Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-21978 State: PUBLISHED Published: 2021-03-03T17:44:25 Last Updated: 2024-08-03T18:30:23.441Z Vendors: n/a Products: VMware View Planner Problem Types: Remote code execution vulnerability Description: VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmwar
ution within the logupload container. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0003.html - http://packetstormsecurity.com/files/161879/VMware-View-Planner-4.6-Remote-Code-Execution.html
CVE ID: CVE-2021-21979 State: PUBLISHED Published: 2021-03-03T16:15:14 Last Updated: 2024-08-03T18:30:23.518Z Vendors: n/a Products: Bitnami Containers Problem Types: APP_KEY fixed in the container image Description: In Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel 6, 7.30.1-debian-10-r108 for Laravel 7 and 8.5.11-debian-10-r0 for Laravel 8, the file /tmp/app/.env is generated at the time that the docker image bitnami/laravel was built, and the value of APP_KEY is fixed under certain conditions. This value is crucial for the security of the application and must be randomly generated per Laravel installation. If your application's encryption ke
security of the application and must be randomly generated per Laravel installation. If your application's encryption key is in the hands of a malicious party, that party could craft cookie values using the encryption key and exploit vulnerabilities inherent to PHP object serialization / unserialization, such as calling arbitrary class methods within your application. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bitnami/bitnami-docker-laravel/issues/139
CVE ID: CVE-2021-21980 State: PUBLISHED Published: 2021-11-24T16:32:43 Last Updated: 2024-08-03T18:30:23.351Z Vendors: n/a Products: VMware vCenter Server and VMware Cloud Foundation Problem Types: Arbitrary file read vulnerability Description: The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0027.html
CVE ID: CVE-2021-21981 State: PUBLISHED Published: 2021-04-19T14:37:21 Last Updated: 2024-08-03T18:30:23.726Z Vendors: n/a Products: VMware NSX-T Problem Types: Privilege escalation vulnerability Description: VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0006.html
CVE ID: CVE-2021-21982 State: PUBLISHED Published: 2021-04-01T18:45:53 Last Updated: 2024-08-03T18:30:23.725Z Vendors: n/a Products: VMware Carbon Black Cloud Workload appliance Problem Types: Authentication bypass Description: VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful exploitation of this issue would result in the attacker being able to view and alter administrative configuration settings. Additional Analyst Notes: - CVE Program Container: Refere
able to view and alter administrative configuration settings. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0005.html
CVE ID: CVE-2021-21983 State: PUBLISHED Published: 2021-03-31T17:50:36 Last Updated: 2024-08-03T18:30:23.722Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Arbitrary file write vulnerability Description: Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0004.html - http://packetstormsecurity.com/files/162349/VMware-vRealize-Ope
www.vmware.com/security/advisories/VMSA-2021-0004.html - http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html
CVE ID: CVE-2021-21984 State: PUBLISHED Published: 2021-05-07T11:20:14 Last Updated: 2024-08-03T18:30:23.900Z Vendors: n/a Products: VMware vRealize Business for Cloud Problem Types: Remote code execution vulnerability in VMware vRealize Business for Cloud Description: VMware vRealize Business for Cloud 7.x prior to 7.6.0 contains a remote code execution vulnerability due to an unauthorised end point. A malicious actor with network access may exploit this issue causing unauthorised remote code execution on vRealize Business for Cloud Virtual Appliance. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0007.html
CVE ID: CVE-2021-21985 State: PUBLISHED Published: 2021-05-26T14:04:30.000Z Last Updated: 2025-10-21T23:25:44.978Z Vendors: n/a Products: VMware vCenter Server and VMware Cloud Foundation Problem Types: Remote code execution vulnerability Description: The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichm
ying operating system that hosts vCenter Server. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2021-0010.html - http://packetstormsecurity.com/files/162812/VMware-Security-Advisory-2021-0010.html - http://packetstormsecurity.com/files/163487/VMware-vCenter-Server-Virtual-SAN-Health-Check-Remote-Code-Execution.html
CVE ID: CVE-2021-21986 State: PUBLISHED Published: 2021-05-26T14:04:35 Last Updated: 2024-08-03T18:30:23.588Z Vendors: n/a Products: VMware vCenter Server and VMware Cloud Foundation Problem Types: Issue with Authentication mechanism Description: The vSphere Client (HTML5) contains a vulnerability in a vSphere authentication mechanism for the Virtual SAN Health Check, Site Recovery, vSphere Lifecycle Manager, and VMware Cloud Director Availability plug-ins. A malicious actor with network access to port 443 on vCenter Server may perform actions allowed by the impacted plug-ins without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/secur
ns without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0010.html - http://packetstormsecurity.com/files/162812/VMware-Security-Advisory-2021-0010.html
CVE ID: CVE-2021-21987 State: PUBLISHED Published: 2021-05-24T11:34:55 Last Updated: 2024-08-03T18:30:23.576Z Vendors: n/a Products: VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows Problem Types: Out-of-bounds read vulnerability in Cortado ThinPrint Description: VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client
sues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0009.html - https://www.zerodayinitiative.com/advisories/ZDI-21-608/
CVE ID: CVE-2021-21988 State: PUBLISHED Published: 2021-05-24T11:35:00 Last Updated: 2024-08-03T18:30:23.700Z Vendors: n/a Products: VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows Problem Types: Out-of-bounds read vulnerability in Cortado ThinPrint Description: VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon C
se issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0009.html - https://www.zerodayinitiative.com/advisories/ZDI-21-609/
