VMware vRealize Network Insight downloadFile Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of VMware vRealize Network Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloadFile function. The issue results from the lack of...

VMware vRealize Network Insight createSupportBundle Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of VMware vRealize Network Insight. Authentication is not required to exploit this vulnerability. The specific flaw exists within the createSupportBundle function. The issue results from the lack of...

VMware Harbor Unauthorized Access Vulnerability

Harbor is an open source container image repository project designed for enterprise users. VMware Harbor has an unauthorized access vulnerability, which stems from an access control error in Harbor and can be used by attackers to construct malicious data for unauthorized access attacks without...

VMware VM3DMP Driver DoS

The vulnerability of the VM3DMP driver for the VMware Tools utility on Windows operating systems is related to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Exploit for Code Injection in Vmware Spring_Cloud_Function

CVE-2022-22963 Exploit Description In Spring Cloud Funct...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to improper input validation in Spring Framework (CVE-2022-22950)

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service, caused by improper input validation in VMware Tanzu Spring Framework CVE-2022-22950. Spring Framework is used in Watson Speech Services to build our STT and TTS java services Please read...

VMware Cloud Foundation Installed (Unix)

Binary data vmwarecloudfoundationinstalled.nbin...

VMware Tools Denial of Service Vulnerability (VMSA-2021-0011) - Windows

VMware Tools is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools";...

VMware Tools Privilege Escalation Vulnerability (VMSA-2021-0013) - Windows

VMware Tools is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vmware:tools...

SureBackup Ping Test Wrong Docker IP

Challenge A SureBackup Job's ping and application tests attempt to interact with an unexpected IP address of a Virtual Machine running Docker. Cause The SureBackup Job's recovery verification tests use the IP addresses reported to the VMware Environment by VMware Tools. Solution To control which ...

VMware Fusion 12.0.x < 12.2.5 Vulnerability (VMSA-2022-0033)

The version of VMware Fusion installed on the remote macOS or Mac OS X host is 12.0.x prior to 12.2.5. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

VMware Workstation 16.0.x < 16.2.5 Vulnerability (VMSA-2022-0033)

The version of VMware Workstation installed on the remote host is 16.0.x prior to 16.2.5. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable,...

VMware ESXi 7.0 / 8.0 Heap Out-of-bounds Write (VMSA-2022-0033)

VMware ESXi contain a heap out-of-bounds write vulnerability in the USB 2.0 controller EHCI. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. The exploitation is contained...

Exploit for Code Injection in Vmware Spring_Framework

Spring4Shell-CVE-2022-22965-POC bash ghost㉿uchiha:$ ./exp...

PT-2025-37884

Name of the Vulnerable Software and Affected Versions linux affected versions not specified Description A memory leak was identified in the Linux kernel related to the vmw balloon module when using the debugfs lookup function. The issue occurs because the result of debugfs lookup requires a call ...

vRealize Log Insight Web Structure Compromise Data Compromise

The vulnerability of the vRealize Log Insight log management tool and the VMware Cloud Foundation virtualization platform exists due to the lack of security measures taken to protect the structure of their web pages. Exploiting this vulnerability allows a malicious actor to compromise the...

VMware vRealize Operations 8.x < 8.6 Hot Fix 8, 8.10.x < 8.10.1 Multiple Vulnerabilities (VMSA-2022-0034)

The version of VMware vRealize Operations vROps running on the remote host is 8.x prior to 8.6 Hot Fix 8 or 8.10.x prior to 8.10.1. It is, therefore, affected by a multiple vulnerabilities: - A privilege escalation vulnerability exists. An authenticated, remote attacker with administrative...

VMware vCenter Server DoS

The vulnerability of the resource bundle processor in the software that manages virtual infrastructure such as VMware vCenter Server relates to the execution of a cycle without sufficient restrictions on its frequency of execution. Exploiting this vulnerability could allow an attacker, operating...

VMware ESXi TCP/IP Memory Corruption Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of VMware ESXi. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the TCPIP kernel...

VMware tackles security flaws in ESXi and vRealize

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary VMware addressed security weaknesses to address a critical-severity vulnerability affecting ESXi, Workstation, Fusion, and Cloud Foundation, as well as a critical-severity command injection flaw...