VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in VMware ESXi, Workstation, and Fusion. An attacker could exploit these vulnerabilities to obtain sensitive information. NCCIC encourages users and administrators to review the VMware Security Advisory VMSA-2018-0016 and apply the...

VMSA-2018-0016:VMware ESXi, Workstation, and Fusion updates address multiple out-of-bounds read vulnerabilities

VMSA-2018-0016 VMware ESXi, Workstation, and Fusion updates address multiple out-of-bounds read vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0016 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware ESXi, Workstation, a...

Nagios Fusion < 4.1.4 Multiple XSS Vulnerabilities

Nagios Fusion is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nagios Fusion Detection (HTTP)

HTTP based detection of Nagios Fusion. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.813251";...

Security Bulletin: Open Source Oracle Outside In Technology Vulnerabilities in IBM Content Collector for Email

Summary An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technology Outside In Filters component has high confidentiality impact, low integrity impact, and low availability impact. Vulnerability Details CVEID: CVE-2016-5558 DESCRIPTION: An unspecified vulnerabili...

Security Bulletin: Multiple Oracle Outside In Technology (OIT) July 2016 CPU in IBM Content Collector for Email

Summary An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technology Outside In Filters component has high confidentiality impact, low integrity impact, and low availability impact. Vulnerability Details CVEID: CVE-2016-3574 DESCRIPTION: An unspecified vulnerabili...

CVE-2018-12501

Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...

CVE-2018-12501

Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...

Session fixation

Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...

CVE-2018-12501

Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...

CVE-2018-12501

Nagios Fusion prior to 4.1.4 is affected by a cross-site scripting (XSS) vulnerability (CVE-2018-12501) in the web interface. The issue, also referred to as TPS#13332-13335, is documented across multiple sources (Red Hat, CNVD, NVD, CVE lists). The vulnerability arises in Nagios Fusion’s handling...

Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Application Server

Summary The following potential security vulnerabilities have been identified in all versions of IBM OpenPages GRC Platform with Application Server. See the Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC Platform with Application...

Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Application Server

Summary The following potential security vulnerabilities have been identified in all versions of IBM OpenPages GRC Platform with Application Server. See the Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC Platform with Application...

U.S. Builds World's Fastest Supercomputer – Summit

China no longer owns the fastest supercomputer in the world; It is the United States now. Though China still has more supercomputers on the Top 500 list, the USA takes the crown of "world's fastest supercomputer" from China after IBM and the U.S. Department of Energy's Oak Ridge National Laborato...

VMware Fusion 10.x < 10.1.2 Multiple Vulnerabilities (VMSA-2018-0013) (macOS)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 10.x prior to 10.1.2. It is, therefore, missing a security update that fixes multiple flaws that allow local privilege escalation and multiple denial of service attacks. C Tenable Network Security, Inc...

VMware Workstation and Fusion Denial of Service Vulnerability (CNVD-2018-10313)

VMWare Workstation and Fusion are both desktop virtual computer software from VMware. The former provides virtual machine functionality that allows you to run several different operating systems at the same time, while the latter is virtual machine software used to run Windows applications on App...

VMware Workstation and Fusion Privilege Vulnerability

VMware Fusion is a suite of virtual machine software from VMware, Inc. designed to run Windows applications on Macs. A security vulnerability exists in VMware Fusion versions 10.x prior to 10.1.2. A local attacker could exploit this vulnerability to bypass signature detection and gain elevated...

CVE-2018-6962

VMware Fusion 10.x before 10.1.2 contains a signature bypass vulnerability which may lead to a local privilege escalation...

CVE-2018-6962

VMware Fusion 10.x before 10.1.2 contains a signature bypass vulnerability which may lead to a local privilege escalation...

CVE-2018-6963

VMware Workstation 14.x before 14.1.2 and Fusion 10.x before 10.1.2 contain multiple denial-of-service vulnerabilities that occur due to NULL pointer dereference issues in the RPC handler. Successful exploitation of these issues may allow an attacker with limited privileges on the guest machine...