enterprise manager for virtualization vulnerabilities and exploits

(subscribe to this query)

Red Hat Enterprise Virtualization Manager (RHEVM) prior to 3.2 does not properly check permissions for the target storage domain, which allows malicious users to cause a denial of service (disk space consumption) by cloning a VM from a snapshot.

Redhat Enterprise Virtualization Manager 2.2 Redhat Enterprise Virtualization Manager 2.1 Redhat Enterprise Virtualization Manager Redhat Enterprise Virtualization Manager 3.0 Redhat Enterprise Virtualization Manager 2.2.3

Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager prior to 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of thi...

Redhat Enterprise Virtualization Manager 2.2 Redhat Enterprise Virtualization Manager 2.1 Redhat Spice-activex -Redhat Enterprise Virtualization Manager

A flaw was found in Ansible Engine's ansible-connection module, where sensitive information such as the Ansible user credentials is disclosed by default in the traceback error message. The highest threat from this vulnerability is to confidentiality.

Redhat Virtualization Host 4.0 Redhat Virtualization 4.0 Redhat Enterprise Linux 8.0 Redhat Openstack 16.1 Redhat Enterprise Linux For Power Little Endian 8.0 Redhat Virtualization For Ibm Power Little Endian 4.0 Redhat Openstack 1 Redhat Ansible Automation Platform Early Access 2.0 Redhat Ansible Engine Redhat Virtualization Manager 4.4

Cross-site request forgery (CSRF) vulnerability in ManageIQ Enterprise Virtualization Manager (EVM) allows remote malicious users to hijack the authentication of users for requests that have unspecified impact via unknown vectors.

Redhat Manageiq Enterprise Virtualization Manager -

A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions prior to 8.27.0 are vulnerable.

Rsyslog Rsyslog Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux For Scientific Computing 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux For Power Little Endian 7.0 Redhat Enterprise Linux For Power Big Endian 7.0 Redhat Enterprise Linux For Ibm Z Systems 7.0 Redhat Virtualization Manager 4.3 Redhat Virtualization Host 4.0 Redhat Virtualization 4.0 Debian Debian Linux 9.0

Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization (RHEV) 2.2 does not properly accept TCP connections for SSL sessions, which allows remote malicious users to cause a denial of service (daemon outage) via crafted SSL traffic.

Redhat Enterprise Virtualization 2.2

A buffer overflow exists in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local malicious user to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID perm...

Gnu Glibc Fedoraproject Fedora 37 Fedoraproject Fedora 38 Fedoraproject Fedora 39 Redhat Virtualization Host 4.0 Redhat Virtualization 4.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Server Aus 8.6 Redhat Enterprise Linux Server Tus 8.6 Redhat Enterprise Linux Eus 8.6 Redhat Codeready Linux Builder For Power Little Endian Eus 8.6 Redhat Codeready Linux Builder Eus 8.6 Redhat Enterprise Linux 9.0 Redhat Codeready Linux Builder For Ibm Z Systems Eus 8.6 Redhat Codeready Linux Builder For Arm64 Eus 8.6 Redhat Enterprise Linux For Arm 64 Eus 8.6 Aarch64 Redhat Enterprise Linux For Ibm Z Systems Eus S390x 8.6 Redhat Enterprise Linux For Power Big Endian Eus 8.6 Ppc64le

25 Github repositories1 Article

FasterXML jackson-databind 2.x prior to 2.9.7 might allow malicious users to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.

Fasterxml Jackson-databind 2.7.0 Fasterxml Jackson-databind Fasterxml Jackson-databind 2.8.0 Fasterxml Jackson-databind 2.9.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2 Oracle Financial Services Analytical Applications Infrastructure 8.0.3 Oracle Financial Services Analytical Applications Infrastructure 8.0.4 Oracle Financial Services Analytical Applications Infrastructure 8.0.5 Oracle Financial Services Analytical Applications Infrastructure 8.0.6 Oracle Financial Services Analytical Applications Infrastructure 8.0.7 Oracle Banking Platform 2.6.0

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.

Fasterxml Jackson-databind 2.7.0 Fasterxml Jackson-databind Fasterxml Jackson-databind 2.8.0 Fasterxml Jackson-databind 2.9.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2 Oracle Financial Services Analytical Applications Infrastructure 8.0.3 Oracle Financial Services Analytical Applications Infrastructure 8.0.4 Oracle Financial Services Analytical Applications Infrastructure 8.0.5 Oracle Financial Services Analytical Applications Infrastructure 8.0.6 Oracle Financial Services Analytical Applications Infrastructure 8.0.7 Oracle Banking Platform 2.6.0

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.re...

Redhat Subscription-manager Fedoraproject Fedora 37 Fedoraproject Fedora 38 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Workstation 7.0 Redhat Enterprise Linux For Scientific Computing 7.0 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux For Power Little Endian 7.0 Redhat Enterprise Linux For Power Big Endian 7.0 Redhat Enterprise Linux For Ibm Z Systems 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Server Tus 8.2 Redhat Enterprise Linux Server Aus 8.2 Redhat Enterprise Linux Server Tus 8.4 Redhat Enterprise Linux Server Aus 8.4 Redhat Enterprise Linux For Power Little Endian 8.0 Redhat Enterprise Linux For Ibm Z Systems 8.0 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.1 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.2 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.4 Redhat Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions 8.6 Redhat Enterprise Linux For Ibm Z Systems Eus 8.6

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook