13365 matches found
VMware Fusion USB Arbitrator Setuid Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Fusion USB Arbitrator Setuid Privilege Escalation', 'Description' = %q This exploits an improper use of setuid binaries within VMware Fusi...
VMware Fusion USB Arbitrator Setuid Privilege Escalation Exploit
This Metasploit module exploits an improper use of setuid binaries within VMware Fusion versions 10.1.3 through 11.5.3. The Open VMware USB Arbitrator Service can be launched outside of its standard path which allows loading of an attacker controlled binary. By creating a payload in the user home...
VMware Workstation OVF NTLM Challenge Response Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Vmware Workstation. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Veeam Backup & Replication 10 Cumulative Patch 1
More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running version 10 build 10.0.0.4461 prior to installing this update. You can check this under Help | About in the Veeam Backu...
Announcing the Release of Malware Prevention for Linux
The VMware Carbon Black team has a mission to keep your entire organization safe from cyber attacks. To deliver on this for today’s landscape, the Carbon Black Cloud platform has added malware prevention for Linux to bring the entire protection lifecycle to Windows, macOS, and Linux. With Linux n...
VMware Workstation 15.0.x < 15.5.2 Cortado Thinprint DoS (VMSA-2020-0005)
The version of VMware Workstation installed on the remote Windows host is 15.0.x prior to 15.5.2. It is, therefore, affected by a flaw related to Cortado Thinprint and virtual printing that allows an attacker to overflow the heap leading to denial of service conditions. Note that Nessus has not...
VMware Fusion 11.0.x < 11.5.3 'setuid' Privilege Escalation (VMSA-2020-0005)
The version of VMware Fusion installed on the remote macOS or Mac OS X host is 11.0.x prior to 11.5.3. It is, therefore, affected by a flaw related to improper use of setuid binaries that allows privilege escalation. Note that Nessus has not tested for these issues but has instead relied only on...
Photon OS 3.0: Linux PHSA-2020-3.0-0069
An update of the linux package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0069. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134874;...
Photon OS 3.0: Consul PHSA-2020-3.0-0069
An update of the consul package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0069. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134873;...
VMware ESXi 5.5 / 6.0 / 6.5 / 6.7 DoS (VMSA-2018-0018) (remote check)
The remote VMware ESXi host is version 5.5, 6.0, 6.5, or 6.7 and is missing a security patch. It is, therefore, vulnerable to a denial of service vulnerability. The vulnerability exists in the RPC handler due to a NULL pointer dereference issue. An authenticated, remote attacker can exploit this...
Photon OS 1.0: Mysql PHSA-2020-1.0-0284
An update of the mysql package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0284. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134835...
VMware ESXi 5.5 / 6.0 / 6.5 / 6.7 Information Disclosure (VMSA-2018-0012) (Spectre) (remote check)
The remote VMware ESXi host is version 5.5, 6.0, 6.5, or 6.7 and is missing a security patch. It is, therefore, vulnerable to an information disclosure vulnerability. The vulnerability exists in the speculative execution control mechanism. An unauthenticated, local attacker can exploit this, via...
Photon OS 2.0: Linux PHSA-2020-2.0-0219
An update of the linux package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0219. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid134875...
VMware ESXi 5.5 / 6.0 XSS (VMSA-2016-0023) (remote check)
The remote VMware ESXi host is version 5.5 or 6.0, and is missing a security patch. It is, therefore, vulnerable to a cross-site scripting XSS vulnerability. The vulnerability exists due to improper validation of user-supplied input before returning it to users. An authenticated, remote attacker...
VMware Carbon Black Removes Endpoint Limits for Customers to Secure Their Changing Environments During the COVID-19 Crisis
Novel Coronavirus COVID-19 has thrust personal safety and security into the public’s consciousness in an unprecedented way. Families, employees, and global businesses have been forced to upend their lives to make their respective communities healthier and more resilient. A key component to this...
CVE-2019-19023
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform...
CVE-2019-19029
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 allows SQL Injection via user-groups in the VMware Harbor Container Registry for the Pivotal Platform...
CVE-2019-19023
Cloud Native Computing Foundation Harbor prior to 1.8.6 and 1.9.3 has a Privilege Escalation Vulnerability in the VMware Harbor Container Registry for the Pivotal Platform...