Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Vcenter Server
CRITICAL 9.8
The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client (vSAN UI) plug-in. A maliciou…
Cloud Foundation
HIGH 7.5
The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on …
Spring Cloud Netflix
HIGH 8.8
Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within th…
Cloud Foundation
HIGH 8.8
The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authentication mechanism. A malicious…
Spring Cloud Gateway
MEDIUM 6.5
Applications using Spring Cloud Gateway are vulnerable to specifically crafted requests that could make an extra request on downstream services. User…
Installbuilder
HIGH 8.8
On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so i…
Installbuilder
HIGH 7.8
Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is …
Spring Advanced Message Queuing Protocol
MEDIUM 6.5
In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, the Spring AMQP Message object, in its toString() method, will deserialize a body for a me…
Spring Cloud Openfeign
HIGH 7.5
In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapp…
Spring Data Rest
MEDIUM 5.3
In Spring Data REST versions 3.4.0 - 3.4.13, 3.5.0 - 3.5.5, and older unsupported versions, HTTP resources implemented by custom controllers using a …
Vrealize Operations Tenant
HIGH 7.5
Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability.
Vrealize Automation
MEDIUM 6.5
VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able…
Cloud Foundation
HIGH 7.5
The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 5480 on vC…
Cloud Foundation
MEDIUM 6.5
The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network a…
Cloud Foundation
MEDIUM 6.1
The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to…
Cloud Foundation
MEDIUM 5.5
The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker t…
Vcenter Server
MEDIUM 5.3
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network acce…
Cloud Foundation
HIGH 7.8
The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticate…
Cloud Foundation
HIGH 7.5
The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with networ…
Cloud Foundation
HIGH 7.5
The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor …
Cloud Foundation
HIGH 7.2
The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAM…
Cloud Foundation
CRITICAL 9.8
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCe…
Cloud Foundation
HIGH 7.5
The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access t…
Cloud Foundation
HIGH 7.5
The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 …
Cloud Foundation
HIGH 7.5
The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 4…
Cloud Foundation
HIGH 7.5
The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server ma…
Cloud Foundation
MEDIUM 6.5
The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library.…
Cloud Foundation
MEDIUM 5.5
The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative priv…
Cloud Foundation
MEDIUM 5.3
vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to por…
Cloud Foundation
HIGH 7.8
The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administr…