Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-22005 State: PUBLISHED Published: 2021-09-23T11:37:30.000Z Last Updated: 2025-10-21T23:25:31.767Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: File upload vulnerability Description: The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html - http://packetstormsecurity.com/files/164439/VMwar
es: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html - http://packetstormsecurity.com/files/164439/VMware-vCenter-Server-Analytics-CEIP-Service-File-Upload.html
CVE ID: CVE-2021-22006 State: PUBLISHED Published: 2021-09-23T11:41:13 Last Updated: 2024-08-03T18:30:23.679Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Reverse proxy bypass vulnerability Description: The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to access restricted endpoints. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22007 State: PUBLISHED Published: 2021-09-23T11:41:21 Last Updated: 2024-08-03T18:30:23.607Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Local information disclosure vulnerability Description: The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated user with non-administrative privilege may exploit this issue to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22008 State: PUBLISHED Published: 2021-09-23T11:41:28 Last Updated: 2024-08-03T18:30:23.901Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Information disclosure vulnerability Description: The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue by sending a specially crafted json-rpc message to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22009 State: PUBLISHED Published: 2021-09-23T11:51:32 Last Updated: 2024-08-03T18:30:23.750Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Multiple denial of service vulnerabilities Description: The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor with network access to port 443 on vCenter Server may exploit these issues to create a denial of service condition due to excessive memory consumption by VAPI service. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22010 State: PUBLISHED Published: 2021-09-23T11:51:40 Last Updated: 2024-08-03T18:30:23.749Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Denial of service vulnerability Description: The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to create a denial of service condition due to excessive memory consumption by VPXD service. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22011 State: PUBLISHED Published: 2021-09-23T11:51:47 Last Updated: 2024-08-03T18:30:23.938Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Unauthenticated API endpoint vulnerability Description: vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to perform unauthenticated VM network setting manipulation. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22012 State: PUBLISHED Published: 2021-09-23T11:58:46 Last Updated: 2024-08-03T18:30:23.932Z Vendors: n/a Products: VMware vCenter Server Problem Types: Information disclosure vulnerability Description: The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22013 State: PUBLISHED Published: 2021-09-23T11:58:53 Last Updated: 2024-08-03T18:30:23.932Z Vendors: n/a Products: VMware vCenter Server Problem Types: File path traversal vulnerability Description: The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to gain access to sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22014 State: PUBLISHED Published: 2021-09-23T11:59:00 Last Updated: 2024-08-03T18:30:23.894Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Authenticated code execution vulnerability Description: The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrastructure). An authenticated VAMI user with network access to port 5480 on vCenter Server may exploit this issue to execute code on the underlying operating system that hosts vCenter Server. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22015 State: PUBLISHED Published: 2021-09-23T00:00:00 Last Updated: 2024-08-03T18:30:23.928Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Multiple local privilege escalation vulnerabilities Description: The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html - http://packetstormsecuri
ogram Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html - http://packetstormsecurity.com/files/170116/VMware-vCenter-vScalation-Privilege-Escalation.html
CVE ID: CVE-2021-22016 State: PUBLISHED Published: 2021-09-23T12:12:54 Last Updated: 2024-08-03T18:30:23.944Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Reflected XSS vulnerability Description: The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An attacker may exploit this issue to execute malicious scripts by tricking a victim into clicking a malicious link. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22017 State: PUBLISHED Published: 2021-09-23T12:13:01.000Z Last Updated: 2025-10-21T23:25:31.570Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Rhttpproxy bypass vulnerability Description: Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to bypass proxy leading to internal endpoints being accessed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22018 State: PUBLISHED Published: 2021-09-23T12:16:31 Last Updated: 2024-08-03T18:30:23.933Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: File deletion vulnerability Description: The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A malicious actor with network access to port 9087 on vCenter Server may exploit this issue to delete non critical files. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22019 State: PUBLISHED Published: 2021-09-23T12:16:41 Last Updated: 2024-08-03T18:30:23.944Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Denial of service vulnerability Description: The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with network access to port 5480 on vCenter Server may exploit this issue by sending a specially crafted jsonrpc message to create a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22020 State: PUBLISHED Published: 2021-09-23T12:16:47 Last Updated: 2024-08-03T18:30:23.941Z Vendors: n/a Products: VMware vCenter Server, VMware Cloud Foundation Problem Types: Denial of service vulnerability Description: The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this issue may allow an attacker to create a denial-of-service condition on vCenter Server. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0020.html
