CVE-2021-22026
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik Açıkları
Güvenlik Açıkları
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2021-22027
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious […]
İçeriği inceleyinCVE-2021-22022 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to […]
İçeriği inceleyinCVE-2021-22023 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize […]
İçeriği inceleyinCVE-2021-22024 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access […]
İçeriği inceleyinCVE-2021-22025 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated […]
İçeriği inceleyinCVE-2021-22026 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious […]
İçeriği inceleyinCVE-2021-22027 (cloud_foundation, vrealize_operations_manager, vrealize_suite_lifecycle_manager)
The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious […]
İçeriği inceleyinCVE-2020-18121
A configuration issue in Indexhibit 2.1.5 allows authenticated attackers to modify .php files, leading to getshell. Devamını Oku
İçeriği inceleyinCVE-2020-18123
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily delete admin accounts. Devamını Oku
İçeriği inceleyinCVE-2020-18124
A cross-site request forgery (CSRF) vulnerability in Indexhibit 2.1.5 allows attackers to arbitrarily reset account passwords. Devamını Oku
İçeriği inceleyinCVE-2020-18125
A reflected cross-site scripting (XSS) vulnerability in the /plugin/ajax.php component of Indexhibit 2.1.5 allows attackers to execute arbitrary web scripts or HTML. […]
İçeriği inceleyin