EUVD-2016-3180

Malware in sbrugna...

EUVD-2021-9155

Malicious code in bioql PyPI...

Remote code execution

VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. A malicious actor with network access may exploit this issue causing unauthorised remote code execution on vRealize Business for Cloud Virtual Appliance...

CVE-2021-21984: Missing Authorization

VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. A malicious actor with network access may exploit this issue causing unauthorised remote code execution on vRealize Business for Cloud Virtual Appliance...

PT-2021-3068

Name of the Vulnerable Software and Affected Versions VMware vRealize Business for Cloud versions prior to 7.6.0 Description The issue is related to insufficient argument validation in a command, allowing a remote attacker to execute arbitrary commands on the target system. This can lead to...

VMSA-2021-0007:VMware vRealize Business for Cloud updates address a remote code execution vulnerability

Advisory ID: VMSA-2021-0007 CVSSv3 Range: 9.8 Issue Date:2021-05-05 Updated On: 2021-05-05 Initial Advisory CVEs: CVE-2021-21984 Synopsis: VMware vRealize Business for Cloud updates address a remote code execution vulnerability CVE-2021-21984 RSS Feed Download PDF Download Text File Share this pa...

VMware vRealize Business Unspecified Stored XSS (VMSA-2016-0003)

The version of VMware vRealize Business running on the remote host is 8.x prior to 8.2.5. It is, therefore, affected by a stored cross-site scripting vulnerability due to improper validation of user-supplied input. An authenticated, remote attacker can exploit this issue, via a specially crafted...

CVE-2016-2075

Cross-site scripting XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2075

Cross-site scripting XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

VMware vRealize Business Advanced and Enterprise Cross-Site Scripting Vulnerability

VMware vRealize Business formerly known as IT Business Management Suite is a tool from VMware that can be used to visualize and control the cost of cloud computing environments and IT services. The tool provides cloud business management, IT financial management, and service quality management...

CVE-2016-2075: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

PT-2016-5002

Name of the Vulnerable Software and Affected Versions VMware vRealize Business Advanced and Enterprise versions prior to 8.2.5 Description A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML. This can be done via unspecified vectors, potential...