CVE ID: CVE-2021-21989 State: PUBLISHED Published: 2021-05-24T11:43:34 Last Updated: 2024-08-03T18:30:23.647Z Vendors: n/a Products: VMware Workstation Pro / Player (Workstation), VMware Horizon Client for Windows Problem Types: Out-of-bounds read vulnerability in Cortado ThinPrint Description: VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client
sues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0009.html - https://www.zerodayinitiative.com/advisories/ZDI-21-610/
CVE ID: CVE-2021-21990 State: PUBLISHED Published: 2021-05-11T13:29:41 Last Updated: 2024-08-03T18:30:23.462Z Vendors: n/a Products: Vmware Workspace One UEM console Problem Types: Reflective Cross-site scripting Description: VMware Workspace one UEM console (2102 prior to 21.2.0.8, 2101 prior to 21.1.0.14, 2011 prior to 20.11.0.27, 2010 prior to 20.10.0.16,2008 prior to 20.8.0.28, 2007 prior to 20.7.0.14,2006 prior to 20.6.0.19, 2005 prior to 20.5.0.46, 2004 prior to 20.4.0.21, 2003 prior to 20.3.0.23, 2001 prior to 20.1.0.32, 1912 prior to 19.12.0.24) contain a cross-site scripting vulnerability. VMware Workspace ONE UEM console does not validate incoming requests during device enrollment
scripting vulnerability. VMware Workspace ONE UEM console does not validate incoming requests during device enrollment after leading to rendering of unsanitized input on the user device in response. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0008.html - https://herolab.usd.de/security-advisories/usd-2021-0008/
CVE ID: CVE-2021-21991 State: PUBLISHED Published: 2021-09-22T18:59:08 Last Updated: 2024-08-03T18:30:23.658Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Local privilege escalation vulnerability Description: The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A malicious actor with non-administrative user access on vCenter Server host may exploit this issue to escalate privileges to Administrator on the vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash). Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021
). Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-21992 State: PUBLISHED Published: 2021-09-22T18:59:15 Last Updated: 2024-08-03T18:30:23.542Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: XML parsing denial-of-service vulnerability Description: The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor with non-administrative user access to the vCenter Server vSphere Client (HTML5) or vCenter Server vSphere Web Client (FLEX/Flash) may exploit this issue to create a denial-of-service condition on the vCenter Server host. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VM
ver host. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-21993 State: PUBLISHED Published: 2021-09-23T11:37:24 Last Updated: 2024-08-03T18:30:23.589Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: SSRF vulnerability Description: The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vCenter Server Content Library. An authorised user with access to content library may exploit this issue by sending a POST request to vCenter Server leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-21994 State: PUBLISHED Published: 2021-07-13T18:05:43 Last Updated: 2024-08-03T18:30:23.556Z Vendors: n/a Products: VMware ESXi and VMware Cloud Foundation Problem Types: Authentication bypass vulnerability Description: SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with network access to port 5989 on ESXi may exploit this issue to bypass SFCB authentication by sending a specially crafted request. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0014.html
CVE ID: CVE-2021-21995 State: PUBLISHED Published: 2021-07-13T18:05:49 Last Updated: 2024-08-03T18:30:23.592Z Vendors: n/a Products: VMware ESXi and VMware Cloud Foundation Problem Types: Authentication bypass vulnerability Description: OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor with network access to port 427 on ESXi may be able to trigger a heap out-of-bounds read in OpenSLP service resulting in a denial-of-service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0014.html
CVE ID: CVE-2021-21996 State: PUBLISHED Published: 2021-09-08T00:00:00 Last Updated: 2024-08-03T18:30:23.641Z Vendors: n/a Products: Saltstack Salt Problem Types: File traversal attack Description: An issue was discovered in SaltStack Salt before 3003.3. A user who has control of the source, and source_hash URLs can gain full file system access as root on a salt minion. Additional Analyst Notes: - CVE Program Container: References: - https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/ - https://lists.fedoraproject.org/archives/list
unce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/ - https://www.debian.org/security/2021/dsa-5011 - https://lists.debian.org/debian-lts-announce/2021/11/msg00017.html - https://lists.debian.org/debian-lts-announce/2021/11/msg00019.html - https://security.gentoo.org/glsa/202310-22
CVE ID: CVE-2021-21997 State: PUBLISHED Published: 2021-06-18T12:41:17 Last Updated: 2024-08-03T18:30:23.639Z Vendors: n/a Products: VMware Tools for Windows Problem Types: Denial-of-service vulnerability in the VM3DMP driver Description: VMware Tools for Windows (11.x.y prior to 11.3.0) contains a denial-of-service vulnerability in the VM3DMP driver. A malicious actor with local user privileges in the Windows guest operating system, where VMware Tools is installed, can trigger a PANIC in the VM3DMP driver leading to a denial-of-service condition in the Windows guest operating system. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/
ing system. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0011.html
CVE ID: CVE-2021-21998 State: PUBLISHED Published: 2021-06-23T11:10:25 Last Updated: 2024-08-03T18:30:23.665Z Vendors: n/a Products: VMware Carbon Black App Control (AppC) Problem Types: Authentication bypass? Description: VMware Carbon Black App Control 8.0, 8.1, 8.5 prior to 8.5.8, and 8.6 prior to 8.6.2 has an authentication bypass. A malicious actor with network access to the VMware Carbon Black App Control management server might be able to obtain administrative access to the product without the need to authenticate. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0012.html?
