Lucene search
+L

13330 matches found

BDU FSTEC
BDU FSTEC
added 2022/07/22 12:0 a.m.9 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

8.5CVSS6.5AI score0.01775EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/22 12:0 a.m.11 views

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges and expose protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and expose sensitive information...

6.8CVSS6.2AI score0.02089EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.10 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.02095EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.10 views

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass system security restrictions and enhance their privileges...

8.5CVSS6.5AI score0.01775EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.10 views

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass system security restrictions and enhance their privileges...

8.5CVSS6.5AI score0.01775EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.9 views

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and enhance their privileges...

8.8CVSS6.6AI score0.01119EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.8 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS7AI score0.02252EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.11 views

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges and expose protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers, operating remotely, to enhance their privileges and expose sensitive information...

4.9CVSS6.2AI score0.02089EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.12 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.02095EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.8 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

9CVSS7AI score0.02252EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.10 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

8.5CVSS6.5AI score0.01947EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.9 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.02095EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/20 12:0 a.m.12 views

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to expose the protected information.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to expose the protected information...

6.8CVSS6.2AI score0.02134EPSS
SaveExploits0References3Affected Software1
ICS
ICS
added 2022/07/18 12:0 p.m.73 views

Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon Systems

Summary Actions to take today: • Install fixed builds, updating all affected VMware Horizon and UAG systems to the latest versions. If updates or workarounds were not promptly applied following VMware’s release of updates for Log4Shell in December 2021,treat all affected VMware systems as...

10CVSS10AI score0.99999EPSS
SaveExploits390References89
CISA
CISA
added 2022/07/18 12:0 a.m.20 views

CISA Updates Advisory on Cyber Actors Continued Exploitation of Log4Shell in VMware Horizon Systems

CISA has updated the joint CISA-United States Coast Guard Cyber Command CGCYBER Cybersecurity Advisory AA22-174A: Malicious Cyber Actors Continue to Exploit Log4Shell in VMware Horizon, originally released June 23, 2022. The advisory now includes IOCs provided in Malware Analysis Report...

1.2AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/07/18 12:0 a.m.21 views

Fedora: Security Advisory for golang-github-vmware-govmomi (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
Fedora
Fedora
added 2022/07/17 1:16 a.m.22 views

[SECURITY] Fedora 35 Update: golang-github-vmware-govmomi-0.24.0-5.fc35

A Go library for interacting with VMware vSphere APIs ESXi and/or vCenter...

9.3CVSS8.2AI score0.0995EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
added 2022/07/14 12:0 a.m.51 views

EulerOS Virtualization 2.10.0 : qemu (EulerOS-SA-2022-2043)

According to the versions of the qemu package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In QEMU 4.1.0, an out-of-bounds read flaw was found in the ATI VGA implementation. It occurs in the aticursordefine routine while...

7.5CVSS6.6AI score0.00522EPSS
SaveExploits1References14
Tenable Nessus
Tenable Nessus
added 2022/07/14 12:0 a.m.36 views

VMware vRealize Log Insight 8.x < 8.8.2 XSS (VMSA-2022-0019)

The VMware vRealize Log Insight application running on the remote host is 8.0.0 or later but prior to 8.8.2. It is, therefore, affected by multiple XSS vulnerabilities. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. C...

5.4CVSS5.6AI score0.00412EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/07/14 12:0 a.m.57 views

VMware vCenter Server 6.5 / 6.7 / 7.0 SSRF (VMSA-2022-0018)

The version of VMware vCenter Server installed on the remote host is 6.5 prior to 6.5 U3t, 6.7 prior to 6.7 U3r, or 7.0 prior to 7.0 U3f. It is, therefore, affected by a server-side request forgery SSRF vulnerability. A remote attacker with network access to port 433 can exploit this send a URL...

7.5CVSS7.4AI score0.00946EPSS
SaveExploits0References2
Rows per page
Query Builder