1486 matches found
CVE-2016-0930: Concurrent Execution using Shared Resource with Improper Synchronization
Pivotal Cloud Foundry PCF Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist...
CVE-2016-0897: Undefined Security Weakness
Pivotal Cloud Foundry PCF Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors...
CVE-2016-0927: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Pivotal Cloud Foundry PCF Ops Manager before 1.6.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2016-0883: Improper Authentication
Pivotal Cloud Foundry PCF Ops Manager before 1.5.14 and 1.6.x before 1.6.9 uses the same cookie-encryption key across different customers' installations, which allows remote attackers to bypass session authentication by leveraging knowledge of this key from another installation...
PT-2016-4442
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions prior to 1.5.14 Pivotal Cloud Foundry PCF Ops Manager versions 1.6.x prior to 1.6.9 Description The issue allows remote attackers to bypass session authentication by leveraging knowledge of the...
PT-2016-4483
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions 1.6.0 through 1.6.18 Pivotal Cloud Foundry PCF Ops Manager versions 1.7.0 through 1.7.9 Description The issue allows remote attackers to obtain SSH access to compilation VMs by connecting within a...
PT-2016-4480
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions prior to 1.6.17 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Recommendations For versions prior to 1.6.17,...
PT-2016-4452
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry PCF Ops Manager versions 1.6.x through 1.6.16 Pivotal Cloud Foundry PCF Ops Manager versions 1.7.x through 1.7.7 Description The issue affects Pivotal Cloud Foundry PCF Ops Manager when used with vCloud or vSphere, and it...
8 on 1 9: The Shadow-Brokers the leaked file description, technical analysis on-the vulnerability warning-the black bar safety net
! 0x01 exposure data with the equation and NSA relationship From the leaked data packet with the decompressed content to see, specifically for the firewall device attack and penetration action when the use of the tool set. According to the data exposed persons Shadow Brokers described, this packe...
CVE-2016-3494
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning...
Design/Logic Flaw
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle Healthcare Maste...
Code injection
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning...
CVE-2016-3494
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning...
CVE-2016-3494
CVE-2016-3494 affects Oracle Enterprise Manager Grid Control’s Ops Center (Enterprise Manager Ops Center) OS Provisioning subcomponent. The connected CNVD entry describes an unspecified vulnerability in this component that allows a remote attacker to cause a Denial of Service and impact data avai...
Unspecified Vulnerability in Oracle Enterprise Manager Grid Control Enterprise Manager Ops Center Component
Oracle Enterprise Manager Grid Control is a suite of systems management software from Oracle USA. The software provides centralized monitoring, lifecycle management and other functions for Oracle IT architecture. enterprise Manager Ops Center is one of the enterprise data center monitoring and...
CVE-2016-3494: Undefined Security Weakness
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote attackers to affect availability via vectors related to OS Provisioning...
PT-2016-5515
Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.1.4 through 12.3.2 Description The issue affects the availability of the system, allowing remote attackers to exploit it via vectors related to OS Provisioning in the Enterprise Manager Ops...
Pivotal Software PCF Ops Manager Authorization Issues Vulnerability
Pivotal Software PCF Ops Manager is a set of consoles for installing, upgrading and changing PCFs from Pivotal Software, USA. An authorization issue vulnerability exists in Pivotal Software PCF Ops Manager. A remote attacker could use this vulnerability to bypass the authentication mechanism...
Pivotal Software Ops Manager HTML Injection Vulnerability
Pivotal Software PCF Ops Manager is a set of consoles for installing, upgrading and changing PCFs from Pivotal Software, USA. An HTML injection vulnerability exists in Pivotal Software Ops Manager version 1.6.x prior to 1.6.17. An attacker can exploit this vulnerability to execute arbitrary scrip...