CVE ID: CVE-2021-21999 State: PUBLISHED Published: 2021-06-23T11:16:41 Last Updated: 2024-08-03T18:30:23.548Z Vendors: n/a Products: VMware Tools for Windows, VMware Remote Console for Windows and VMware App Volumes Problem Types: Local privilege escalation vulnerability Description: VMware Tools for Windows (11.x.y prior to 11.2.6), VMware Remote Console for Windows (12.x prior to 12.0.1) , VMware App Volumes (2.x prior to 2.18.10 and 4 prior to 2103) contain a local privilege escalation vulnerability. An attacker with normal access to a virtual machine may exploit this issue by placing a malicious file renamed as `openssl.cnf' in an unrestricted directory which would allow code to be execu
sue by placing a malicious file renamed as `openssl.cnf' in an unrestricted directory which would allow code to be executed with elevated privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0013.html - https://www.zerodayinitiative.com/advisories/ZDI-21-754/
CVE ID: CVE-2021-22000 State: PUBLISHED Published: 2021-07-13T18:01:34 Last Updated: 2024-08-03T18:30:23.741Z Vendors: n/a Products: Vmware Thinapp Problem Types: Uncontrolled Search Path Element (4.4) - CWE Description: VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp installed on it. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0015.html - http://seclists.org/fulldisclosure/
iner: References: - https://www.vmware.com/security/advisories/VMSA-2021-0015.html - http://seclists.org/fulldisclosure/2021/Jul/35 - http://packetstormsecurity.com/files/163521/VMware-ThinApp-DLL-Hijacking.html
CVE ID: CVE-2021-22001 State: PUBLISHED Published: 2021-07-22T13:17:35 Last Updated: 2024-08-03T18:30:23.649Z Vendors: n/a Products: Cloud Foundry UAA server Problem Types: CWE-200 Description: In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider( IdP) of type “oauth 1.0” was sent to UAA server. Additional Analyst Notes: - CVE Program Container: References: - https://www.cloudfoundry.org/blog/cve-2021-22001-sensitive-info-leakage-in-uaa-during-identity-provider-deletion/
CVE ID: CVE-2021-22002 State: PUBLISHED Published: 2021-08-31T21:02:21 Last Updated: 2024-08-03T18:30:23.707Z Vendors: n/a Products: VMware Workspace ONE Access, Identity Manager and vRealize Automation Problem Types: Host header vulnerability Description: VMware Workspace ONE Access and Identity Manager, allow the /cfg web app and diagnostic endpoints, on port 8443, to be accessed via port 443 using a custom host header. A malicious actor with network access to port 443 could tamper with host headers to facilitate access to the /cfg web app, in addition a malicious actor could access /cfg diagnostic endpoints without authentication. Additional Analyst Notes: - CVE Program Container: Referen
ould access /cfg diagnostic endpoints without authentication. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0016.html
CVE ID: CVE-2021-22003 State: PUBLISHED Published: 2021-08-31T21:02:31 Last Updated: 2024-08-03T18:30:23.694Z Vendors: n/a Products: VMware Workspace ONE Access and Identity Manager Problem Types: Information disclosure vulnerability Description: VMware Workspace ONE Access and Identity Manager, unintentionally provide a login interface on port 7443. A malicious actor with network access to port 7443 may attempt user enumeration or brute force the login endpoint, which may or may not be practical based on lockout policy configuration and password complexity for the target account. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA
ccount. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0016.html
CVE ID: CVE-2021-22004 State: PUBLISHED Published: 2021-09-08T15:00:14 Last Updated: 2024-08-03T18:30:23.738Z Vendors: n/a Products: Saltstack Salt Problem Types: Software manipulation Description: An issue was discovered in SaltStack Salt before 3003.3. The salt minion installer will accept and use a minion config file at C:\salt\conf if that file is in place before the installer is run. This allows for a malicious actor to subvert the proper behaviour of the given minion software. Additional Analyst Notes: - CVE Program Container: References: - https://saltproject.io/security_announcements/salt-security-advisory-2021-sep-02/ - https://lists.fedoraproject.org/archives/list/package-announce%
rity_announcements/salt-security-advisory-2021-sep-02/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/