Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2022/03/01 12:0 a.m.429 views

ESXi 6.5 / 6.7 / 7.0 Multiple Vulnerabilities (VMSA-2022-0004)

The remote VMware ESXi host is version 6.5, 6.7 or 7.0 and is affected by multiple vulnerabilities, including the following: - VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtua...

7.8CVSS7.3AI score0.01005EPSS
Exploits0References6
NVD
NVD
added 2022/02/16 5:15 p.m.20 views

CVE-2021-22042

VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high privileged user...

7.8CVSS0.00249EPSS
Exploits0References1
OSV
OSV
added 2022/02/16 5:15 p.m.1 views

CVE-2021-22042

VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high privileged user...

7.8CVSS7.1AI score0.00249EPSS
Exploits0References1
Prion
Prion
added 2022/02/16 5:15 p.m.21 views

Improper access control

VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high privileged user...

4.6CVSS7.2AI score0.00249EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2022/02/16 4:37 p.m.22 views

CVE-2021-22042

VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high privileged user...

7.4AI score0.00249EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/02/15 12:0 a.m.2 views

VMWare Cloud Foundation (ESXi) 访问控制错误漏洞

Vmware VMware Cloud Foundation is an all-in-one hybrid cloud platform from Vmware. The platform includes features such as operations automation, infrastructure auto-configuration, and integrated lifecycle management. An access control error vulnerability exists in VMWare Cloud Foundation ESXi tha...

7.8CVSS7.5AI score0.00249EPSS
Exploits0References4
Rows per page
Query Builder