Lucene search
+L

161 matches found

Citrix
Citrix
added 2020/06/12 12:0 a.m.9 views

Updating vCPU in Nutanix prov scheme via Powershell, new machines are not getting the new setting

Tried to decrease the number of cores per vCPU in a Nutanix machine catalog. However, the new machines did not have the desired change...

7AI score
Exploits0
NVD
NVD
added 2020/05/06 1:15 p.m.16 views

CVE-2020-2186

A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.50.1 and earlier allows attackers to provision instances...

4.3CVSS4.6AI score0.00636EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/04/03 7:5 a.m.30 views

CVE-2018-17954 crowbar provision leaks admin password to all nodes in cleartext

An Improper Privilege Management in crowbar of SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud 9, SUSE OpenStack Cloud Crowbar 8, SUSE OpenStack Cloud Crowbar 9 allows root users on any crowbar managed node to cause become root on any other node. This issue affects: SUSE...

9.3CVSS9.2AI score0.00318EPSS
Exploits0References1
NVD
NVD
added 2019/11/21 3:15 p.m.29 views

CVE-2019-16548

A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineClouddoProvision could be used to provision new agents...

8.8CVSS8.6AI score0.00691EPSS
Exploits0References2
OSV
OSV
added 2019/11/21 3:15 p.m.24 views

CVE-2019-16548

A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineClouddoProvision could be used to provision new agents...

8.8CVSS6.5AI score
Exploits0References2
Prion
Prion
added 2019/11/21 3:15 p.m.19 views

Cross site request forgery (csrf)

A cross-site request forgery vulnerability in Jenkins Google Compute Engine Plugin 4.1.1 and earlier in ComputeEngineClouddoProvision could be used to provision new agents...

6.8CVSS8.5AI score0.00691EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2019/11/09 2:15 a.m.26 views

CVE-2019-5696

NVIDIA Virtual GPU Manager, all versions, contains a vulnerability in which the provision of an incorrectly sized buffer by a guest VM leads to GPU out-of-bound access, which may lead to a denial of service...

5.5CVSS6.7AI score0.00312EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2019/07/03 1:36 p.m.48 views

CVE-2019-10183

Virt-install1 utility used to provision new virtual machines has introduced an option '--unattended' to create VMs without user interaction. This option accepts guest VM password as command line arguments, thus leaking them to others users on the system via process listing. It was introduced...

3.3CVSS3.8AI score0.00404EPSS
Exploits0
OSV
OSV
added 2019/03/15 8:29 p.m.3 views

CVE-2018-17956

In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list...

7.8CVSS5.7AI score0.00341EPSS
Exploits0References1
NVD
NVD
added 2019/03/15 8:29 p.m.25 views

CVE-2018-17956

In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list...

7.8CVSS5AI score0.00341EPSS
Exploits0References1
Prion
Prion
added 2019/03/15 8:29 p.m.20 views

Design/Logic Flaw

In yast2-samba-provision up to and including version 1.0.1 the password for samba shares was provided on the command line to tools used by yast2-samba-provision, allowing local attackers to read them in the process list...

2.1CVSS4.2AI score0.00341EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2019/03/15 8:0 p.m.56 views

CVE-2018-17956

CVE-2018-17956 affects the yast2-samba-provision component. Up to and including version 1.0.1, it leaked Samba-share passwords by passing them on the command line to tools used by yast2-samba-provision, enabling local attackers to read credentials in the process list. Several connected advisories...

7.8CVSS5.5AI score0.00341EPSS
Exploits0References1Affected Software1
Drupal
Drupal
added 2019/01/09 12:0 a.m.11 views

Provision - Moderately critical - Access bypass - SA-CONTRIB-2019-002

Aegir is a Web hosting control panel program that provides a Drupal-based graphical interface designed to simplify deploying, managing and upgrading an entire network of Drupal, Wordpress and CiviCRM Web sites. The Provision module is a core piece of the Aegir platform. This module doesn't...

6.7AI score
Exploits0References10
OpenVAS
OpenVAS
added 2018/11/28 12:0 a.m.28 views

HPE Moonshot Provision Manager Detection (HTTP)

Detection of HPE Moonshot Provision Manager. The script sends a connection request to the server and attempts to detect HPE Moonshot Provision Manager. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

7AI score
Exploits0References1
RedHat Linux
RedHat Linux
added 2018/06/27 10:2 a.m.6 views

ovirt-engine-setup: unfiltered db password in engine-backup log

A flaw was found in ovirt-engine. When engine-backup was run with one of the options "--provisiondb", the database username and password were logged in cleartext. Sharing the provisioning log might inadvertently leak database passwords...

9.8CVSS5.7AI score0.00994EPSS
Exploits0References5
Citrix
Citrix
added 2017/09/18 12:0 a.m.8 views

How to obtain expiration date of the "Distribution Provisioning Profile (.MOBILEPROVISION)" file of an iOS (.iPA) application

What is the "Distribution Provisioning Profile .MOBILEPROVISION" File used by Apple Xcode, a software developmentIDEoften used for creating iPhone apps; contains a provisioning profile, which allows an app to be uploaded to a limited number of iPhones or iPads while it is still in development. Yo...

6.7AI score
Exploits0
HPE Security Bulletins
HPE Security Bulletins
added 2017/05/04 12:0 a.m.6 views

HPESBHF03736 rev.1 - HPE Aruba and HPE ProVision network switches using Diffie Hellman Group1 Sha1 Exchange Algorithm, Remote Disclosure of Information

Potential Security Impact: Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Provision Network Switches xx.16.01.0006, xx.15.18.0007, xx.15.16.0012m and previous versions HPE Aruba Network Switches xx.16.01.0006, xx.15.18.0007, xx.15.16.0012m an...

6AI score
Exploits0
RedHat Linux
RedHat Linux
added 2016/08/16 7:9 a.m.10 views

Moderate: Red Hat Bug Fix Advisory: Satellite 6.2.1 bug fix update

Updated Satellite 6.2 packages that fix several bugs are now available. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other client systems. It performs...

8.8CVSS6.8AI score0.02672EPSS
Exploits0References12
Fedora
Fedora
added 2014/02/05 3:34 a.m.43 views

[SECURITY] Fedora 20 Update: openstack-nova-2013.2.1-4.fc20

OpenStack Compute codename Nova is open source software designed to provision and manage large networks of virtual machines, creating a redundant and scalable cloud computing platform. It gives you the software, control panels, and APIs required to orchestrate a cloud, including running instances...

7.1CVSS2.4AI score0.02159EPSS
Exploits0
Prion
Prion
added 2012/06/27 12:55 a.m.20 views

Cross site scripting

Cross-site scripting XSS vulnerability in the hostingtasklogtable function in modules/hosting/task/hostingtask.module in the Hostmaster Aegir module 6.x-1.x before 6.x-1.9 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a Drush log...

2.1CVSS5.7AI score0.01621EPSS
Exploits1References7Affected Software1
Rows per page
Query Builder