CVE-2019-5539

CVE-2019-5539 describes a DLL hijacking flaw in Cortado Thinprint affecting VMware Workstation (15.x before 15.5.1) and Horizon View Agent (7.x before 7.5.4, 7.10.x before 7.10.1). The insecure DLL loading may allow a local attacker with normal user privileges to escalate to administrator on Wind...

CVE-2019-5539: Uncontrolled Search Path Element

VMware Workstation 15.x prior to 15.5.1 and Horizon View Agent 7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4 contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to...

PT-2019-17726

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 15.x prior to 15.5.1 Horizon View Agent versions 7.10.x prior to 7.10.1 Horizon View Agent versions 7.5.x prior to 7.5.4 Description The issue is due to insecure loading of a DLL by Cortado Thinprint, which may allo...

VMware Workstation and VMware Horizon View Agent DLL Hijacking Vulnerability

VMware Workstation and VMware Horizon View Agent are both products of VMware, Inc.VMware Workstation is a suite of virtual machine software. VMware Workstation is a suite of virtual machine software that provides the ability to run multiple virtual machines with different operating systems at the...

HPE OneView for VMware vCenter Cross-Site Scripting Vulnerability

HPE OneView for VMware vCenter is a VMware vCenter server management software plug-in for managing HPE ProLiant servers and storage systems from Hewlett Packard Enterprise HPE. A cross-site scripting vulnerability exists in HPE OneView for VMware vCenter version 9.5. The vulnerability stems from ...

Multiple VMware Products CVE-2019-5539 DLL Loading Local Privilege Escalation Vulnerability

Description Multiple VMware products are prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to gain administrator privileges on the machine. The following VMware products are affected: Workstation version 15.x is vulnerable Horizon View Agent version 7.x...

CVE-2019-11992

A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting...

CVE-2019-11992

A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting...

Cross site scripting

A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting...

How We Streamlined Infrastructure and Tooling as a Service for Development

At VMware Carbon Black, we’ve historically acquired a broad technology stack in our journey to build the premier security solution that understands cybercriminal behavior. Inheriting such a variety of tooling and storage solutions presented a challenge for us operationally. So, in order to reduce...

CVE-2019-11992

A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting...

CVE-2019-11992

CVE-2019-11992 concerns HPE OneView for VMware vCenter 9.5, where a remote attacker can trigger a Cross-Site Scripting vulnerability due to lack of proper input validation in the WEB application. Red Hat and CNVD entries reiterate the same issue and specify the impact as client-side code executio...

PT-2019-12625

Name of the Vulnerable Software and Affected Versions HPE OneView for VMware vCenter version 9.5 Description A security issue in HPE OneView for VMware vCenter could be exploited remotely to allow Cross-Site Scripting. Recommendations For version 9.5, update to a version that includes a fix for...

CVE-2019-11992: Improper Neutralization of Input During Web Page Generation

A security vulnerability in HPE OneView for VMware vCenter 9.5 could be exploited remotely to allow Cross-Site Scripting...

VMSA-2019-0023:VMware Workstation and Horizon View Agent updates address a DLL-hijacking issue

VMware Security Advisories Advisory ID| VMSA-2019-0023 ---|--- Advisory Severity| Moderate CVSSv3 Range| 6.3 Synopsis| VMware Workstation and Horizon View Agent updates address a DLL-hijacking issue CVE-2019-5539 Issue Date| 2019-12-20 Updated On| 2019-12-20 Initial Advisory CVEs| CVE-2019-5539 1...

VMware Code Execution

The vulnerability of virtual audio devices in VMware ESXi, VMware Workstation, VMware Fusion, VMware Remote Console, and VMware Horizon Client lies in the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

VMware Workstation/Fusion DoS

The vulnerability of VMware Workstation and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures by sending a specially crafted IPv6 packet...

VMware Carbon Black TAU Threat Research: Visualizing Ransomware with MITRE ATT&CK

If no one had ever heard of ransomware prior to May 2017, then one thing that is fairly certain is that the WannaCry ransomware outbreak unquestionably put ransomware on the security radar, and sent shivers up CISO’s and analysts’ spines for the weeks and months that followed. Only a few weeks...

VMware ESXi Graphics DoS

The vulnerability of 3D graphics functions in VMware ESXi, VMware Workstation, and VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

VMSA-2019-0022 : VMware ESXi updates address OpenSLP remote code execution vulnerability

VMware ESXi updates address OpenSLP remote code execution vulnerability CVE-2019-5544 OpenSLP as used in ESXi has a heap overwrite issue. A malicious actor with network access to port 427 on an ESXi host may be able to overwrite the heap of the OpenSLP service resulting in remote code execution. ...