CVE-2026-54489

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

EUVD-2026-53930

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-67261

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-67261: Improper Neutralization of Special Elements used in an OS Command

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains an OS Command Injection vulnerability in the IAPI component. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the...

CVE-2026-54489: Exposure of Sensitive Information to an Unauthorized Actor

Dell Virtual Storage Integrator for VMware vSphere Client, versions prior to 10.11.1.0, contains a Sensitive Information Disclosure vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to information disclosure and session hijacking. This...

Exploit for Path Traversal in Vmware Cloud_Foundation

VMware vCenter Server RCE — CVE-2021-21972 Research Lab Indep...

VMware vSphere Client (HTML5) - Remote Code Execution

The vSphere Client HTML5 contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with...

The vulnerability of the monitoring tools for VMware Aria Operations, VMware Cloud Foundation, and VMware vSphere Foundation – virtualization platforms; and VMware Telco Cloud Platform, a telecommunications cloud platform – arises from the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware vSphere Foundation, as well as VMware Telco Cloud Platform, a telecommunications cloud platform, is related to the lack of security measures for website structures. Exploiting this vulnerability allows ...

The vulnerability of the monitoring tools for VMware Aria Operations, VMware Cloud Foundation, and VMware vSphere Foundation – virtualization platforms; and VMware Telco Cloud Platform, a telecommunications cloud platform – arises from the lack of protective measures for website structures. This allows attackers to carry out cross-site scripting attacks.

The vulnerability of the monitoring tools for VMware Aria, VMware Cloud Foundation, and VMware vSphere Foundation, as well as VMware Telco Cloud Platform, a telecommunications cloud platform, is related to the lack of security measures for the website structure. Exploiting this vulnerability allo...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: crossplane-provider-sql, spire-server, chartmuseum, crossplane-provider-azure-storage, trivy, gitsign, crossplane-provider-azure-managedidentity, k8ssandra-client, policy-controller, rancher-system-upgrade-controller, libnvidia-container,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, bento, crossplane-provider-sql, kubescape-operator, chartmuseum, grpc-health-probe, spire-server, opa-envoy, snyk-cli, crossplane-provider-azure-storage, flux-source-controller, boring-registry, kube-arangodb, kubernetes-csi-external-attacher,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: commercial-chainloop-backend, goreleaser, knative-eventing, tigera-operator-fips, azure-aad-pod-identity-mic, kubernetes-csi-node-driver-registrar-fips, gosu, cloud-provider-azure, kubescape-server, aws-flb-cloudwatch, rancher-agent, kubescape, sonobuoy-fips, falcoct...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: commercial-chainloop-backend, goreleaser, knative-eventing, tigera-operator-fips, azure-aad-pod-identity-mic, kubernetes-csi-node-driver-registrar-fips, gosu, cloud-provider-azure, kubescape-server, aws-flb-cloudwatch, rancher-agent, kubescape, sonobuoy-fips, falcoct...

PT-2026-28315

Name of the Vulnerable Software and Affected Versions Foreman versions prior to 3.16.3 Foreman versions prior to 3.17.2 Foreman versions prior to 3.18.1 Description A flaw exists in Foreman that allows a remote attacker to exploit a command injection vulnerability within the WebSocket proxy...

CVE-2025-61732 vulnerabilities

Vulnerabilities for packages: direnv, kafkaexporter, wuzz, oauth2-proxy-fips, longhorn-instance-manager, metallb-fips, cass-operator, custom-pod-autoscaler-operator-fips, sftpgo-plugin-eventsearch, trust-manager, portieris, chart-testing-fips, knative-eventing, rootlesskit-fips,...

GHSA-8JVR-VH7G-F8GX vulnerabilities

Vulnerabilities for packages: direnv, kafkaexporter, wuzz, oauth2-proxy-fips, longhorn-instance-manager, metallb-fips, cass-operator, custom-pod-autoscaler-operator-fips, sftpgo-plugin-eventsearch, trust-manager, portieris, chart-testing-fips, knative-eventing, rootlesskit-fips,...

CVE-2025-68121 vulnerabilities

Vulnerabilities for packages: direnv, kafkaexporter, wuzz, oauth2-proxy-fips, longhorn-instance-manager, cass-operator, custom-pod-autoscaler-operator-fips, sftpgo-plugin-eventsearch, portieris, chart-testing-fips, knative-eventing, rootlesskit-fips, crossplane-provider-aws-firehose,...

CVE-2018-1000153

A cross-site request forgery vulnerability exists in Jenkins vSphere Plugin 2.16 and older in Clone.java, CloudSelectorParameter.java, ConvertToTemplate.java, ConvertToVm.java, Delete.java, DeleteSnapshot.java, Deploy.java, ExposeGuestInfo.java, FolderVSphereCloudProperty.java, PowerOff.java,...