CVE ID: CVE-2021-22021 State: PUBLISHED Published: 2021-08-30T18:06:13 Last Updated: 2024-08-03T18:30:23.931Z Vendors: n/a Products: VMware vRealize Log Insight Problem Types: Cross Site Scripting (XSS) vulnerability Description: VMware vRealize Log Insight (8.x prior to 8.4) contains a Cross Site Scripting (XSS) vulnerability due to improper user input validation. An attacker with user privileges may be able to inject a malicious payload via the Log Insight UI which would be executed when the victim accesses the shared dashboard link. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0019.html
CVE ID: CVE-2021-22022 State: PUBLISHED Published: 2021-08-30T17:53:32 Last Updated: 2024-08-03T18:30:24.042Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Arbitrary file read vulnerability Description: The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize Operations Manager API can read any arbitrary file on server leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE ID: CVE-2021-22023 State: PUBLISHED Published: 2021-08-30T17:53:35 Last Updated: 2024-08-03T18:30:23.936Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Insecure direct object reference vulnerability Description: The vRealize Operations Manager API (8.x prior to 8.5) has insecure object reference vulnerability. A malicious actor with administrative access to vRealize Operations Manager API may be able to modify other users information leading to an account takeover. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE ID: CVE-2021-22024 State: PUBLISHED Published: 2021-08-30T17:53:37 Last Updated: 2024-08-03T18:30:23.934Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Arbitrary log-file read vulnerability Description: The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary log-file read vulnerability. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can read any log file resulting in sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE ID: CVE-2021-22025 State: PUBLISHED Published: 2021-08-30T17:54:41 Last Updated: 2024-08-03T18:30:23.921Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Broken access control vulnerability Description: The vRealize Operations Manager API (8.x prior to 8.5) contains a broken access control vulnerability leading to unauthenticated API access. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can add new nodes to existing vROps cluster. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE ID: CVE-2021-22026 State: PUBLISHED Published: 2021-08-30T17:54:40 Last Updated: 2024-08-03T18:30:23.964Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Server Side Request Forgery Description: The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE ID: CVE-2021-22027 State: PUBLISHED Published: 2021-08-30T17:54:40 Last Updated: 2024-08-03T18:30:23.955Z Vendors: n/a Products: VMware vRealize Operations Problem Types: Server Side Request Forgery Description: The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0018.html
CVE ID: CVE-2021-22028 State: PUBLISHED Published: 2021-11-19T16:17:47 Last Updated: 2024-08-03T18:30:23.952Z Vendors: n/a Products: gpfdist (Greenplum) Problem Types: CWE-22 Description: In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system. A malicious user can read/write information from the file system using this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/greenplum-db/gpdb/security/advisories/GHSA-hqh5-m87w-57w2
CVE ID: CVE-2021-22029 State: PUBLISHED Published: 2021-08-31T20:50:18 Last Updated: 2024-08-03T18:30:23.931Z Vendors: n/a Products: VMware Workspace ONE UEM console Problem Types: Denial of service vulnerability Description: VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor with access to /API/system/admins/session could cause an API denial of service due to improper rate limiting. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0017.html
CVE ID: CVE-2021-22030 State: PUBLISHED Published: 2021-11-19T16:04:46 Last Updated: 2024-08-03T18:30:23.970Z Vendors: n/a Products: GPDB (Greenplum database) Problem Types: CWE-532 Description: In versions of Greenplum database prior to 5.28.14 and 6.17.0, certain statements execution led to the storage of sensitive(credential) information in the logs of the database. A malicious user with access to logs can read sensitive(credentials) information about users Additional Analyst Notes: - CVE Program Container: References: - https://github.com/greenplum-db/gpdb/security/advisories/GHSA-c7w8-gx27-h4mr
CVE ID: CVE-2021-22033 State: PUBLISHED Published: 2021-10-13T15:42:58 Last Updated: 2024-08-03T18:30:23.960Z Vendors: n/a Products: VMware vRealize Operations Problem Types: SSRF Description: Releases prior to VMware vRealize Operations 8.6 contain a Server Side Request Forgery (SSRF) vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0021.html
