Lucene search
+L

8373 matches found

SUSE Linux
SUSE Linux
added 2025/09/30 2:10 p.m.24 views

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

8.5CVSS7.1AI score0.08438EPSS
SaveExploits3References4
OSV
OSV
added 2025/09/30 2:10 p.m.7 views

SUSE-SU-2025:03436-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373...

7.8CVSS5.8AI score0.08438EPSS
SaveExploits3References3
SUSE Linux
SUSE Linux
added 2025/09/30 2:10 p.m.12 views

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

8.5CVSS6.9AI score0.08438EPSS
SaveExploits3References4
OSV
OSV
added 2025/09/30 2:09 p.m.10 views

SUSE-SU-2025:03435-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373...

7.8CVSS6.2AI score0.08438EPSS
SaveExploits3References3
SUSE Linux
SUSE Linux
added 2025/09/30 2:08 p.m.18 views

Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively y...

8.5CVSS7.1AI score0.08438EPSS
SaveExploits3References4
OSV
OSV
added 2025/09/30 2:08 p.m.8 views

SUSE-SU-2025:03434-1 Security update for open-vm-tools

This update for open-vm-tools fixes the following issues: - CVE-2025-41244: local privilege escalation via the Service Discovery Plugin bsc1250373...

7.8CVSS7AI score0.08438EPSS
SaveExploits3References3
Tenable Nessus
Tenable Nessus
added 2025/09/30 12:00 a.m.11 views

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 : Open VM Tools vulnerability (USN-7785-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.04 host has packages installed that are affected by a vulnerability as referenced in the USN-7785-1 advisory. It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use this...

7.8CVSS8AI score0.08438EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2025/09/30 12:00 a.m.8 views

Ubuntu: Security Advisory (USN-7785-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.9AI score0.08438EPSS
SaveExploits3References4
OSV
OSV
added 2025/09/30 12:00 a.m.14 views

DLA-4316-1 open-vm-tools - security update

Bulletin has no description...

7.8CVSS7AI score0.08438EPSS
SaveExploits3
Ubuntu
Ubuntu
added 2025/09/29 5:29 p.m.31 views

USN-7785-1: Open VM Tools vulnerability

It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use this issue to escalate privileges inside a virtual machine. This update disables the SDMP get-versions.sh script, so version information may no longer be made available...

7.8CVSS7.8AI score0.08438EPSS
SaveExploits3
OSV
OSV
added 2025/09/29 5:29 p.m.10 views

USN-7785-1 open-vm-tools vulnerability

It was discovered that Open VM Tools incorrectly handled permissions with version checking. An attacker could possibly use this issue to escalate privileges inside a virtual machine. This update disables the SDMP get-versions.sh script, so version information may no longer be made available...

7.8CVSS7.3AI score0.08438EPSS
SaveExploits3References2
OSV
OSV
added 2025/09/29 5:15 p.m.6 views

AZL-93039 CVE-2025-41244 affecting package open-vm-tools for versions less than 12.3.5-3

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...

7.8CVSS7.3AI score0.08438EPSS
SaveExploits3References1
Debian CVE
Debian CVE
added 2025/09/29 4:09 p.m.22 views

CVE-2025-41244

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...

7.8CVSS8AI score0.08438EPSS
SaveExploits3
UbuntuCve
UbuntuCve
added 2025/09/29 12:00 a.m.15 views

CVE-2025-41244

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may exploit this vulnerability to escalate...

7.8CVSS7AI score0.08438EPSS
SaveExploits3References4
Photon
Photon
added 2025/09/29 12:00 a.m.11 views

Important Photon OS Security Update - PHSA-2025-4.0-0878

Updates of 'open-vm-tools' packages of Photon OS have been released...

7.8CVSS7.3AI score0.08438EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2025/09/28 6:52 a.m.20 views

CVE-2025-9893

The VM Menu Reorder plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the vmsettodefault function. This makes it possible for unauthenticated attackers to reset all menu...

4.3CVSS5.2AI score0.00133EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/27 6:47 a.m.28 views

CVE-2025-9893 VM Menu Reorder plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update

The VM Menu Reorder plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on the vmsettodefault function. This makes it possible for unauthenticated attackers to reset all menu...

4.3CVSS0.00133EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2025/09/27 12:52 a.m.12 views

WordPress VM Menu Reorder plugin plugin <= 1.0.0 - Cross-Site Request Forgery to Settings Update vulnerability

Cross-Site Request Forgery to Settings Update vulnerability discovered by Nabil Irawan in WordPress Plugin VM Menu Reorder versions = 1.0.0...

4.3CVSS6.8AI score0.00133EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/09/27 12:00 a.m.12 views

WordPress plugin VM Menu Reorder 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS6.5AI score0.00133EPSS
SaveExploits0References3
CBLMariner
CBLMariner
added 2025/09/26 3:08 p.m.11 views

CVE-2025-22247 affecting package open-vm-tools for versions less than 12.3.5-2

CVE-2025-22247 affecting package open-vm-tools for versions less than 12.3.5-2. A patched version of the package is available...

6.1CVSS6.9AI score0.00259EPSS
SaveExploits0
Rows per page
Query Builder