agentprime: vmware-cloud-foundation

agentprime: vmware-cloud-foundationEvery new CVE for vmware-cloud-foundation.https://agentprime.io/CVE-2026-41709: ESX insufficient logging vulnerabilityhttps://agentprime.io/advisories/CVE-2026-41709/https://agentprime.io/advisories/CVE-2026-41709/CVSS 2.7 (Low). Critical: In CISA’s KEV catalogue since 28 Oct 2026: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 12:45:02 GMTCVEcriticalKEVCVE-2026-41703: Out-of-bounds read vulnerabilityhttps://agentprime.io/advisories/CVE-2026-41703/https://agentprime.io/advisories/CVE-2026-41703/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 12:39:02 GMTCVECVE-2026-47876: VMXNET3 out-of-bounds write vulnerabilityhttps://agentprime.io/advisories/CVE-2026-47876/https://agentprime.io/advisories/CVE-2026-47876/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 12:31:52 GMTCVEcriticalCVE-2026-59309: vCenter authentication-bypass vulnerabilityhttps://agentprime.io/advisories/CVE-2026-59309/https://agentprime.io/advisories/CVE-2026-59309/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 12:19:52 GMTCVEcriticalCVE-2026-59310: vCenter directory-traversal vulnerabilityhttps://agentprime.io/advisories/CVE-2026-59310/https://agentprime.io/advisories/CVE-2026-59310/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 18 Aug 2026: it is known to be exploited. CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 12:19:25 GMTCVEcriticalKEVCVE-2026-22721: VMware Aria Operations privilege escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2026-22721/https://agentprime.io/advisories/CVE-2026-22721/CVSS 6.2 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 20:00:15 GMTCVECVE-2025-41250: Header injection vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41250/https://agentprime.io/advisories/CVE-2025-41250/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 17:44:27 GMTCVECVE-2025-41245: VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)https://agentprime.io/advisories/CVE-2025-41245/https://agentprime.io/advisories/CVE-2025-41245/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 16:19:15 GMTCVECVE-2025-41244: VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)https://agentprime.io/advisories/CVE-2025-41244/https://agentprime.io/advisories/CVE-2025-41244/CVSS 7.8 (High). Critical: In CISA’s KEV catalogue since 30 Oct 2025: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Sep 2025 16:09:51 GMTCVEcriticalKEVCVE-2025-41241: Denial-of-service vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41241/https://agentprime.io/advisories/CVE-2025-41241/CVSS 4.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Jul 2025 12:25:55 GMTCVECVE-2025-41239: vSockets information-disclosure vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41239/https://agentprime.io/advisories/CVE-2025-41239/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Jul 2025 18:35:03 GMTCVECVE-2025-41238: PVSCSI heap-overflow vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41238/https://agentprime.io/advisories/CVE-2025-41238/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Jul 2025 18:34:48 GMTCVEcriticalCVE-2025-41237: VMCI integer-underflow vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41237/https://agentprime.io/advisories/CVE-2025-41237/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Jul 2025 18:34:21 GMTCVEcriticalCVE-2025-41236: VMXNET3 integer-overflow vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41236/https://agentprime.io/advisories/CVE-2025-41236/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Jul 2025 18:34:12 GMTCVEcriticalCVE-2025-41228: VMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41228/https://agentprime.io/advisories/CVE-2025-41228/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 14:24:34 GMTCVECVE-2025-41227: Denial-of-Service Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41227/https://agentprime.io/advisories/CVE-2025-41227/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 14:24:29 GMTCVECVE-2025-41226: Guest Operations Denial-of-Service Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41226/https://agentprime.io/advisories/CVE-2025-41226/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 14:24:24 GMTCVECVE-2025-41225: VMware vCenter Server authenticated command-execution vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41225/https://agentprime.io/advisories/CVE-2025-41225/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 14:24:17 GMTCVECVE-2025-41231: VMware Cloud Foundation Missing Authorisation Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41231/https://agentprime.io/advisories/CVE-2025-41231/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 12:54:41 GMTCVECVE-2025-41230: VMware Cloud Foundation Information Disclosure Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41230/https://agentprime.io/advisories/CVE-2025-41230/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 12:54:30 GMTCVECVE-2025-41229: VMware Cloud Foundation Directory Traversal Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-41229/https://agentprime.io/advisories/CVE-2025-41229/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 