.61, 10.60, 10.12, 10.11, 10.10 and earlier; Operations Bridge (containeriz...

10CVSS9.7AI score0.74449EPSS
SaveIn wildExploits3References5Affected Software3
Trend Micro Simply Security
Trend Micro Simply Security
•added 2020/10/27 12:36 p.m.•33 views

Trend Micro HouseCall for Home Networks: Giving You a Free Hand in Home Network Security

Remember when only desktop computers in our homes had connections to the internet? Thanks to the latest developments in smart device technology, almost everything now can be connected— security cameras, smart TVs, gaming consoles, and network storage, to name just a few. While a home network...

8.1AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
•added 2020/10/27 12:00 a.m.•18 views

How to protect a Docker host before deploying applications

Watch how quick and easy it is to use Trend Micro Cloud One™ to protect a Docker® host before deploying an application in this demo by Marc Tabago, Sales Engineer at Trend Micro...

1.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/10/27 12:00 a.m.•19 views

PT-2020-12900 · Micro Focus · Operations Bridge +1

Name of the Vulnerable Software and Affected Versions: Operation Bridge Manager versions 10.10 through 2020.05 Operations Bridge containerized versions 2017.11 through 2020.05 Description: The issue affects Micro Focus products, allowing local attackers to execute code with escalated privileges...

7.8CVSS7.5AI score0.02687EPSS
SaveExploits2References8
NCSC
NCSC
•added 2020/10/27 12:00 a.m.•21 views

Vulnerabilities fixed in Trend Micro Antivirus for Mac

Trend Micro has fixed vulnerabilities in Antivirus for Mac. The vulnerabilities allow a locally authenticated malicious agent to able to cause a denial-of-service or to obtain system data obtain. Trend Micro categorizes these vulnerabilities according to the CVSSv3 method with a highest score of...

6.9CVSS6.6AI score0.00896EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2020/10/26 12:00 a.m.•64 views

Trend Micro Antivirus for Mac Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.2CVSS4.1AI score0.00322EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2020/10/26 12:00 a.m.•58 views

Trend Micro Antivirus for Mac Error Message Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Trend Micro Antivirus for Mac. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists...

6CVSS3.2AI score0.00896EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/10/26 12:00 a.m.•6 views

PT-2020-16594

Name of the Vulnerable Software and Affected Versions Trend Micro Antivirus for Mac 2020 Consumer Description The issue allows kernel pointers and debug messages to leak to userland if exploited. An attacker must first obtain the ability to execute high-privileged code on the target system in ord...

4.4CVSS0.00896EPSS
SaveExploits0References4
Rows per page
Query Builder