13247 matches found
PT-2026-60426
Name of the Vulnerable Software and Affected Versions VMware Avi Load Balancer versions prior to 32.1.2 VMware Avi Load Balancer versions 31.1.1 through 31.2.2 VMware Avi Load Balancer versions 30.1.1 through 30.2.6 VMware Avi Load Balancer versions 22.1.1 through 22.1.7 Description A remote code...
PT-2026-60428
VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation allow malicious, authenticated network users to perform directory traversal attacks. Affected versions: 32.1.1 fixed in 32.1.2 31.1.1 through 31.2.2 fixed in 31.2.2-2p3 30.1.1 through 30.2.6 fixed...
PT-2026-60427
VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated user with network access may be able to execute remote code. Affected versions: 32.1.1 fixed in 32.1.2 31.1.1 through 31.2.2 fixed in 31.2.2-2p3 30.1.1 through 30.2.6 fixed in 30.2.7 22.1.1 through...
VMware vCenter Server - Out-of-Bounds Write
vCenter Server contains an out-of-bounds write caused by a vulnerability in the DCERPC protocol implementation. A malicious actor with network access can trigger remote code execution on vCenter Server. id: CVE-2023-34048 info: name: VMware vCenter Server - Out-of-Bounds Write author: ritikchaddh...
kernel: RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path
A flaw was found in the Linux kernel, specifically within the RDMA Remote Direct Memory Access vmwpvrdma module. This vulnerability is a double free, which means the system attempts to release the same memory resource twice. This can occur in an error handling path within the pvrdmaallocucontext...
VMware View Planner <4.6 SP1- Remote Code Execution
VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability due to improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could...
Spring Cloud Gateway Code Injection
Applications using Spring Cloud Gateway prior to 3.1.1+ and 3.0.7+ are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote...
Photon OS 4.0: Linux PHSA-2026-4.0-1054
An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-1054. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
CVE-2026-53136 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
CVE-2026-53164 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
CVE-2026-53233 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
CVE-2026-53242 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
CVE-2026-53245 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
CVE-2026-53246 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
CVE-2026-53249 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-3439-CQXH-WP94 vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-4W7W-2MRJ-36VW vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-aws, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...
GHSA-5WP9-X843-XMXF vulnerabilities
Vulnerabilities for packages: linux-vmware, linux-gcp, linux-qemu-melange, linux-qemu, linux-azure...