Enterprise Virtualization Manager
Approved changes feed: RSS · Atom
cpe:2.3:o:redhat:enterprise_virtualization_manager:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Enterprise Virtualization Manager (d0ec600a-b2f8-5a17-8c2a-4d716ee6e2fe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-5516 |
vulnerable | 2026-06-08 05:02:56.953509 |
Details available
Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors.
Published: 2013-01-04T22:00:00.000Z
Updated: 2024-08-06T21:05:47.322Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-0860 |
vulnerable | 2026-06-08 05:00:45.997637 |
Details available
Multiple untrusted search path vulnerabilities in Red Hat Enterprise Virtualization Manager (RHEV-M) before 3.1, when adding a host, allow local users to gain privileges via a Trojan horse (1) deployUtil.py or (2) vds_bootstrap.py Python module in /tmp/.
Published: 2013-01-04T22:00:00.000Z
Updated: 2024-08-06T18:38:14.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2793 |
vulnerable | 2026-06-08 04:55:10.675593 |
Details available
Race condition in the SPICE (aka spice-activex) plug-in for Internet Explorer in Red Hat Enterprise Virtualization (RHEV) Manager before 2.2.4 allows local users to create a certain named pipe, and consequently gain privileges, via vectors involving knowledge of the name of this named pipe, in conjunction with use of the ImpersonateNamedPipeClient function.
Published: 2010-12-08T17:00:00.000Z
Updated: 2024-08-07T02:46:48.219Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-2224 |
vulnerable | 2026-06-08 04:54:12.281779 |
Details available
The snapshot merging functionality in Red Hat Enterprise Virtualization Manager (aka RHEV-M) before 2.2 does not properly pass the postzero parameter during operations on deleted volumes, which allows guest OS users to obtain sensitive information by examining the disk blocks associated with a deleted virtual machine.
Published: 2010-06-24T17:00:00.000Z
Updated: 2024-08-07T02:25:07.176Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.