VMSA-2018-0012 : VMware vSphere, Workstation and Fusion updates enable Hypervisor-Assisted Guest Mitigations for Speculative Store Bypass issue (Spectre)

vCenter Server, ESXi, Workstation, and Fusion update speculative execution control mechanism for Virtual Machines VMs. As a result, a patched Guest Operating System GOS can remediate the Speculative Store bypass issue CVE-2018-3639 using the Speculative-Store- Bypass-Disable SSBD control bit. Thi...

Nagios Fusion Cross-Site Scripting Vulnerability

Nagios Fusion is a suite of IT infrastructure visualization and monitoring solutions from the US-based Nagios Corporation. The solution supports centralized management of decentralized Nagios monitoring servers and provides a visual interface. A cross-site scripting vulnerability exists in Nagios...

VMSA-2018-0016 : VMware ESXi, Workstation, and Fusion updates address multiple out-of-bounds read vulnerabilities

ESXi, Workstation, and Fusion multiple out-of-bounds read vulnerabilities VMware ESXi, Workstation and Fusion contain multiple out-of-bounds read vulnerabilities in the shader translator. Successful exploitation of these issues may lead to information disclosure or may allow attackers with normal...

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in VMware ESXi, Workstation, and Fusion. An attacker could exploit these vulnerabilities to obtain sensitive information. NCCIC encourages users and administrators to review the VMware Security Advisory VMSA-2018-0016 and apply the...

VMSA-2018-0016:VMware ESXi, Workstation, and Fusion updates address multiple out-of-bounds read vulnerabilities

VMSA-2018-0016 VMware ESXi, Workstation, and Fusion updates address multiple out-of-bounds read vulnerabilities VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2018-0016 VMware Security Advisory Severity: Important VMware Security Advisory Synopsis: VMware ESXi, Workstation, a...

Nagios Fusion < 4.1.4 Multiple XSS Vulnerabilities

Nagios Fusion is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nagios Fusion Detection (HTTP)

HTTP based detection of Nagios Fusion. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.813251";...

Security Bulletin: Open Source Oracle Outside In Technology Vulnerabilities in IBM Content Collector for Email

Summary An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technology Outside In Filters component has high confidentiality impact, low integrity impact, and low availability impact. Vulnerability Details CVEID: CVE-2016-5558 DESCRIPTION: An unspecified vulnerabili...

Security Bulletin: Multiple Oracle Outside In Technology (OIT) July 2016 CPU in IBM Content Collector for Email

Summary An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technology Outside In Filters component has high confidentiality impact, low integrity impact, and low availability impact. Vulnerability Details CVEID: CVE-2016-3574 DESCRIPTION: An unspecified vulnerabili...

CVE-2018-12501

Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...

CVE-2018-12501

Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...

Session fixation

Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...

CVE-2018-12501

Nagios Fusion before 4.1.4 has XSS, aka TPS13332-13335...

CVE-2018-12501

Nagios Fusion prior to 4.1.4 is affected by a cross-site scripting (XSS) vulnerability (CVE-2018-12501) in the web interface. The issue, also referred to as TPS#13332-13335, is documented across multiple sources (Red Hat, CNVD, NVD, CVE lists). The vulnerability arises in Nagios Fusion’s handling...

Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Application Server

Summary The following potential security vulnerabilities have been identified in all versions of IBM OpenPages GRC Platform with Application Server. See the Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC Platform with Application...

Security Bulletin: Potential vulnerabilities in IBM OpenPages GRC Platform with Application Server

Summary The following potential security vulnerabilities have been identified in all versions of IBM OpenPages GRC Platform with Application Server. See the Vulnerability Details section for more information. Vulnerability Details Customers who have IBM OpenPages GRC Platform with Application...

U.S. Builds World's Fastest Supercomputer – Summit

China no longer owns the fastest supercomputer in the world; It is the United States now. Though China still has more supercomputers on the Top 500 list, the USA takes the crown of "world's fastest supercomputer" from China after IBM and the U.S. Department of Energy's Oak Ridge National Laborato...

VMware Fusion 10.x < 10.1.2 Multiple Vulnerabilities (VMSA-2018-0013) (macOS)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 10.x prior to 10.1.2. It is, therefore, missing a security update that fixes multiple flaws that allow local privilege escalation and multiple denial of service attacks. C Tenable Network Security, Inc...

VMware Workstation and Fusion Denial of Service Vulnerability (CNVD-2018-10313)

VMWare Workstation and Fusion are both desktop virtual computer software from VMware. The former provides virtual machine functionality that allows you to run several different operating systems at the same time, while the latter is virtual machine software used to run Windows applications on App...

VMware Workstation and Fusion Privilege Vulnerability

VMware Fusion is a suite of virtual machine software from VMware, Inc. designed to run Windows applications on Macs. A security vulnerability exists in VMware Fusion versions 10.x prior to 10.1.2. A local attacker could exploit this vulnerability to bypass signature detection and gain elevated...