95 matches found
CVE-2022-43163
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /clients/viewclient.php...
CVE-2022-29984
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/viewclient&id=...
Simple Client Management System SQL注入漏洞
Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to a SQL injection vulnerability that originates in /cms/admin/?page= client/viewclient&id= lacks validation of external input...
VMware Horizon View Client 5.x < 5.5.3 DoS (VMSA-2022-0002)
The version of VMware Horizon Client for Windows installed on the remote host is less than 5.5.3. It is, therefore, affected by a denial of service DoS vulnerability in the Cortado ThinPrint component's TrueType font parser. A local attacker can exploit this in order to cause the ThinPrint servic...
VMware Horizon View Client < 5.4.4 Multiple Vulnerabilities (VMSA-2020-0020)
The version of VMware Horizon Client for Windows installed on the remote host is less than 5.4.4. It is, therefore, affected by the following vulnerabilities: - Multiple out-of-bounds read vulnerabilities in Cortado ThinPrint components JPEG2000 parser, EMR STRETCHDIBITS parser, and EMF Parser. A...
VMware Horizon View Client 5.x < 5.4.3 Privilege Escalation (VMSA-2020-0017) (macOS)
The version of VMware Horizon View Client installed on the remote macOS or Mac OS X host is 5.x prior to 5.4.3. It is, therefore, affected by a privilege escalation vulnerability in the service startup script due to improper XPC Client validation. A local attacker with normal user privileges can...
VMware Horizon View Client < 5.4.3 Privilege Escalation Vulnerability (VMSA-2020-0013)
The version of VMware Horizon View Client installed on the remote Windows host is prior to 5.4.3. It is, therefore, affected by a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local authenticated attacker can exploit this issue to run...
VMware Horizon View Client 5.x < 5.2.0 Use-After-Free (VMSA-2019-0014)
The version of VMware Horizon View Client installed on the remote host is 5.x prior to 5.2.0. It is, therefore, affected by a use-after-free error in the virtual sound device that allows a local attacker on the guest machine with low privileges to execute code on the host. Note that Nessus has no...
VMware Horizon View Client 4.x < 4.8.1 Information Disclosure Vulnerability (VMSA-2018-0019)
The version of VMware Horizon View Client installed on the remote host is 4.x prior to 4.8.1. It is, therefore, affected by an unspecified information disclosure vulnerability related to the Message Framework library. Note that Nessus has not tested for these issues but has instead relied only on...
VMware Horizon View Client Detection (Linux)
Binary data vmwarehorizonviewclientinstallednix.nbin...
VMware Horizon View Client 4.x < 4.8.0 Privilege Escalation Vulnerability (VMSA-2018-0014)
The version of VMware Horizon View Client installed on the remote host is 4.x prior to 4.8.0. It is, therefore, affected by a privilege escalation vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. C Tenab...
VMware Horizon View Client 4.x < 4.7.0 Multiple Vulnerabilities (VMSA-2018-0003)
The version of VMware Horizon View Client installed on the remote host is 4.x prior to 4.7.0. It is, therefore, affected by multiple vulnerabilities including disclosure of memory contents and a DoS. Note that exploitation requires that virtual printing is enabled disabled by default on...
VMWare Workstation and Horizon View Client Read Across Boundaries Vulnerability
VMWare Workstation and Horizon View Client are both products of VMware. The former is a set of desktop virtualization software; the latter is a client device that allows access to VMware Horizon desktops from any location. An out-of-bounds read vulnerability exists in the TPView.dll file in VMwar...
CVE-2017-4948
VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...
Out-of-bounds
VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...
CVE-2017-4948
VMware Workstation 14.x before 14.1.0 and 12.x and Horizon View Client 4.x before 4.7.0 contain an out-of-bounds read vulnerability in TPView.dll. On Workstation, this issue in conjunction with other bugs may allow a guest to leak information from host or may allow for a Denial of Service on the...
CVE-2017-4948
CVE-2017-4948 is an out-of-bounds read flaw in TPView.dll affecting VMware Workstation (14.x before 14.1.0 and 12.x) and Horizon View Client (4.x before 4.7.0). Exploitation is tied to scenarios where virtual printing is enabled, which is not by default in Workstation but is by default in Horizon...
VMware Releases Security Updates
VMware has released security updates to address multiple vulnerabilities in vRealize Operations for Horizon, vRealize Operations for Published Applications, Workstation, Horizon View Client, and Tools. A remote attacker could exploit these vulnerabilities to take control of an affected system...
KLA11175 DoS and ACE vulnerabilities in VMware Products
Multiple serious vulnerabilities have been found in VMware Products. Malicious users can exploit these vulnerabilities to cause denial of service and execute arbitrary code. Below is a complete list of vulnerabilities: 1. An out-of-bounds read vulnerability in TPView.dll can be exploited remotely...
VMWare Workstation and Horizon View Client for Windows JPEG2000 Parser Arbitrary Code Execution Vulnerability (CNVD-2017-37489)
VMWare Workstation for Windows and Horizon View Client for Windows are both products of VMware, a Windows-based desktop virtualization software; the latter is a Windows-based client for accessing VMware Horizon desktops from any location. The former is a set of Windows-based desktop virtualizatio...