Cross site scripting

Cross-site scripting XSS vulnerability in jsp/cal/cal2.jsp in the calendar application in the examples web application in Apache Tomcat on Red Hat Enterprise Linux 5, Desktop Workstation 5, and Linux Desktop 5 allows remote attackers to inject arbitrary web script or HTML via the time parameter,...

Mandriva Linux Security Advisory : gnome-screensaver (MDVSA-2010:040)

Multiple vulnerabilities has been discovered and corrected in gnome-screensaver : gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattend...

SOL11797 - Pre-logon sequence vulnerability to token spoofing

A vulnerability exists in the FirePass pre-logon sequence. Under certain conditions, the FirePass controller can accept the output of a pre-logon sequence check that would have been run on a different computer. This vulnerability would allow an attacker to use the pre-logon token from a workstati...

CVE-2009-4811

CVE-2009-4811 describes a remote denial-of-service in VMware Authorization Service (vmware-authd) via a crafted sequence in USER and PASS that crashes the process. Affected products include VMware Workstation 7.0 (before 7.0.1 build 227600), VMware Workstation 6.5.x (before 6.5.4 build 246459), V...

PT-2010-1620 · Vmware · Vmware Server +3

Name of the Vulnerable Software and Affected Versions: VMware Workstation versions 7.0 through 7.0.0 build 227600 VMware Workstation version 6.5.x through 6.5.3 build 246459 VMware Player versions 3.0 through 3.0.0 build 227600 VMware Player version 2.5.x through 2.5.3 build 246459 VMware ACE...

CVE-2009-4811: Use of Externally-Controlled Format String

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.x before 6.5.4 build 246459, VMware Player 3.0 before 3.0.1 build 227600 and 2.5.x before 2.5.4 build 246459, VMware ACE 2.6 before 2.6.1 build 2276...

CVE-2008-7255

loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...

CVE-2008-7255

loginscreen.tcl in aMSN aka Alvaro's Messenger before 0.97.1 saves a password after logout, which allows physically proximate attackers to hijack a session by visiting an unattended workstation...

VMware Products Tools Remote Code Execution Vulnerabilies (win)

The host is installed with VMWare products and are prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareprdtstoolscodeexecvulnlin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Tools Remote Code Execution Vulnerabilities win Authors: Antu Sanadi...

VMware Products Tools Remote Code Execution Vulnerabilies (win)

The host is installed with VMWare products and are prone to remote code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbvmwareprdtstoolscodeexecvulnwin.nasl 5388 2017-02-21 15:13:30Z teissa $ VMware Products Tools Remote Code Execution Vulnerabilities win Authors: Antu Sanadi...

VMware Products Tools RCE Vulnerabilities (VMSA-2010-0007) - Linux

VMWare products are prone to remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Products Tools RCE Vulnerabilities (VMSA-2010-0007) - Windows

VMWare products are prone to remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

VMware Products 'vmware-vmx' Information Disclosure Vulnerability (VMSA-2010-0007) - Linux

VMware products are prone to an information disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

VMware Products 'vmware-vmx' Information Disclosure Vulnerability (VMSA-2010-0007) - Windows

VMware products are prone to an information disclosure vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Code injection

The USB service in VMware Workstation 7.0 before 7.0.1 build 227600 and VMware Player 3.0 before 3.0.1 build 227600 on Windows might allow host OS users to gain privileges by placing a Trojan horse program at an unspecified location on the host OS disk...

CVE-2009-1565

VMware VMnc VMnc codec/VMware Movie Decoder (Windows) is affected by CVE-2009-1565. The issue arises from heap-based buffer overflows triggered by crafted HexTile-encoded video chunks in AVI files, enabling remote code execution. Affected products include VMware Movie Decoder before 6.5.4 Build 2...

CVE-2010-1139

Format string vulnerability in vmrun in VMware VIX API 1.6.x, VMware Workstation 6.5.x before 6.5.4 build 246459, VMware Player 2.5.x before 2.5.4 build 246459, and VMware Server 2.x on Linux, and VMware Fusion 2.x before 2.0.7 build 246742, allows local users to gain privileges via format string...

CVE-2010-1138

CVE-2010-1138 corresponds to an information-disclosure vulnerability in VMware hosted products where a guest can cause the host vmware-vmx memory to be exposed via the virtual networking stack when processing network packets. Affected products include VMware Workstation/Player/ACE/Server/Fusion a...

CVE-2010-1140

VMware Workstation 7.0 (before 7.0.1, build 227600) and VMware Player 3.0 (before 3.0.1, build 227600) on Windows are affected by CVE-2010-1140 through their USB service. Local host users can escalate privileges by placing a Trojan horse on the host OS disk. Affected products and builds are confi...

CVE-2010-1141

CVE-2010-1141 affects VMware Tools and related VMware host components (Workstation, Player, ACE, Server, Fusion, ESXi/ESX). The flaw is improper access/loading of libraries, enabling a user-assisted remote attacker to trigger arbitrary code execution by convincing a Windows guest OS user to click...