Design/Logic Flaw

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

CVE-2020-3168 Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

CVE-2020-3168 Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

CVE-2020-3168

CVE-2020-3168 affects Cisco Nexus 1000V Switch for VMware vSphere (Secure Login Enhancements). The root cause is improper resource allocation during failed CLI login attempts, allowing an unauthenticated remote attacker to cause a Nexus 1000V VSM to become inaccessible to users via the CLI, produ...

Cisco Nexus 1000V Switch for VMware vSphere Secure Login Enhancements Denial of Service Vulnerability

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

CVE-2020-3168: Uncontrolled Resource Consumption

A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...

VMWare OpenSLP Heap Buffer Overflow (CVE-2019-5544; CVE-2021-21974)

A heap buffer overflow vulnerability exists in OpenSLP. The vulnerability is due to improperly checking the bounds of a buffer before copying data to it. A remote, unauthenticated attacker can exploit this vulnerability by sending a specially crafted request to OpenSLP service on port 427...

Photon OS 2.0: Linux PHSA-2020-2.0-0212

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0212. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134084...

Bringing Intrinsic Security to RSA Conference 2020

This year at the RSA Conference, VMware will be highlighting our vision for Intrinsic Security, a safer, more effective security built into the fabric of the various infrastructure control points that are vulnerable to attack endpoint, identity, network, cloud, workload. The VMware Carbon Black...

Photon OS 1.0: Linux PHSA-2020-1.0-0279

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0279. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134040...

Photon OS 1.0: Python2 PHSA-2020-1.0-0280

An update of the python2 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0280. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Ipmitool PHSA-2020-3.0-0059

An update of the ipmitool package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0059. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133957;...

EulerOS 2.0 SP5 : openslp (EulerOS-SA-2020-1120)

According to the version of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the...

VMware Carbon Black Cloud Endpoint Standard Installed (Windows)

Binary data vmwarecarbonblackcloudendpointstandardwininstalled.nbin...

Photon OS 3.0: Python2 PHSA-2020-3.0-0057

An update of the python2 package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133809;...

Photon OS 3.0: Libsolv PHSA-2020-3.0-0057

An update of the libsolv package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0057. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133807;...

VMware Carbon Black Cloud Endpoint Standard Inactive

Binary data vmwarecarbonblackcloudendpointstandardwinstatus.nbin...

Photon OS 1.0: Bash PHSA-2020-1.0-0277

An update of the bash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0277. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid133812;...

VMware Releases Security Updates for vRealize Operations for Horizon Adapter

VMware has released security updates to address multiple vulnerabilities in vRealize Operations for Horizon Adapter. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and...

Potential data loss when using Instant VM Recovery

Challenge Performing Instant VM Recovery in VMware vSphere environments may result in data loss when using the quick migration feature to move published VM disks to production storage to finalize the recovery. This issue was identified internally by Veeam quality control in late 2019, and the fix...