NVD disclosure day

Published threat advisories for May 26, 2021

CVE-2019-25029

Versa Director Command Injection Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical command injection vulnerability exists in Versa Director, allowing remote attackers to execute arbitrary commands on the host operating system by exploiting insufficient input validation. This could lead to unauthorized system control.

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2021-21985

VMware vCenter Server Remote Code Execution Vulnerability.

Halo Surface Signal: 3 out of 5 — possibly public-facing.

A vulnerability in VMware's vCenter Server allows attackers with network access to execute commands with unrestricted privileges on the host operating system. This poses a significant business risk, potentially leading to system compromise and operational disruption.

NVD modified: NVD date unavailable • CISA KEV