CVE-2020-15526

In Redgate SQL Monitor 7.1.4 through 10.1.6 inclusive, the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration Notifications pages to disable certificate checking for alert notifications. These TLS security checks are als...

Code injection

In Redgate SQL Monitor 7.1.4 through 10.1.6 inclusive, the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration Notifications pages to disable certificate checking for alert notifications. These TLS security checks are als...

CVE-2020-15526

In Redgate SQL Monitor 7.1.4 through 10.1.6 inclusive, the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration Notifications pages to disable certificate checking for alert notifications. These TLS security checks are als...

CVE-2020-15526: Improper Certificate Validation

In Redgate SQL Monitor 7.1.4 through 10.1.6 inclusive, the scope for disabling some TLS security certificate checks can extend beyond that defined by various options on the Configuration Notifications pages to disable certificate checking for alert notifications. These TLS security checks are als...

VMware ESXi Use-After-Free

The vulnerability of the PVNVRAM component in VMware ESXi, VMware Workstation, and VMware Fusion lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

VMware ESXi VMXNET3 Unauthorized Access

The vulnerability of the virtual network adapter vmxnet3 in VMware ESXi, VMware Workstation, and VMware Fusion lies in the issue of data writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

VMware ESXi Buffer Overflow

The vulnerability of VMware ESXi, VMware Workstation, and VMware Fusion lies in buffer overflows in the dynamic memory during the processing of SVGA3D commands. Exploiting this vulnerability allows an attacker to execute arbitrary code...

VMware EHCI Controller Unauthorized Access

The vulnerability of the EHCI controller in VMware ESXi, VMware Workstation, and VMware Fusion lies in the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

VMware Hypervisor Partial DoS

The vulnerability of microprogramming software for managing video cards controllers in VMware ESXi, VMware Workstation, and VMware Fusion lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a partial service...

VMware ESXi USB 3.0 Buffer Overflow DoS

The vulnerability of the USB 3.0 xHCI controller in VMware ESXi, VMware Workstation, and VMware Fusion lies in the writing of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

USB 2.0 controller EHCI VMware Code Execution

The vulnerability of the USB 2.0 controller EHCI in VMware ESXi, VMware Workstation, and VMware Fusion lies in the writing of data beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

VMware XHCI Controller Unauthorized Access

The vulnerability of XHCI controllers in VMware ESXi, VMware Workstation, and VMware Fusion lies in the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

USB 2.0 controller EHCI VMware Code Execution

The vulnerability of the USB 2.0 controller EHCI in VMware ESXi, VMware Workstation, and VMware Fusion stems from synchronization errors when using shared resources „Race Conditions“. Exploiting this vulnerability allows an attacker to execute arbitrary code...

VMware Releases Security Update for VeloCloud

VMware has released a security update to address a vulnerability in VeloCloud. An attacker could exploit this vulnerability to obtain sensitive information. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware Security Advisory...

PT-2020-4110

Name of the Vulnerable Software and Affected Versions: VMware Fusion versions 11.x before 11.5.5 VMware Remote Console for Mac versions 11.x and prior before 11.2.0 Horizon Client for Mac versions 5.x and prior before 5.4.3 Description: The issue is related to improper XPC Client validation, whic...

VMSA-2020-0017:VMware Fusion, VMware Remote Console and Horizon Client updates address a privilege escalation vulnerability

Advisory ID: VMSA-2020-0017 CVSSv3 Range: 7.8 Issue Date:2020-07-09 Updated On: 2020-07-09 Initial Advisory CVEs: CVE-2020-3974 Synopsis: VMware Fusion, VMware Remote Console and Horizon Client updates address a privilege escalation vulnerability CVE-2020-3974 RSS Feed Download PDF Download Text...

Photon OS 3.0: Python PHSA-2020-3.0-0109

An update of the python package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0109. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138188;...

Photon OS 2.0: Python PHSA-2020-2.0-0259

An update of the python package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0259. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13818...

Photon OS 2.0: Dbus PHSA-2020-2.0-0259

An update of the dbus package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0259. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138179;...

Photon OS 2.0: Redis PHSA-2020-2.0-0256

An update of the redis package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0256. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid138192...