CVE-2020-22848
A remote code execution (RCE) vulnerability in the Playsong.php component of cscms v4.1 allows attackers to execute arbitrary commands. Devamını Oku
Devamını oku
Day: Ağustos 30, 2021
CVE-2021-22021 (cloud_foundation, vrealize_log_insight)
VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An attacker with user…
CVE-2021-22021
VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An attacker with user…
CVE-2021-22027 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network…
CVE-2021-22026 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network…
CVE-2021-22025 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with…
CVE-2021-22024 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize…
CVE-2021-22023 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API…
CVE-2021-22022 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager…
CVE-2021-22027
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network…