Lucene search
+L

247 matches found

OSV
OSV
•added 2016/06/17 3:59 p.m.•9 views

CVE-2016-3643

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."...

7.8CVSS5.8AI score0.03674EPSS
SaveExploits5References4
OSV
OSV
•added 2016/06/17 3:59 p.m.•15 views

CVE-2016-3642

The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

9.8CVSS6AI score0.13268EPSS
SaveExploits2References3
Prion
Prion
•added 2016/06/17 3:59 p.m.•25 views

Design/Logic Flaw

The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

10CVSS8.1AI score0.13268EPSS
SaveExploits2References3Affected Software1
Vulnrichment
Vulnrichment
•added 2016/06/17 3:00 p.m.•17 views

CVE-2016-3643

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."...

7.7AI score0.03674EPSS
SaveExploits5References3
CVE
CVE
•added 2016/06/17 3:00 p.m.•1073 views

CVE-2016-3643

SolarWinds Virtualization Manager

7.8CVSS7.6AI score0.03674EPSS
SaveIn wildExploits5References4Affected Software1
CVE
CVE
•added 2016/06/17 3:00 p.m.•130 views

CVE-2016-3642

Summary: CVE-2016-3642 affects SolarWinds Virtualization Manager; the RMI service (port 1099/TCP) can be exploited via a crafted serialized Java object to achieve remote code execution, due to insecure deserialization tied to Apache Commons Collections (ACC). The vulnerability is present in 6.3.1...

10CVSS9.3AI score0.13268EPSS
SaveExploits2References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/06/17 12:00 a.m.•3 views

CVE-2016-3643: Undefined Security Weakness

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."...

7.8CVSS7.4AI score0.03674EPSS
SaveExploits5References2
attackerkb
attackerkb
•added 2016/06/17 12:00 a.m.•65 views

CVE-2016-3643

SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by “sudo cat /etc/passwd.” Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.8CVSS7.7AI score0.03674EPSS
SaveIn wildExploits5References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/06/17 12:00 a.m.•3 views

CVE-2016-3642: Undefined Security Weakness

The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections ACC library...

10CVSS8.6AI score0.13268EPSS
SaveExploits2References1
exploitpack
exploitpack
•added 2016/06/16 12:00 a.m.•61 views

SolarWinds Virtualization Manager - Local Privilege Escalation

SolarWinds Virtualization Manager - Local Privilege Escalation Product: Solarwinds Virtualization Manager Vendor: Solarwinds Vulnerable Versions: 6.3.1 Tested Version: 6.3.1 Vendor Notification: April 25th, 2016 Vendor Patch Availability to Customers: June 1st, 2016 Public Disclosure: June 14th,...

7.2CVSS7.8AI score0.03674EPSS
SaveExploits5
Tenable Nessus
Tenable Nessus
•added 2016/06/16 12:00 a.m.•70 views

RHEL 6 : qemu-kvm-rhev (RHSA-2016:1224)

An update for qemu-kvm-rhev is now available for RHEV-H and Agents for RHEL-6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

8.8CVSS7.9AI score0.00916EPSS
SaveExploits0References3
Exploit DB
Exploit DB
•added 2016/06/16 12:00 a.m.•63 views

SolarWinds Virtualization Manager - Local Privilege Escalation

Product: Solarwinds Virtualization Manager Vendor: Solarwinds Vulnerable Versions: 6.3.1 Tested Version: 6.3.1 Vendor Notification: April 25th, 2016 Vendor Patch Availability to Customers: June 1st, 2016 Public Disclosure: June 14th, 2016 Vulnerability Type: Security Misconfiguration CVE Referenc...

7.8CVSS7.5AI score0.03674EPSS
SaveExploits5
Packet Storm
Packet Storm
•added 2016/06/15 12:00 a.m.•89 views

Solarwinds Virtualization Manager 6.3.1 Java Deserialization

Java Deserialization in Solarwinds Virtualization Manager 6.3.1 Product: Solarwinds Virtualization Manager Vendor: Solarwinds Vulnerable Versions: 6.3.1 Tested Version: 6.3.1 Vendor Notification: April 25th, 2016 Vendor Patch Availability to Customers: June 1st, 2016 Public Disclosure: June 14th,...

10CVSS0.1AI score0.13268EPSS
SaveExploits2
OpenVAS
OpenVAS
•added 2016/06/15 12:00 a.m.•18 views

SolarWinds Virtualization Manager Detection (HTTP)

HTTP based detection of SolarWinds Virtualization Manager. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2016/06/13 5:33 p.m.•51 views

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for RHEV-H and Agents for RHEL-6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabilit...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2016/05/10 5:04 a.m.•39 views

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2016/05/10 5:04 a.m.•51 views

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 Kilo for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2016/05/10 5:04 a.m.•56 views

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 8.0 Liberty. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.8CVSS7.5AI score0.00916EPSS
SaveExploits0References2
NVD
NVD
•added 2015/09/08 3:59 p.m.•31 views

CVE-2015-1841

The Web Admin interface in Red Hat Enterprise Virtualization Manager RHEV-M allows local users to bypass the timeout function by selecting a VM in the VM grid view...

3.7CVSS6.2AI score0.00325EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2015/09/08 3:00 p.m.•47 views

CVE-2015-1841

The Web Admin interface in Red Hat Enterprise Virtualization Manager RHEV-M allows local users to bypass the timeout function by selecting a VM in the VM grid view...

6.2AI score0.00325EPSS
SaveExploits0References2
Rows per page
Query Builder