|
195351
|
7.5 |
HIGH
Network
|
vmware
|
vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager
|
The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to …
|
CWE-287
Improper Authentication
|
CVE-2021-22025
|
2024-11-21 14:49 |
2021-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195352
|
7.5 |
HIGH
Network
|
vmware
|
vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager
|
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API…
|
CWE-532
Inclusion of Sensitive Information in Log Files
|
CVE-2021-22024
|
2024-11-21 14:49 |
2021-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195353
|
7.2 |
HIGH
Network
|
vmware
|
vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager
|
The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modi…
|
CWE-639
Authorization Bypass Through User-Controlled Key
|
CVE-2021-22023
|
2024-11-21 14:49 |
2021-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195354
|
4.9 |
MEDIUM
Network
|
vmware
|
vrealize_suite_lifecycle_manager cloud_foundation vrealize_operations_manager
|
The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbi…
|
CWE-22
Path Traversal
|
CVE-2021-22022
|
2024-11-21 14:49 |
2021-08-31 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195355
|
5.4 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Improper authorization in GitLab CE/EE affecting all versions since 12.6 allowed guest users to create issues for Sentry errors and track their status
|
CWE-863
Incorrect Authorization
|
CVE-2021-22256
|
2024-11-21 14:49 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195356
|
5.4 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Improper authorization in GitLab CE/EE affecting all versions since 13.3 allowed users to view and delete impersonation tokens that administrators created for their account
|
NVD-CWE-Other
|
CVE-2021-22250
|
2024-11-21 14:49 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195357
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Improper authorization in GitLab CE/EE affecting all versions since 13.0 allows guests in private projects to view CI/CD analytics
|
CWE-863
Incorrect Authorization
|
CVE-2021-22247
|
2024-11-21 14:49 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195358
|
2.7 |
LOW
Network
|
gitlab
|
gitlab
|
Improper validation of commit author in GitLab CE/EE affecting all versions allowed an attacker to make several pages in a project impossible to view
|
CWE-20
Improper Input Validation
|
CVE-2021-22245
|
2024-11-21 14:49 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195359
|
6.5 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Improper authorization in the vulnerability report feature in GitLab EE affecting all versions since 13.1 allowed a reporter to access vulnerability data
|
NVD-CWE-Other
|
CVE-2021-22244
|
2024-11-21 14:49 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
195360
|
4.3 |
MEDIUM
Network
|
gitlab
|
gitlab
|
Under specialized conditions, GitLab CE/EE versions starting 7.10 may allow existing GitLab users to use an invite URL meant for another email address to gain access into a group.
|
CWE-863
Incorrect Authorization
|
CVE-2021-22243
|
2024-11-21 14:49 |
2021-08-26 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|