com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21683 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21682 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

CVE-2022-22977

VMware Tools for Windows12.0.0, 11.x.y and 10.x.y contains an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or...

CVE-2022-22977

VMware Tools for Windows12.0.0, 11.x.y and 10.x.y contains an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or...

CVE-2022-22977

VMware Tools for Windows12.0.0, 11.x.y and 10.x.y contains an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or...

Xxe

VMware Tools for Windows12.0.0, 11.x.y and 10.x.y contains an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2021-40797 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2021-40797 Source advisory: OSV:GHSA-CPX3-696P-3CW9...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2021-40085 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2021-40085 Source advisory: OSV:GHSA-FH73-GJVG-349C...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2021-38598 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2021-38598 Source advisory: OSV:GHSA-HVM4-MC7M-22W4...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21670 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2021-20267 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2021-20267 Source advisory: GHSA-W8HX-F868-PVCH...

networking-bagpipe (10.0.1), vmware-nsx (>=14.0.1, <=14.3.0) potentially affected by CVE-2021-20267 via neutron (15.0.0.0rc2)

neutron PYPI version 15.0.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on neutron and may be impacted: - networking-bagpipe 10.0.1 - vmware-nsx =14.0.1, =14.3.0 Source cves: CVE-2021-20267 Source advisory: OSV:GHSA-W8HX-F868-PVCH...

CVE-2022-22977

VMware Tools for Windows12.0.0, 11.x.y and 10.x.y contains an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or...

CVE-2022-22977

VMware Tools for Windows12.0.0, 11.x.y and 10.x.y contains an XML External Entity XXE vulnerability. A malicious actor with non-administrative local user privileges in the Windows guest OS, where VMware Tools is installed, may exploit this issue leading to a denial-of-service condition or...

CVE-2022-22977

CVE-2022-22977 affects VMware Tools for Windows (12.0.0, 11.x.y, 10.x.y). It is an XML External Entity (XXE) vulnerability in the VMware VGAuthService component used by the guest VM tools, exploitable by a non‑administrative local user to cause denial of service and potentially disclose informati...

CVE-2022-22977: VMware Guest Authentication Service LPE (FIXED)

A low-privileged local attacker can prevent the VMware Guest Authentication service VGAuthService.exe from running in a guest Windows environment and can crash this service, thus rendering the guest unstable. In some very contrived circumstances, the attacker can leak file content to which they d...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21640 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

SaltStack Salt Improper Certificate Validation

In SaltStack Salt before 3002.5, authentication to VMware vcenter, vsphere, and esxi servers in the vmware.py files does not always validate the SSL/TLS certificate...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21615 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...

com.dubture.jenkins:digitalocean-plugin (>=0.9, <=0.12), com.inkysea.vmware.vra:vmware-vrealize-automation-plugin (>=1.2.1, <=1.2.3) +8 more potentially affected by CVE-2021-21610 via org.jenkins-ci.main:jenkins-core (1.642.2)

org.jenkins-ci.main:jenkins-core MAVEN version 1.642.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.dubture.jenkins:digitalocean-plugin =0.9, =1.2.1, =0.0.8, =0.6, =2.4.2, =1.13-alpha, =0.1...