CVE-2022-37009

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible...

EUVD-2017-7417

Malware in sbrugna...

EUVD-2017-3351

Malware in sbrugna...

EUVD-2017-7956

Malware in sbrugna...

EUVD-2017-8047

Malware in sbrugna...

EUVD-2017-4151

Malware in sbrugna...

EUVD-2017-16647

Malware in sbrugna...

EUVD-2017-7303

Malware in sbrugna...

EUVD-2017-7706

Malware in sbrugna...

EUVD-2017-8013

Malware in sbrugna...

EUVD-2024-32987

Malicious code in bioql PyPI...

EUVD-2025-19756

Malicious code in bioql PyPI...

EUVD-2023-2640

Malicious code in bioql PyPI...

Malicious code in grunt-vagrant-ssh (npm)

The package grunt-vagrant-ssh was found to contain malicious code...

MAL-2025-22001 Malicious code in grunt-vagrant-ssh (npm)

The package grunt-vagrant-ssh was found to contain malicious code...

The vulnerability of the Vagrant VMWare Utility service lies in the improper assignment of permissions to the critical resource, allowing an attacker to gain read and modify access to files.

The vulnerability of the Vagrant VMWare Utility relates to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow an attacker to gain read and write access to files...

HashiCorp Vagrant Installed (macOS)

Binary data macosvagrantinstalled.nbin...

HashiCorp Vagrant 2.2.10 < 2.4.7 Code Injection (macOS)

The version of HashiCorp Vagrant installed on the remote host is 2.2.10 prior to 2.4.7. It is, therefore, is affected by a code injection vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 8090...

The vulnerability of the Vagrant framework for creating and managing development environments lies in its ability to allow a hacker to download and edit the Vagrantfile file on the host virtual machine. This enables the hacker to read and modify data, as well as execute arbitrary code.

The vulnerability of the Vagrant framework for creating and managing development environments lies in the ability to load and edit the Vagrantfile file on the host virtual machine, due to the use of a default synchronized folder configuration. Exploiting this vulnerability can allow an attacker t...

Incorrect Default Permissions

Vagrant is vulnerable to Incorrect Default Permissions. The vulnerability is due to the Vagrantfile being writable from within the guest VM and executed by the host, allowing a low-privileged attacker to achieve guest-to-host code execution...