305 matches found
CVE-2021-21983
CVE-2021-21975 VMware vRealize Operations vROps Manager API: escritura arbitraria de archivos que conduce a la ejecución remota de código RCE vRealize Operations vROps es una herramienta de gestión de operaciones de TI autónomas impulsada por IA, desde aplicaciones hasta infraestructura, para...
CVE-2021-21975
CVE-2021-21975 检测漏洞 CVE-2021-21975 的 Nmap 脚本 漏洞参考： https://app.howlermonkey.io/vulnerabilities/CVE-2021-21975 https://www.vmware.com/security/advisories/VMSA-2021-0004.html 博客 https://www.guayoyo.io/post/cve-2021-21975-vmware-vrealize-operations-manager-ssrf-lo-que-necesitas-saber 示例 nmap -p443...
CVE-2021-21972
CVE-2021-21972 VMware vSphere Client: carga de archivos no autorizada que conduce a la ejecución remota de código RCE El vSphere Web Client HTML5 es esencialmente una interfaz administrativa que permite la gestión de una instalación de vSphere. El vSphere Client proporciona al administrador acces...
CVE-2021-21975
Impacted Products VMware vRealize Operations 8.3.0、8.2.0、8.1.1、8.1.0、7.5.0 VMware Cloud Foundation 4.x、3.x vRealize Suite Lifecycle Manager 8.x Description On March 31, 2021, VMware officially released the risk notice of vmsa-2021-0004. The vulnerability numbers are cve-2021-21975 and...
CVE-2021-21975
CVE-2021-21975 VMware vRealize Operations Manager API 服务器端请求伪造（SSRF） vRealize Operations vROps 是一款由 AI 驱动的自助式 IT 运维管理工具，覆盖从应用到基础设施的范围，用于优化、规划并扩展 VMware Cloud 和 HCI 部署，同时统一公共云监控。VMware vRealize Operations Manager API 8.4 及所有早期版本 存在服务器端请求伪造（SSRF）漏洞。成功利用此漏洞可能导致读取或更新内部资源，并且在此情况下，攻击者可以轻松窃取 vROps...
CVE-2021-21972
CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Carga de archivos no autorizada para ejecución remota de código RCE El vSphere Web Client HTML5 es esencialmente una interfaz administrativa que permite la gestión de una instalación de vSphere. El vSphere Client proporciona a un administrador...
CVE-2021-22022
The vRealize Operations Manager API 8.x prior to 8.5 contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure...
CVE-2021-22026
The vRealize Operations Manager API 8.x prior to 8.5 contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure...
CVE-2021-22023
The vRealize Operations Manager API 8.x prior to 8.5 has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover...
CVE-2021-22027
The vRealize Operations Manager API 8.x prior to 8.5 contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure...
CVE-2022-31672
VMware vRealize Operations contains a privilege escalation vulnerability. A malicious actor with administrative network access can escalate privileges to root...
CVE-2022-31708
vRealize Operations vROps contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.4...
CVE-2022-31675
VMware vRealize Operations contains an authentication bypass vulnerability. An unauthenticated malicious actor with network access may be able to create a user with administrative privileges...
EUVD-2018-18722
Malware in sbrugna...
EUVD-2016-8310
Malware in sbrugna...
EUVD-2020-25208
Malware in sbrugna...
EUVD-2016-8315
Malware in sbrugna...
EUVD-2020-25209
Malware in sbrugna...