305 matches found
CVE-2021-21975
CVE-2021-21975 CVE-2021-21975 の脆弱性をチェックする Nmap スクリプト 脆弱性リファレンス: https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html ブログ https://www.guayoyo.io/post/cve-2021-21975-vmware-vrealize-operations-manager-ssrf-lo-que-necesitas-saber 例...
CVE-2021-21983
CVE-2021-21975 Beliebiger Datei-Schreibzugriff in der VMware vRealize Operations vROps Manager API führt zu Remote Code Execution RCE vRealize Operations vROps ist ein Tool für selbstfahrendes, KI-gestütztes IT-Operations-Management – von Anwendungen bis zur Infrastruktur – das VMware-Cloud- und...
CVE-2021-21972
CVE-2021-21972 CVE-2021-21972 VMware vSphere Client: caricamento file non autorizzato verso esecuzione di codice in remoto RCE Il vSphere Web Client HTML5 è essenzialmente un'interfaccia amministrativa che consente la gestione di un'installazione vSphere. Il vSphere Client offre all'amministrator...
CVE-2021-21975
CVE-2021-21975 VMware vRealize Operations Manager API Server Side Request Forgery SSRF vRealize Operations vROps è uno strumento che offre una gestione autonoma delle operazioni IT basata sull'intelligenza artificiale, dalle applicazioni all'infrastruttura, per ottimizzare, pianificare e scalare ...
CVE-2021-21972
CVE-2021-21972 VMware vSphere Client Upload di File Non Autorizzato per l'Esecuzione di Codice Remota RCE Il vSphere Web Client HTML5 è essenzialmente un'interfaccia amministrativa che consente la gestione di un'installazione vSphere. Il vSphere Client fornisce a un amministratore l'accesso alle...
CVE-2021-21975
Produtos Afetados VMware vRealize Operations 8.3.0、8.2.0、8.1.1、8.1.0、7.5.0 VMware Cloud Foundation 4.x、3.x vRealize Suite Lifecycle Manager 8.x Descrição Em 31 de março de 2021, a VMware lançou oficialmente o aviso de risco do vmsa-2021-0004. Os números de vulnerabilidade são cve-2021-21975 e...
CVE-2021-22022
The vRealize Operations Manager API 8.x prior to 8.5 contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure...
CVE-2021-22026
The vRealize Operations Manager API 8.x prior to 8.5 contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure...
CVE-2021-22023
The vRealize Operations Manager API 8.x prior to 8.5 has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover...
CVE-2021-22027
The vRealize Operations Manager API 8.x prior to 8.5 contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure...
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...
CVE-2022-31708
vRealize Operations vROps contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4...
CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...
EUVD-2018-18722
Malware in sbrugna...
EUVD-2016-8310
Malware in sbrugna...
EUVD-2020-25209
Malware in sbrugna...
EUVD-2020-25208
Malware in sbrugna...
EUVD-2016-8315
Malware in sbrugna...