6 results (0.011 seconds)

CVSS: 9.8EPSS: 0%CPEs: 11EXPL: 0

CVE-2016-0930

https://notcve.org/view.php?id=CVE-2016-0930

18 Sep 2016 — Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.19 and 1.7.x before 1.7.10, when vCloud or vSphere is used, has a default password for compilation VMs, which allows remote attackers to obtain SSH access by connecting within an installation-time period during which these VMs exist. Pivotal Cloud Foundry (PCF) Ops Manager en versiones anteriores a 1.6.19 y 1.7.x en versiones anteriores a 1.7.10, cuando se usa vCloud o vSphere, tiene una contraseña por defecto para la compilacion VMs, lo que permite a ataca... • http://www.securityfocus.com/bid/93027 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •

CVSS: 9.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2016-0897

https://notcve.org/view.php?id=CVE-2016-0897

18 Sep 2016 — Pivotal Cloud Foundry (PCF) Ops Manager before 1.6.17 and 1.7.x before 1.7.8, when vCloud or vSphere is used, does not properly enable SSH access for operators, which has unspecified impact and remote attack vectors. Pivotal Cloud Foundry (PCF) Ops Manager en versiones anteriores a 1.6.17 y 1.7.x en versiones anteriores a 1.7.8, cuando se usa vCloud o vSphere, no activa adecuadamente acceso SSH para operadores, lo que tiene un impacto no especifico y vectores de ataque remotos. • https://pivotal.io/security/cve-2016-0897 • CWE-310: Cryptographic Issues •

CVSS: 5.4EPSS: 0%CPEs: 3EXPL: 0

CVE-2016-4380 – HP Security Bulletin HPSBGN03637 1

https://notcve.org/view.php?id=CVE-2016-4380

31 Aug 2016 — Cross-site scripting (XSS) vulnerability in the AdminUI in HPE Operations Manager 9.21.x before 9.21.130 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en el AdminUI en HPE Operations Manager 9.21.x en versiones anteriores a 9.21.130 permite a usuarios remotos autenticados inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. A potential vulnerability has been identified in the AdminUI of the HP ... • http://www.securityfocus.com/bid/92698 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.8EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-4373 – HP Security Bulletin HPSBGN03630 1

https://notcve.org/view.php?id=CVE-2016-4373

26 Jul 2016 — The AdminUI in HPE Operations Manager (OM) before 9.21.130 on Linux, Unix, and Solaris allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library. El AdminUI en HPE Operations Manager (OM) en versiones anteriores a 9.21.130 en Linux, Unix y Solaris permite a atacantes remotos ejecutar comandos arbitrarios a través de un objeto Java serializado manipulado, relacionado con la librería Apache Commons Collections (ACC). A v... • http://www.securityfocus.com/bid/92122 • CWE-284: Improper Access Control •

CVSS: 9.8EPSS: 88%CPEs: 4EXPL: 6

CVE-2014-5073 – VMTurbo Operations Manager 4.6 - 'vmtadmin.cgi' Remote Command Execution

https://notcve.org/view.php?id=CVE-2014-5073

14 Aug 2014 — vmtadmin.cgi in VMTurbo Operations Manager before 4.6 build 28657 allows remote attackers to execute arbitrary commands via shell metacharacters in the fileDate parameter in a DOWN call. vmtadmin.cgi en VMTurbo Operations Manager anterior a 4.6 build 28657 permite a atacantes remotos ejecutar comandos arbitrarios a través de metacaracteres de shell en el parámetro fileDate en una llamada DOWN. • https://packetstorm.news/files/id/127864 •

CVSS: 7.5EPSS: 13%CPEs: 2EXPL: 3

CVE-2014-3806 – VM Turbo Operations Manager 4.5x - Directory Traversal

https://notcve.org/view.php?id=CVE-2014-3806

21 May 2014 — Directory traversal vulnerability in cgi-bin/help/doIt.cgi in VMTurbo Operations Manager before 4.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the xml_path parameter. Vulnerabilidad de salto de directorio en cgi-bin/help/doIt.cgi en VMTurbo Operations Manager anterior a 4.6 permite a atacantes remotos leer archivos arbitrarios a través de un .. (punto punto) en el parámetro xml_path. • https://www.exploit-db.com/exploits/33334 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •