Lucene search
+L

2910 matches found

OSV
OSV
added 2023/10/20 9:15 a.m.11 views

CVE-2023-34044

VMware Workstation 17.x prior to 17.5 and Fusion13.x prior to 13.5 contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual machine may be able to...

6CVSS5.8AI score0.00202EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/20 9:15 a.m.35 views

CVE-2023-34044

VMware Workstation 17.x prior to 17.5 and Fusion13.x prior to 13.5 contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual machine may be able to...

7.1CVSS6.6AI score0.00202EPSS
SaveExploits0References1
Prion
Prion
added 2023/10/20 9:15 a.m.21 views

Out-of-bounds

VMware Workstation 17.x prior to 17.5 and Fusion13.x prior to 13.5 contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual machine may be able to...

1.4CVSS5.7AI score0.00202EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2023/10/20 8:56 a.m.141 views

CVE-2023-34044

CVE-2023-34044 is an out-of-bounds read vulnerability in VMware Workstation 17.x before 17.5 and VMware Fusion 13.x before 13.5, in the Bluetooth host-device sharing function. A local attacker with VM privileges can read sensitive information from hypervisor memory. No exploit details are provide...

7.1CVSS6AI score0.00202EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/20 12:00 a.m.14 views

PT-2023-6348

Name of the Vulnerable Software and Affected Versions VMware Workstation versions prior to 17.5 and VMware Fusion versions prior to 13.5 Description A flaw exists in the functionality for sharing host Bluetooth devices with virtual machines in VMware Workstation and VMware Fusion. This issue...

7.1CVSS6.5AI score0.00202EPSS
SaveExploits0References37
CNNVD
CNNVD
added 2023/10/20 12:00 a.m.33 views

VMware Workstation Buffer Error Vulnerability

VMware Workstation is a set of virtual machine software from VMware. The software provides the ability to run multiple virtual machines with different operating systems at the same time. A security vulnerability exists in VMware Workstation version 17.x prior to 17.5, which stems from an...

7.1CVSS6.2AI score0.00202EPSS
SaveExploits0References2
VMware
VMware
added 2023/10/18 12:00 a.m.55 views

VMSA-2023-0022:VMware Fusion and Workstation updates address privilege escalation and information disclosure vulnerabilities

Advisory ID: VMSA-2023-0022 CVSSv3 Range: 6.6-7.1 Issue Date:2023-10-19 Updated On: 2023-10-19 Initial Advisory CVEs: CVE-2023-34044, CVE-2023-34045, CVE-2023-34046 Synopsis: VMware Fusion and Workstation updates address privilege escalation and information disclosure vulnerabilities...

7.8CVSS7.2AI score0.00202EPSS
SaveExploits0References23Affected Software2
OpenVAS
OpenVAS
added 2023/09/25 12:00 a.m.17 views

SUSE: Security Advisory (SUSE-SU-2023:3739-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.3AI score0.00428EPSS
SaveExploits1References4
Amd
Amd
added 2023/09/20 12:00 a.m.60 views

DXE Driver Memory Leaks

Bulletin ID: AMD-SB-4007 Potential Impact: Data Leakage Severity: Medium Summary Potential memory leak vulnerabilities in AMD Driver Execution Environment DXE driver. CVE Details Refer to Glossary for explanation of terms CVE| Severity| Description ---|---|--- CVE-2023-20594| Medium| Improper...

5.5CVSS5.2AI score0.00175EPSS
SaveExploits0
Citrix
Citrix
added 2023/09/12 12:00 a.m.62 views

Fail to launch session with Event ID6 error after changing display setting.

Launch session takes 67 seconds and then fails. Check the Event Log, there are several Event ID 6 Errors recorded. Error Message: Citrix ICA could not configure Thinwire and switch to the remote ICA display. Rebooting the workstation or logging in to the console will fix this...

7.2AI score
SaveExploits0
NVD
NVD
added 2023/08/03 5:15 p.m.26 views

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

5.3CVSS4.6AI score0.00356EPSS
SaveExploits0References1
Prion
Prion
added 2023/08/03 5:15 p.m.27 views

Design/Logic Flaw

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

5CVSS5AI score0.00356EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/08/03 4:34 p.m.12 views

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

4CVSS6.7AI score0.00356EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/08/03 4:34 p.m.38 views

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

4CVSS5.5AI score0.00356EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/03 12:00 a.m.9 views

NVIDIA Omniverse Workstation Launcher Security Vulnerability

NVIDIA Omniverse Launcher is an easily extensible open platform from NVIDIA. Built for virtual collaboration and real-time physically accurate simulations. A security vulnerability exists in the NVIDIA Omniverse Workstation Launcher, which stems from a security issue in the authentication process...

5.3CVSS6.9AI score0.00356EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/07/19 12:00 a.m.26 views

SUSE: Security Advisory (SUSE-SU-2023:2870-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.7AI score0.00503EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
added 2023/06/22 12:00 a.m.9 views

VulnCheck KEV: CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

9.3CVSS7.1AI score0.0903EPSS
SaveExploits4References1
OpenVAS
OpenVAS
added 2023/06/12 12:00 a.m.27 views

SUSE: Security Advisory (SUSE-SU-2023:2477-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.7AI score0.01577EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2023/06/02 12:00 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2023:2345-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6AI score0.00947EPSS
SaveExploits1References4
OSV
OSV
added 2023/05/15 6:15 a.m.10 views

UBUNTU-CVE-2023-32784

In KeePass 2.x before 2.54, it is possible to recover the cleartext master password from a memory dump, even when a workspace is locked or no longer running. The memory dump can be a KeePass process dump, swap file pagefile.sys, hibernation file hiberfil.sys, or RAM dump of the entire system. The...

7.5CVSS7.3AI score0.04397EPSS
SaveExploits5References4
Rows per page
Query Builder