Huawei FusionCompute Information Disclosure Vulnerability (CNVD-2020-47548)

Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. An information disclosure vulnerability exists in Huawei FusionCompute version 8.0.0, which stems from the module's failure to...

Parallels Desktop Out-of-Bounds Read Elevation of Privilege Vulnerability (CNVD-2020-46852)

Parallels Desktop is a virtual machine software that runs on Mac computers. An out-of-bounds read elevation of privilege vulnerability exists in the hypervisor kernel extension in versions prior to Parallels Desktop 15.1.4 47270. The vulnerability stems from a lack of proper validation of...

CVE-2020-9415

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

CVE-2020-9415

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

Input validation

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

CVE-2020-9415

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

CVE-2020-9415

CVE-2020-9415 affects the TIBCO Data Virtualization Server component. A malicious authenticated user could download arbitrary files from the system. Affected: Data Virtualization 7.0.8 and below; 8.0.0, 8.1.0, 8.1.1, 8.2.0; Data Virtualization for AWS Marketplace 8.2.0 and below. Root cause: unau...

CVE-2020-9415 TIBCO Data Virtualization

The TIBCO Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization and TIBCO Data Virtualization for AWS Marketplace contains a vulnerability that theoretically allows a malicious authenticated user to download any arbitrary file from the affected system. The user...

Phantom-Evasion

This is a Python antivirus evasion tool called Phantom-Evasion. It is free software, licensed under the GNU General Public License GPL version 3. The tool is designed to evade detection by antivirus software and is intended for educational or research purposes only. The tool consists of several...

SureBackup for VM With VBS Enabled Fails With “Invalid change tracker error code”

Challenge A SureBackup job testing a VMware VM that has Virtualization-Based Security VBS enabled fails with the error: An error occurred while taking a snapshot: Invalid change tracker error code. An error occurred while taking a snapshot: Invalid change tracker error code. Cause This error occu...

Red Hat libvirt elevation of privilege vulnerability (CNVD-2020-47042)

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. An elevation of privilege vulnerability exists in Red Hat...

TIBCO Security Advisory: August 18, 2020 - TIBCO DataVirtualization

TIBCO Data Virtualization Original release date: August 18, 2020 Last revised: September 16, 2020 CVE-2020-9415 Source: TIBCO Software Inc. TIBCO Data Virtualization Original release date: August 18, 2020 Last revised: September 16, 2020 Source: TIBCO Software Inc. Systems Affected TIBCO Data...

Fedora: Security Advisory for virtualbox-guest-additions (FEDORA-2020-dbf6c6f22f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: virtualbox-guest-additions-6.1.12-1.fc31

VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. This package contains the VirtualBox Guest Additions which support better integration of VirtualBox guests with the Host, including file sharing, clipboard sharing and Seamless mode...

[SECURITY] Fedora 32 Update: virtualbox-guest-additions-6.1.12-1.fc32

VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. This package contains the VirtualBox Guest Additions which support better integration of VirtualBox guests with the Host, including file sharing, clipboard sharing and Seamless mode...

RHEL 8 : virt:rhel (RHSA-2020:1358)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1358 advisory. Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contai...

Huawei FusionCompute Information Disclosure Vulnerability (CNVD-2020-46464)

Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. An information disclosure vulnerability exists in Huawei FusionCompute version 8.0.0, which originates from the program failing t...

Red Hat libvirt Elevation of Privilege Vulnerability

Red Hat libvirt is a Linux API for implementing Linux virtualization features from Red Hat, Inc. It supports a variety of Hypervisors, including Xen and KVM, as well as QEMU and a number of virtual products for other operating systems. A security vulnerability exists in Red Hat libvirt that stems...

The vulnerability of the virtualization management software for libvirt, related to an error on the opennebula nodes—where calling this function causes an out-of-buffer operation—allows a malicious actor to trigger a service failure.

The vulnerability of the libvirt virtualization management software is related to an error in the opennebula nodes. When this node is called, an out-of-buffer operation error occurs. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

Important: Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update

Updated ovirt-engine packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...