Browse CVEs

HIGH 7.3 CVE-2023-3518 HashiCorp Consul and Consul Enterprise 1.16.0 when using JWT Auth for service mesh incorrectly allows/denies access regardless of service identities.… Consul Mitigation only Fix from $1,9502023-08-09 HIGH 8.8 CVE-2023-1299 HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fix… Nomad Mitigation only Fix from $1,9502023-03-14 HIGH 7.5 CVE-2021-44139EPSS 6% Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF). Sentinel No fix yet Fix from $1,9502022-03-23 HIGH 7.5 CVE-2021-3282 HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication… Vault Mitigation only Fix from $1,9502021-02-01 HIGH 7.4 CVE-2019-9764 HashiCorp Consul 1.4.3 lacks server hostname verification for agent-to-agent TLS communication. In other words, the product behaves as if verify_serv… Consul No fix yet Fix from $1,9502019-03-26 HIGH 7.0 CVE-2017-16839 Hashicorp vagrant-vmware-fusion 5.0.4 allows local users to steal root privileges if VMware Fusion is not installed. Vagrant Vmware Fusion No fix yet Fix from $1,9502018-03-29 HIGH 7.8 CVE-2017-16777 If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake… Vagrant No fix yet Fix from $1,9502017-11-16 HIGH 7.8 CVE-2017-16001 In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently subvert the plugin update proce… Vagrant No fix yet Fix from $1,9502017-11-06 HIGH 7.0 CVE-2017-15884 In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update proce… Vagrant Vmware Fusion No fix yet Fix from $1,9502017-10-31