CVE ID: CVE-2021-22034 State: PUBLISHED Published: 2021-10-21T19:35:10 Last Updated: 2024-08-03T18:30:23.946Z Vendors: n/a Products: VMware vRealize Operations Tenant App for VMware Cloud Director Problem Types: Information Disclosure Vulnerability Description: Releases prior to VMware vRealize Operations Tenant App 8.6 contain an Information Disclosure Vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0024.html
CVE ID: CVE-2021-22035 State: PUBLISHED Published: 2021-10-13T15:50:54 Last Updated: 2024-08-03T18:30:24.009Z Vendors: n/a Products: VMware vRealize Log Insight Problem Types: CSV injection vulnerability in Log Insight Description: VMware vRealize Log Insight (8.x prior to 8.6) contains a CSV(Comma Separated Value) injection vulnerability in interactive analytics export function. An authenticated malicious actor with non-administrative privileges may be able to embed untrusted data prior to exporting a CSV sheet through Log Insight which could be executed in user's environment. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-20
ent. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0022.html
CVE ID: CVE-2021-22036 State: PUBLISHED Published: 2021-10-13T15:52:00 Last Updated: 2024-08-03T18:30:23.928Z Vendors: n/a Products: VMware vRealize Orchestrator Problem Types: Open redirect vulnerability in vRealize Orchestrator Description: VMware vRealize Orchestrator ((8.x prior to 8.6) contains an open redirect vulnerability due to improper path handling. A malicious actor may be able to redirect victim to an attacker controlled domain due to improper path handling in vRealize Orchestrator leading to sensitive information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2021-0023.html
CVE ID: CVE-2021-22037 State: PUBLISHED Published: 2021-10-29T11:09:07 Last Updated: 2024-08-03T18:30:24.009Z Vendors: n/a Products: VMware InstallBuilder Problem Types: Uncontrolled Search Path Element Description: Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforced, which results in a search in the search path until a binary can be identified. This makes the installer/uninstaller vulnerable to Path Interception by Search Order Hijacking, potentially allowing an attacker to plant a malicious reg.exe command so it takes precedence over the system command. The vulnerability only affec
tacker to plant a malicious reg.exe command so it takes precedence over the system command. The vulnerability only affects Windows installers. Additional Analyst Notes: - CVE Program Container: References: - https://blog.installbuilder.com/2021/10/installbuilder-2160-released.html
CVE ID: CVE-2021-22038 State: PUBLISHED Published: 2021-10-29T11:08:01 Last Updated: 2024-08-03T18:30:23.933Z Vendors: n/a Products: VMware InstallBuilder Problem Types: Uncontrolled Search Path Element Description: On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed (the originally called uninstaller exits, so it does not block the installation directory). This temporary location is not randomized and does not restrict access to Administrators only so a potential attacker could plant a binary to replace the copied binary right before it gets called, thus gaining Administrator privileges (if the original uninstaller was executed as Administr
ight before it gets called, thus gaining Administrator privileges (if the original uninstaller was executed as Administrator). The vulnerability only affects Windows installers. Additional Analyst Notes: - CVE Program Container: References: - https://blog.installbuilder.com/2021/10/installbuilder-2160-released.html
CVE ID: CVE-2021-22040 State: PUBLISHED Published: 2022-02-16T16:37:53 Last Updated: 2024-08-03T18:30:24.011Z Vendors: n/a Products: VMware ESXi , Workstation, Fusion and VMware Cloud Foundation Problem Types: Use-after-free vulnerability Description: VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0004.html
CVE ID: CVE-2021-22041 State: PUBLISHED Published: 2022-02-16T16:37:54 Last Updated: 2024-08-03T18:30:23.952Z Vendors: n/a Products: VMware ESXi , Workstation, Fusion and VMware Cloud Foundation Problem Types: Double-fetch vulnerability Description: VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0004.html
CVE ID: CVE-2021-22042 State: PUBLISHED Published: 2022-02-16T16:37:54 Last Updated: 2024-08-03T18:30:23.952Z Vendors: n/a Products: VMware ESXi and VMware Cloud Foundation Problem Types: Unauthorized access vulnerability Description: VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. A malicious actor with privileges within the VMX process only, may be able to access settingsd service running as a high privileged user. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0004.html
CVE ID: CVE-2021-22043 State: PUBLISHED Published: 2022-02-16T16:37:55 Last Updated: 2024-08-03T18:30:24.011Z Vendors: n/a Products: VMware ESXi and VMware Cloud Foundation Problem Types: TOCTOU vulnerability Description: VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are handled. A malicious actor with access to settingsd, may exploit this issue to escalate their privileges by writing arbitrary files. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2022-0004.html
CVE ID: CVE-2021-22044 State: PUBLISHED Published: 2021-10-28T15:20:15 Last Updated: 2024-08-03T18:30:23.941Z Vendors: n/a Products: Spring Cloud OpenFeign Problem Types: CWE-200 Description: In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level `@RequestMapping`annotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to `@RequestMapping`-annotated interface methods. Additional Analyst Notes: - CVE Program Container: References: - https://tanzu.vmware.com/security/cve-2021-22044