15057 matches found
Cisco UCS Director Cloupia Script RCE
This module exploits an authentication bypass and directory traversals in Cisco UCS Director use exploit/linux/http/cisco/ucscloupiascriptrce msf undefineducscloupiascriptrce show actions ...actions... msf undefineducscloupiascriptrce set ACTION msf undefineducscloupiascriptrce show options ...sh...
PT-2020-2046
Name of the Vulnerable Software and Affected Versions VMware vRealize Log Insight versions prior to 8.1.0 Description The issue is related to insufficient input validation, which can be exploited by a remote attacker to redirect users to a malicious site. This is due to an Open Redirect...
CVE-2020-3953: Improper Input Validation
Cross Site Scripting XSS vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation...
Photon OS 1.0: Postgresql PHSA-2020-1.0-0287
An update of the postgresql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0287. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 1.0: Kubernetes PHSA-2020-1.0-0288
An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0288. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
VMware vRealize Log Insight addresses Cross Site Scripting (XSS) and Open Redirect vulnerabilities (CVE-2020-3953, CVE-2020-3954)
3a. Cross Site Scripting XSS vulnerabilities in vRealize Log Insight due to improper Input validation CVE-2020-3953 vRealize Log Insight does not properly validate user input, resulting in XSS vulnerabilities. VMware has evaluated the severity of this issue to be in the Important severity range...
VMware Releases Security Updates for vRealize Log Insight
VMware has released security updates to address vulnerabilities in VMware vRealize Log Insight. An attacker could exploit these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware...
VMware vCenter Server 6.7 Sensitive Information Disclosure Vulnerability (VMSA-2020-0006)
The version of VMware vCenter Server installed on the remote host is 6.7 prior to U3F, and is, therefore, affected by an information disclosure vulnerability caused by insufficient access controls in vmdir. This allows an attacker with network access to an affected vmdir deployment may be able to...
VMware vCenter Server Information Disclosure Vulnerability (CNVD-2020-22860)
VMware vCenter Server is a suite of server and virtualization management software from VMware. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructures. An information disclosure vulnerability exis...
Photon OS 3.0: Linux PHSA-2020-3.0-0073
An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0073. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135403;...
Photon OS 3.0: Python2 PHSA-2020-3.0-0073
An update of the python2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0073. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135404;...
VMSA-2020-0008:VMware ESXi patches address Stored Cross-Site Scripting (XSS) vulnerability
Advisory ID: VMSA-2020-0008 CVSSv3 Range: 8.3 Issue Date:2020-04-28 Updated On: 2020-04-28 Initial Advisory CVEs: CVE-2020-3955 Synopsis: VMware ESXi patches address Stored Cross-Site Scripting XSS vulnerability CVE-2020-3955 RSS Feed Download PDF Download Text File Share this page on social medi...
Photon OS 3.0: Zsh PHSA-2020-3.0-0073
An update of the zsh package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0073. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid135406; scriptversion"1.5...
CVE-2020-5406
VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection properties to its log, including database username and password. A malicious user with...
Default credentials
VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection properties to its log, including database username and password. A malicious user with...
CVE-2020-5406 PCF Autoscaling logs its database credentials
VMware Tanzu Application Service for VMs, 2.6.x versions prior to 2.6.18, 2.7.x versions prior to 2.7.11, and 2.8.x versions prior to 2.8.5, includes a version of PCF Autoscaling that writes database connection properties to its log, including database username and password. A malicious user with...
CVE-2020-5406
The CVE concerns VMware Tanzu Application Service for VMs (2.6.x <2.6.18, 2.7.x <2.7.11, 2.8.x
Critical VMware Bug Opens Up Corporate Treasure to Hackers
A critical information-disclosure bug in VMware’s Directory Service vmdir could lay bare the contents of entire corporate virtual infrastructures, if exploited by cyberattackers. The vmdir is part of VMware’s vCenter Server product, which provides centralized management of virtualized hosts and...
