Lucene search
+L

9711 matches found

CNNVD
CNNVD
added 2024/06/19 12:00 a.m.10 views

WordPress plugin Fusion Builder security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

5.4CVSS6.8AI score0.00464EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/06/18 12:00 a.m.34 views

VMware Fusion Out-of-bounds read Vulnerability (VMSA-2024-0005) - Mac OS X

VMware Fusion is prone to an out of bounds read vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion";...

5.9CVSS5.6AI score0.00226EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/06/03 12:00 a.m.8 views

The vulnerability of the hyper-converged infrastructure of IBM Storage Fusion HCI, related to the use of strictly encrypted authentication data, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the high-convergence infrastructure of IBM Storage Fusion HCI is related to the use of strictly encrypted account data. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

6.5CVSS7.7AI score0.00497EPSS
SaveExploits0References5Affected Software1
CISA KEV Catalog
CISA KEV Catalog
added 2024/06/03 12:00 a.m.41 views

Oracle WebLogic Server OS Command Injection Vulnerability

Oracle WebLogic Server, a product within the Fusion Middleware suite, contains an OS command injection vulnerability that allows an attacker to execute arbitrary code via a specially crafted HTTP request that includes a malicious XML document...

7.4CVSS7.6AI score0.96281EPSS
SaveIn wildExploits9
BDU FSTEC
BDU FSTEC
added 2024/05/27 12:00 a.m.12 views

The vulnerability of the vbluetooth components in VMware Fusion and Vmware Workstation allows a hacker to gain unauthorized access to protected information.

The vulnerability of the vbluetooth components in VMware Fusion and Vmware Workstation is related to lack of access control mechanisms. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

7.1CVSS6.5AI score0.00505EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/05/24 12:00 a.m.14 views

The vulnerability of shader functions in VMware Fusion and Vmware Workstation allows attackers to trigger a service failure.

The vulnerability of shader functions in VMware Fusion and Vmware Workstation lies in improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

7.1CVSS8AI score0.00499EPSS
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/05/24 12:00 a.m.9 views

The vulnerability of the Host Guest File Sharing (HGFS) function in VMware Fusion and Vmware Workstation allows attackers to disclose sensitive information.

The vulnerability of the Host Guest File Sharing HGFS function in VMware Fusion and Vmware Workstation lies in the lack of access control mechanisms. Exploiting this vulnerability can allow attackers to disclose sensitive information...

7.1CVSS6.5AI score0.00505EPSS
SaveExploits0References3Affected Software2
OpenVAS
OpenVAS
added 2024/05/23 12:00 a.m.30 views

VMware Fusion Multiple Vulnerabilities (VMSA_2024_0010) - Mac OS X

VMware Fusion is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:fusion"; ifdescription...

9.3CVSS7AI score0.00684EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/21 6:15 p.m.30 views

CVE-2024-22273

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a...

8.1CVSS8.2AI score0.00165EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/21 5:29 p.m.155 views

CVE-2024-22273

CVE-2024-22273 affects VMware ESXi, Workstation, and Fusion storage controllers, with an out-of-bounds read/write flaw that may let a VM-adjacent attacker cause a denial of service or, in conjunction with other issues, execute code on the hypervisor. Exploitation is described as local (requires a...

8.1CVSS7.1AI score0.00165EPSS
SaveExploits0References1Affected Software3
Vulnrichment
Vulnrichment
added 2024/05/21 5:29 p.m.18 views

CVE-2024-22273

The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a...

8.1CVSS7.2AI score0.00165EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/05/21 4:29 p.m.37 views

Security Bulletin: IBM Storage Fusion is vulnerable to authorization bypass due to go-restful.

Summary emicklei/go-restful is used by IBM Storage Fusion's isf-prereq-operator to create pre-requisite resources and deploy dependent operators. CVE-2022-1996. Vulnerability Details CVEID:CVE-2022-1996 DESCRIPTION: go-restful could allow a remote attacker to bypass security restrictions, caused ...

9.3CVSS9.7AI score0.03115EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/05/21 4:27 p.m.38 views

Security Bulletin: IBM Storage Fusion HCI is vulnerable to arbitrary code execution due to Node.js IP package.

Summary IP from Node.js is used by IBM Storage Fusion HCI as part of the Backup and Restore service and is vulnerable to the CVE listed below. CVE-2023-42282. Vulnerability Details CVEID:CVE-2023-42282 DESCRIPTION: Node.js IP package could allow a remote attacker to execute arbitrary code on the...

9.8CVSS9.3AI score0.01613EPSS
SaveExploits1Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2024/05/21 4:25 p.m.35 views

Security Bulletin: IBM Storage Fusion is vulnerable to arbitrary code execution due to Node.js IP package.

Summary IP from Node.js is used by IBM Storage Fusion as part of the Backup and Restore service and is vulnerable to the CVE listed below. CVE-2023-42282. Vulnerability Details CVEID:CVE-2023-42282 DESCRIPTION: Node.js IP package could allow a remote attacker to execute arbitrary code on the...

9.8CVSS9.3AI score0.01613EPSS
SaveExploits1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:00 a.m.11 views

The vulnerability of the vbluetooth components in VMware Fusion and Vmware Workstation allows a hacker to execute arbitrary code.

The vulnerability of the vbluetooth components in VMware Fusion and Vmware Workstation relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

8.8CVSS8.1AI score0.00684EPSS
SaveExploits0References3Affected Software2
Tenable Nessus
Tenable Nessus
added 2024/05/16 12:00 a.m.34 views

VMware Fusion 13.0.x < 13.5.2 Multiple Vulnerabilities (VMSA-2024-0010)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 13.0.x prior to 13.5.2. It is, therefore, affected by multiple vulnerabilities. - VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. CVE-2024-22267 - VMware Workstation...

9.3CVSS6AI score0.00684EPSS
SaveExploits0References5
NVD
NVD
added 2024/05/14 4:16 p.m.22 views

CVE-2024-22270

VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing HGFS functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual...

7.1CVSS6.8AI score0.00505EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/14 4:16 p.m.6 views

CVE-2024-22270

VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing HGFS functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual...

6CVSS5.8AI score0.00505EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/14 4:16 p.m.30 views

CVE-2024-22269

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine...

7.1CVSS6.8AI score0.00505EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/14 4:16 p.m.5 views

CVE-2024-22269

VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine...

6CVSS5.8AI score0.00505EPSS
SaveExploits0References1
Rows per page
Query Builder