VMSA-2021-0002:VMware ESXi and vCenter Server updates address multiple security vulnerabilities

Advisory ID: VMSA-2021-0002 CVSSv3 Range: 5.3-9.8 Issue Date:2021-02-23 Updated On: 2021-02-23 Initial Advisory CVEs: CVE-2021-21972, CVE-2021-21973, CVE-2021-21974 Synopsis: VMware ESXi and vCenter Server updates address multiple security vulnerabilities CVE-2021-21972, CVE-2021-21973,...

Vmware VMware Spring Security Permission License and Access Control Issues Vulnerability

Vmware VMware Spring Security is a suite of security frameworks from Vmware that provide illustrative security protections for Spring-based applications. A vulnerability exists in VMware Spring Security with privilege permission and access control issues. The vulnerability stems from an attacker...

Photon OS 2.0: Python3 PHSA-2021-2.0-0317

An update of the python3 package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0317. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

VMware Releases Security Update

VMware has released a security update to address a vulnerability in vSphere Replication. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2021-0001 and apply the necessary update...

CVE-2021-25140

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

CVE-2021-25139

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This...

VMSA-2021-0001:vSphere Replication updates address a command injection vulnerability

Advisory ID: VMSA-2021-0001 CVSSv3 Range: 7.2 Issue Date:2021-02-11 Updated On: 2021-02-11 Initial Advisory CVEs: CVE-2021-21976 Synopsis: vSphere Replication updates address a command injection vulnerability CVE-2021-21976 RSS Feed Download PDF Download Text File Share this page on social media:...

Exploit for Out-of-bounds Write in Vmware Horizon_Daas

VMwareESXIOpenSLPPoCs CVE-2020-3992...

CentOS 8 : virt:rhel (CESA-2020:1358)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2020:1358 advisory. - QEMU: block: iscsi: OOB heap access via an unexpected response of iSCSI Server CVE-2020-1711 - QEMU: slirp: OOB buffer access while emulating tcp...

Security Bulletin: Vulnerability in IBM WebSphere Application Server Liberty affects IBM Spectrum Protect Backup-Archive Client web user interface, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtual Environments

Summary A vulnerability IBM WebSphere Application Server Liberty could allow an attacker to obtain sensitive information. This vulnerability may affect the IBM Spectrum Protect Backup-Archive Client web user interface, IBM Spectrum Protect for Space Management, and IBM Spectrum Protect for Virtua...

Deploying The New VMware Carbon Black Container Security Solution

“VMware acquired Octarine, a privately held company in Sunnyvale, California on May 27, 2020. Octarine offers a cloud-native security platform for the complete lifecycle of applications running on Kubernetes, helping customers to protect their cloud-native apps from build to runtime. Acquiring...

Photon OS 3.0: Sudo PHSA-2021-3.0-0188

An update of the sudo package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0188. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc...

Photon OS 2.0: Glibc PHSA-2021-2.0-0315

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0315. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145694...

Photon OS 3.0: Glibc PHSA-2021-3.0-0189

An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0189. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145696...

Vmware Spring Cloud Data Flow SQL Injection Vulnerability

Vmware Spring Cloud Data Flow is a code library for streaming and batch data processing in microservices from Vmware, Inc. A SQL injection vulnerability exists in Spring Cloud Data Flow versions 2.6.x prior to 2.6.5, versions 2.5.x prior to 2.5.4, which stems from the vulnerability of the...

Photon OS 2.0: Linux PHSA-2021-2.0-0314

An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0314. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid145459...

Photon OS 2.0: Nodejs PHSA-2021-2.0-0313

An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0313. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14541...

The vulnerability of the VMware SD-WAN Orchestrator management platform, related to the failure to implement security measures for SQL query structures, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the VMware SD-WAN Orchestrator management platform is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Photon OS 2.0: Dnsmasq PHSA-2021-2.0-0312

An update of the dnsmasq package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-2.0-0312. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 1.0: Dnsmasq PHSA-2021-1.0-0356

An update of the dnsmasq package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-1.0-0356. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...