CVE-2023-4178

CVE-2023-4178 describes an Authentication Bypass by Spoofing vulnerability in Neutron Smart VMS. Affected product: Neutron Smart VMS prior to version b1130.1.0.1. Root cause: spoofing flaw that bypasses authentication, enabling unauthorized access at the authentication stage. Impact stated in lin...

CVE-2023-4178 Authentication Bypass in Neutron Smart VMS

Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass. This issue affects Neutron Smart VMS: before b1130.1.0.1...

CVE-2023-4178 Authentication Bypass in Neutron Smart VMS

Authentication Bypass by Spoofing vulnerability in Neutron Neutron Smart VMS allows Authentication Bypass. This issue affects Neutron Smart VMS: before b1130.1.0.1...

PT-2023-28088 · Unknown · Neutron Smart Vms

Name of the Vulnerable Software and Affected Versions: Neutron Smart VMS versions prior to b1130.1.0.1 Description: The issue is an Authentication Bypass by Spoofing vulnerability in Neutron Smart VMS, allowing unauthorized access. Recommendations: For versions prior to b1130.1.0.1, update to a...

Add New VMs to MCS catalog Failed with Error "CreateClone Failed: No Virtual Disk Image Exists"

Received an Inner Error when adding new VMs to an existing MCS catalog: CreateClone failed: no virtual disk image exists with ID 'xxxx'...

CVE-2023-39382

Summary: CVE-2023-39382 is an input verification vulnerability in the audio module of Huawei’s HarmonyOS that may cause a VM restart when exploited. The available documents link the issue to HarmonyOS and describe the impact as VM reboot, with no public exploitation details provided. The root cau...

EulerOS 2.0 SP9 : binutils (EulerOS-SA-2023-2573)

According to the versions of the binutils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils. CVE-2023-25584 Note that Tenable Network...

Denial Of Service (DoS)

wireshark is vulnerable to Denial Of Service DoS. The vulnerability exists through the VMS TCPIPtrace file parser in the library, allowing an attacker to cause an application crash via maliciously crafted file...

Medium: wireshark

Issue Overview: VMS TCPIPtrace file parser crash in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via crafted capture file CVE-2023-2856 XRA dissector infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted...

CVE-2023-20891

The CVE-2023-20891 issue affects VMware Tanzu Application Service for VMs and Isolation Segment. A information-disclosure vulnerability arises from credentials being logged in hex encoding within platform system audit logs. A non-admin user with access to these logs could access hex-encoded CF AP...

VMware Tanzu Application Service for VMs and Isolation Segment updates address information disclosure vulnerability (CVE-2023-20891)

3. VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability CVE-2023-20891 The VMware Tanzu Application Service for VMs and Isolation Segment contain an information disclosure vulnerability due to the logging of credentials in hex encoding in platform...

FreeBSD : virtualbox-ose -- multiple vulnerabilities (cf40e8b7-264d-11ee-a468-80fa5b29d485)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the cf40e8b7-264d-11ee-a468-80fa5b29d485 advisory. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported...

Oracle VM VirtualBox < 6.1.46 / 7.x < 7.0.10 (July 2023 CPU)

The version of VirtualBox installed on the remote host is prior to 6.1.46 or 7.0.10. It is, therefore, affected by multiple vulnerabilities as referenced in the July 2023 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions...

CVE-2023-22017

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.46 and Prior to 7.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

Buffer overflow

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.46 and Prior to 7.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

virtualbox-ose -- multiple vulnerabilities

[email protected] reports: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 6.1.46 and Prior to 7.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure...

CLSA-2023-1687795384 Fix CVE(s): CVE-2023-25584, CVE-2017-12450, CVE-2023-25588, CVE-2023-25585

SECURITY UPDATE: fixing the existing CVE-2017-12450 patches that were incorrectly ported from upstream - debian/patches/CVE-2017-12450-1.patch: fix address violation errors - debian/patches/CVE-2017-12450-2.patch: import patches from mainline to fix minor binutils bugs - CVE-2017-12450 SECURITY...

VMs Boot Extremely Slowly on Specific Hosts

VMs boot extremely slowly on specific hosts, the booting process mainly stuck in the phrase when vm icon changes from yellow to blue...

CVE-2023-28175

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request...

CVE-2023-28175

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request...