EUVD-2025-14843

Malicious code in bioql PyPI...

VMware Tools for Windows Access Control Error Vulnerability

VMware Tools for Windows is a set of Windows-based, VMWare virtual machine enhancement tools from VMware, which are drivers provided by VMware to enhance the performance of virtual graphics cards and hard disks, as well as to synchronize the clocks of the virtual machine with those of the host. A...

PT-2025-39835

Name of the Vulnerable Software and Affected Versions VMware Tools for Windows affected versions not specified Description VMware Tools contains an improper authorisation issue related to how it manages user access controls. A malicious actor with non-administrative privileges on a guest virtual...

Important Photon OS Security Update - PHSA-2025-5.0-0630

Updates of 'linux-esx', 'linux' packages of Photon OS have been released...

CVE-2025-41246: Incorrect Authorization

VMware Tools for Windows contains an improper authorisation vulnerability due to the way it handles user access controls. A malicious actor with non-administrative privileges on a guest VM, who is already authenticated through vCenter or ESX may exploit this issue to access other guest VMs...

MAL-2025-11355 Malicious code in @zalastax/nolb-esx (npm)

The package @zalastax/nolb-esx was found to contain malicious code...

Malicious code in @zalastax/nolb-esx (npm)

The package @zalastax/nolb-esx was found to contain malicious code...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0558

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0545

Updates of 'linux', 'linux-esx', 'krb5', 'libarchive' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-91-0538

Updates of 'vim', 'linux', 'linux-esx' packages of Photon OS have been released...

CVE-2019-14483

AdRem NetCrunch 10.6.0.4587 allows Credentials Disclosure. Every user can read the BSD, Linux, MacOS and Solaris private keys, private keys' passwords, and root passwords stored in the credential manager. Every administrator can read the ESX and Windows passwords stored in the credential manager...

CVE-2013-3658

Directory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to delete arbitrary host OS files via unspecified vectors...

CVE-2005-4773

The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service shutdown via the 1 halt, 2 poweroff, and 3 reboot scripts executed at the service console...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0521

Updates of 'linux', 'linux-esx', 'syslog-ng' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0517

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-91-0512

Updates of 'emacs', 'linux-esx', 'libxml2', 'python3-pydantic', 'linux' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2025-5.0-91-0493

Updates of 'linux', 'linux-esx', 'apache-tomcat9', 'apache-tomcat10' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2025-5.0-91-0491

Updates of 'linux', 'linux-esx' packages of Photon OS have been released...

CVE-2025-27147

The CVE-2025-27147 issue affects the GLPI Inventory Plugin used with GLPI, where versions prior to 1.5.0 contain an improper access control vulnerability. Reported details across connected sources consistently point to an access-control weakness in GLPI Inventory Plugin tasks (network discovery, ...

The vulnerability of components Veeam.Backup.Core.BackupSummary and Veeam.Backup.EsxManager.xmlFrameworkDs of the cloud, virtual, and physical system protection software Veeam Backup & Replication allows a attacker to execute arbitrary code.

The vulnerabilities of the Veeam.Backup.Core.BackupSummary component and the Veeam.Backup.EsxManager.xmlFrameworkDs components of the cloud, virtual, and physical system protection solutions from Veeam Backup & Replication are related to deserialization mechanism flaws. Exploiting these...