VMware Aria Operations Vulnerabilities Let Attackers Perform Admin Operations

Broadcom has addressed multiple vulnerabilities in its VMware Aria Operations for Logs and VMware Aria Operations products. These vulnerabilities, identified as CVE-2025-22218, CVE-2025-22219, CVE-2025-22220, CVE-2025-22221, and CVE-2025-22222, pose significant risks, including unauthorized access to sensitive data and privilege escalation. The…

VMware Aria Operations Vulnerabilities Allow Attackers to Perform Admin-Level Actions

itsecuritynews.info - 31/Jan 08:36

VMware has released a critical security advisory, VMSA-2025-0003, addressing multiple vulnerabilities in VMware Aria Operations for Logs, VMware Aria...

VMware Aria Vulnerabilities Addressed

thecyberthrone.in - 31/Jan 12:19

VMware Security Advisory VMSA-2025-0003 addresses multiple vulnerabilities identified in VMware Aria Operations for Logs and VMware Aria Operations....

Broadcom fixed information disclosure flaws in VMware Aria Operations

securityaffairs.co - 31/Jan 09:36

Broadcom patched five flaws in VMware Aria Operations and Aria Operations for Logs that could lead to privilege escalation and credential theft....

Broadcom Patches VMware Aria Flaws – Exploits May Lead to Credential Theft

itsecuritynews.info - 31/Jan 07:32

Broadcom has released security updates to patch five security flaws impacting VMware Aria Operations and Aria Operations for Logs, warning customers...

CISA Warns on Contec CM8000 having a Backdoor

thecyberthrone.in - 03/Feb 12:54

The Contec CM8000 patient monitor has been identified as having critical vulnerabilities, specifically backdoor functionalities, which pose...

CVE-2025-0314 impacts GitLab

thecyberthrone.in - 23/Jan 14:40

CVE-2025-0314 is a high-severity cross-site scripting (XSS) vulnerability identified in GitLab, a widely used platform for version control, CI/CD, and...

Malware Discovered in Healthcare Patient Monitors, Traced to Chinese IP Address

itsecuritynews.info - 31/Jan 08:15

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical advisory regarding multiple vulnerabilities identified in Contec...

PHP Voyager flaws lead to RCE

thecyberthrone.in - 31/Jan 02:20

Three critical vulnerabilities have been disclosed in the open-source PHP package Voyager, a widely used tool for managing Laravel applications. These...

IT Security News Hourly Summary 2025-01-31 09h : 4 posts

itsecuritynews.info - 31/Jan 08:05

4 posts were published in the last hour 7:32 : 5 cybersecurity practices for custom software development 7:32 : Broadcom Patches VMware Aria Flaws –...

CVE-2025-23006 impacts SonicWall SMA 1000 Series

thecyberthrone.in - 24/Jan 01:34

CVE-2025-23006 is a critical pre-authentication deserialization of untrusted data vulnerability identified in SonicWall’s Secure Mobile Access...

Rubriques :