The vulnerability of VMware Fusion’s hypervisor, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of VMware Fusion relates to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code within the context of the Fusion application...

CVE-2024-38811

VMware Fusion 13.x before 13.6 contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application...

cfusion.txt

L0pht Security Advisory ------------- URL Origin: http://www.l0pht.com/advisories.html Release Date: April 20th, 1999 Application: Cold Fusion Application Server Severity: Web users can download, delete and even upload executable files to a Cold Fusion server. Access is not limited to files under...