May 2025 12:53:57 GMTCVECVE-2025-22249: VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)https://agentprime.io/advisories/CVE-2025-22249/https://agentprime.io/advisories/CVE-2025-22249/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 May 2025 05:08:03 GMTCVECVE-2025-22226: Out-of-bounds read in ESXi and othershttps://agentprime.io/advisories/CVE-2025-22226/https://agentprime.io/advisories/CVE-2025-22226/CVSS 7.1 (High). Critical: In CISA’s KEV catalogue since 4 Mar 2025: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 11:56:57 GMTCVEcriticalKEVCVE-2025-22225: VMware ESXi contains an arbitrary write vulnerability.https://agentprime.io/advisories/CVE-2025-22225/https://agentprime.io/advisories/CVE-2025-22225/CVSS 8.2 (High). Critical: In CISA’s KEV catalogue since 4 Mar 2025: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 11:56:27 GMTCVEcriticalKEVCVE-2025-22224: Time-of-check time-of-use race condition in VMware ESXi and othershttps://agentprime.io/advisories/CVE-2025-22224/https://agentprime.io/advisories/CVE-2025-22224/CVSS 9.3 (Critical). Critical: In CISA’s KEV catalogue since 4 Mar 2025: it is known to be exploited. CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Mar 2025 11:56:12 GMTCVEcriticalKEVCVE-2024-38813: Privilege escalation vulnerabilityhttps://agentprime.io/advisories/CVE-2024-38813/https://agentprime.io/advisories/CVE-2024-38813/CVSS 7.5 (High). Critical: In CISA’s KEV catalogue since 20 Nov 2024: it is known to be exploited. CVSS score 7.5 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Sep 2024 17:13:13 GMTCVEcriticalKEVCVE-2024-38812: Heap-overflow vulnerabilityhttps://agentprime.io/advisories/CVE-2024-38812/https://agentprime.io/advisories/CVE-2024-38812/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 20 Nov 2024: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.55 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Sep 2024 17:13:09 GMTCVEcriticalKEVCVE-2024-37087: Incorrect permission assignment in vCenter Server and othershttps://agentprime.io/advisories/CVE-2024-37087/https://agentprime.io/advisories/CVE-2024-37087/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 14:16:13 GMTCVECVE-2024-37086: Out-of-bounds read in ESXi and othershttps://agentprime.io/advisories/CVE-2024-37086/https://agentprime.io/advisories/CVE-2024-37086/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 14:16:08 GMTCVECVE-2024-37085: VMware ESXi contains an authentication bypass vulnerability.https://agentprime.io/advisories/CVE-2024-37085/https://agentprime.io/advisories/CVE-2024-37085/CVSS 6.8 (Medium). Critical: In CISA’s KEV catalogue since 30 Jul 2024: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Jun 2024 14:16:01 GMTCVEcriticalKEVCVE-2024-37081: The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo.https://agentprime.io/advisories/CVE-2024-37081/https://agentprime.io/advisories/CVE-2024-37081/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 05:43:20 GMTCVECVE-2024-37080: Heap-based buffer overflow in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2024-37080/https://agentprime.io/advisories/CVE-2024-37080/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.12 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 05:43:10 GMTCVEcriticalCVE-2024-37079: Out-of-bounds write in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2024-37079/https://agentprime.io/advisories/CVE-2024-37079/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 23 Jan 2026: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.22 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 18 Jun 2024 05:43:06 GMTCVEcriticalKEVCVE-2024-22255: Information disclosure vulnerabilityhttps://agentprime.io/advisories/CVE-2024-22255/https://agentprime.io/advisories/CVE-2024-22255/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Mar 2024 17:58:35 GMTCVECVE-2024-22254: Out-of-bounds write vulnerabilityhttps://agentprime.io/advisories/CVE-2024-22254/https://agentprime.io/advisories/CVE-2024-22254/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Mar 2024 17:58:24 GMTCVECVE-2024-22253: Use-after-free vulnerabilityhttps://agentprime.io/advisories/CVE-2024-22253/https://agentprime.io/advisories/CVE-2024-22253/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Mar 2024 17:57:27 GMTCVEcriticalCVE-2024-22252: Use-after-free vulnerabilityhttps://agentprime.io/advisories/CVE-2024-22252/https://agentprime.io/advisories/CVE-2024-22252/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 05 Mar 2024 17:57:22 GMTCVEcriticalCVE-2022-22939: VMware Cloud Foundation: VMware Cloud Foundation contains an information disclosure vulnerability due to logging…https://agentprime.io/advisories/CVE-2022-22939/https://agentprime.io/advisories/CVE-2022-22939/Published by the CVE Program. Not analysed by agentprime yet.Fri, 04 Feb 2022 22:29:14 GMTCVECVE-2021-21974: Out-of-bounds write in VMware ESXi and othershttps://agentprime.io/advisories/CVE-2021-21974/https://agentprime.io/advisories/CVE-2021-21974/CVSS 8.8 (High). