CVE-2024-22238

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization...

CVE-2024-22238

CVE-2024-22238 affects VMware Aria Operations for Networks. The vulnerability is a cross-site scripting (XSS) flaw caused by improper input sanitization that could allow a malicious actor with admin privileges to inject code into user profile configurations. Impacted product: Aria Operations for ...

CVE-2024-22238

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization...

CVE-2024-22237

Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for Networks may exploit this vulnerability to escalate privileges to gain root access to the system...

CVE-2024-22237

Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for Networks may exploit this vulnerability to escalate privileges to gain root access to the system...

CVE-2024-22237

CVE-2024-22237 affects VMware Aria Operations for Networks. The vulnerability is a local privilege escalation where a console user with access can escalate to root privileges. Affected product/version evidence: Aria Operations for Networks, 6.x, with exploitation noted for local privilege escalat...

Security Bulletin: There are multiple vulnerabilities in IBM Db2 bundled with IBM Operations Analytics Predictive Insights

Summary IBM Operations Analytics Predictive Insights is vulnerable to denial of service, remote code execution, information disclosures and other vulnerabilities due to bundled product IBM ® Db2. This bulletin identifies the steps to address the vulnerabilities. Vulnerability Details Refer to the...

Cybozu KUNAI for Android vulnerable to denial-of-service (DoS)

Overview Cybozu KUNAI for Android is a client application for using Cybozu products from an Android device. Cybozu KUNAI for Android contains an issue allowing to send massive requests to the connected Cybozu product if a user performs certain operations on KUNAI, which may result in repeated...

VMware Aria Operations Security Vulnerability

VMware Aria Operations is a unified, AI-driven, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations for Networks. An attacker could exploit the vulnerability to escalate...

PT-2024-1683

Name of the Vulnerable Software and Affected Versions Aria Operations for Networks affected versions not specified Description The issue is related to a local privilege escalation vulnerability in Aria Operations for Networks. A console user with access to the system may exploit this vulnerabilit...

VMware Aria Operations Security Vulnerability

VMware Aria Operations is a unified, AI-driven, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations for Networks. An attacker could exploit the vulnerability to access sensitive...

Allegro Authorization Issues Vulnerability

Allegro is a cross-platform library open-sourced by Allegro primarily for video game and multimedia programming. A security vulnerability exists in Allegro AI ClearML that stems from a lack of authentication, which allows remote attackers to arbitrarily access, create, modify, and delete files...

VMware Aria Operations Cross-Site Scripting Vulnerability

VMware Aria Operations is a unified, AI-driven, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations for Networks. An attacker could exploit this vulnerability to perform...

VMware Aria Operations Cross-Site Scripting Vulnerability

VMware Aria Operations is a unified, AI-driven, self-driving IT operations management platform for private, hybrid and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations for Networks. An attacker could exploit this vulnerability to perform...

CVE-2024-22237: Improper Privilege Management

Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for Networks may exploit this vulnerability to escalate privileges to gain root access to the system...

CVE-2024-22241: Improper Neutralization of Input During Web Page Generation

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges can inject a malicious payload into the login banner and takeover the user account...

CVE-2024-22239: Improper Privilege Management

Aria Operations for Networks contains a local privilege escalation vulnerability. A console user with access to Aria Operations for Networks may exploit this vulnerability to escalate privileges to gain regular shell access...

VMware Aria Operations Security Vulnerability

VMware Aria Operations is a unified, AI-driven, self-driving IT operations management platform for private, hybrid, and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations. An attacker could exploit the vulnerability to escalate privileges...

CVE-2024-22240: Files or Directories Accessible to External Parties

Aria Operations for Networks contains a local file read vulnerability. A malicious actor with admin privileges may exploit this vulnerability leading to unauthorized access to sensitive information...

CVE-2024-22238: Improper Neutralization of Input During Web Page Generation

Aria Operations for Networks contains a cross site scripting vulnerability. A malicious actor with admin privileges may be able to inject malicious code into user profile configurations due to improper input sanitization...