13329 matches found
VMware vRealize Operations 8.x < 8.10 Arbitrary File Read (VMSA-2022-0026)
The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.10. It is, therefore, affected by a vulnerability: - VMware Aria Operations contains an arbitrary file read vulnerability. A malicious actor with administrative privileges may be able to read arbitrary...
CVE-2022-31711
CVE-2022-31711 affects VMware vRealize Log Insight. The provided sources consistently describe an Information Disclosure vulnerability that allows an unauthenticated, remote actor to collect sensitive session and application information. The issue is categorized with CVSS v3.1 metrics (AV:N/AC:L/...
PT-2023-1176 · Vmware · Vrealize Log Insight
Name of the Vulnerable Software and Affected Versions: vRealize Log Insight affected versions not specified Description: The vRealize Log Insight contains a Directory Traversal Vulnerability, allowing an unauthenticated, malicious actor to inject files into the operating system of an impacted...
VMSA-2023-0001:VMware vRealize Log Insight latest updates address multiple security vulnerabilities
Advisory ID: VMSA-2023-0001.1 CVSSv3 Range: 5.3-9.8 Issue Date:2023-01-24 Updated On: 2023-01-31 CVEs: CVE-2022-31706, CVE-2022-31704, CVE-2022-31710, CVE-2022-31711 Synopsis: VMware vRealize Log Insight latest updates address multiple security vulnerabilities CVE-2022-31706, CVE-2022-31704,...
VMware vRealize Network Insight createSupportBundle Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware vRealize Network Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists within the createSupportBundle function. The issue results from the lack of...
VMware vRealize Network Insight downloadFile Directory Traversal Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VMware vRealize Network Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloadFile function. The issue results from the lack of...
VMware vRealize Operations CaSA Improper Privilege Management Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of VMware vRealize Operations. Authentication is required to exploit this vulnerability. The specific flaw exists within the configuration of CaSA. A crafted administrator command can trigger execution of ...
VMware vRealize Operations CaSA Improper Access Control Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of VMware vRealize Operations. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists with...
VMware Harbor Unauthorized Access Vulnerability
Harbor is an open source container image repository project designed for enterprise users. VMware Harbor has an unauthorized access vulnerability, which stems from an access control error in Harbor and can be used by attackers to construct malicious data for unauthorized access attacks without...
The vulnerability of the VM3DMP driver for the VMware Tools utility on Windows operating systems allows a hacker to trigger a service failure.
The vulnerability of the VM3DMP driver for the VMware Tools utility on Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Exploit for Code Injection in Vmware Spring_Cloud_Function
CVE-2022-22963 Exploit Description In Spring Cloud Funct...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to improper input validation in Spring Framework (CVE-2022-22950)
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by improper input validation in VMware Tanzu Spring Framework CVE-2022-22950. Spring Framework is used in Watson Speech Services to build our STT and TTS java services Please read...
VMware Tools Denial of Service Vulnerability (VMSA-2021-0011) - Windows
VMware Tools is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools";...
VMware Cloud Foundation Installed (Unix)
Binary data vmwarecloudfoundationinstalled.nbin...
VMware Tools Privilege Escalation Vulnerability (VMSA-2021-0013) - Windows
VMware Tools is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools...
SureBackup Ping Test Wrong Docker IP
Challenge A SureBackup Job's ping and application tests attempt to interact with an unexpected IP address of a Virtual Machine running Docker. Cause The SureBackup Job's recovery verification tests use the IP addresses reported to the VMware Environment by VMware Tools. Solution To control which ...
VMware Workstation 16.0.x < 16.2.5 Vulnerability (VMSA-2022-0033)
The version of VMware Workstation installed on the remote host is 16.0.x prior to 16.2.5. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable,...
VMware Fusion 12.0.x < 12.2.5 Vulnerability (VMSA-2022-0033)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 12.0.x prior to 12.2.5. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...
VMware ESXi 7.0 / 8.0 Heap Out-of-bounds Write (VMSA-2022-0033)
VMware ESXi contain a heap out-of-bounds write vulnerability in the USB 2.0 controller EHCI. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. The exploitation is contained...