13364 matches found
VMware Releases Security Update for Horizon Client for Windows
VMware has released a security update to address a vulnerability in Horizon Client for Windows. An attacker could exploit this vulnerability to take control of an affected system. The Cybersecurity and Infrastructure Security Agency CISA encourages users and administrators to review VMware Securi...
Photon OS 1.0: Linux PHSA-2020-1.0-0299
An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0299. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137316...
Photon OS 1.0: Bindutils PHSA-2020-1.0-0298
An update of the bindutils package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0298. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
The vulnerability of the Cortado Thinprint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor allows a malicious actor to trigger a service failure.
The vulnerability of the Cortado Thinprint component in the VMware Workstation virtualization platform and the Horizon Client for Windows hypervisor is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of VMware Fusion, Horizon Client for Mac, and VMware Remote Console for Mac lies in the insecure management of privileges, allowing an attacker to elevate their privileges to the root level.
The vulnerability of VMware Fusion, Horizon Client for Mac, and VMware Remote Console for Mac is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
Photon OS 1.0: Nodejs PHSA-2020-1.0-0298
An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0298. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13732...
Advanced transport modes (HotAdd and SAN) fail over to NBD mode
Challenge Advanced transport modes Virtual Appliance HotAdd or Direct Storage access may not work, failing over to the NBD transport mode instead. If you are seeing error "Cannot use advanced transport modes, failing over to NBD " you should check the HotAdd attacher agent log default location -...
VMware Horizon Client for Windows update addresses privilege escalation vulnerability (CVE-2020-3961)
3. VMware Horizon Client for Windows privilege escalation vulnerability VMware Horizon Client for Windows contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. VMware has evaluated the severity of this issue to be in the Important...
KLA12097 OSI vulnerability in VMware Workstation and Player
Out of bounds read vulnerability vulnerability was found in VMware Workstation and Player. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories VMSA-2020-0012 Related products VMware-Workstation VMware-Player CVE list CVE-2020-3960 unknown Solution...
VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution Exploit
Exploit for java platform in category web applications Exploit Title: VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution Exploit Author: Tomas Melicher Technical Details: https://citadelo.com/en/blog/full-infrastructure-takeover-of-vmware-cloud-director-CVE-2020-3956/ Vendor Homepage:...
VMware Cloud Director Remote Code Execution (CVE-2020-3956)
A remote code execution vulnerability exists in VMware Cloud Director. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Cisco UCS Director Cloupia Script - Remote Code Execution
This Metasploit module exploits an authentication bypass and directory traversals in Cisco UCS Director This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco UCS Director Cloupia Script RCE',...
VMWare vCloud Director 9.7.0.15498291 - Remote Code Execution
VMWare vCloud Director version 9.7.0.15498291 suffers from a remote code execution vulnerability. Exploit Title: VMWAre vCloud Director 9.7.0.15498291 - Remote Code Execution Exploit Author: Tomas Melicher Technical Details:...
Photon OS 3.0: Apache PHSA-2020-3.0-0100
An update of the apache package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0100. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137189;...
Photon OS 2.0: Glibc PHSA-2020-2.0-0248
An update of the glibc package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0248. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137198...
Photon OS 2.0: Erlang PHSA-2020-2.0-0251
An update of the erlang package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0251. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid13719...
Photon OS 3.0: Linux PHSA-2020-3.0-0100
An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0100. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137190;...
Photon OS 2.0: Linux PHSA-2020-2.0-0251
An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0251. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid137195...
Cisco UCS Director Cloupia Script Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco UCS Director Cloupia Script RCE', 'Description' = %q This module exploits an authentication bypass and directory traversals in Cisco UCS...
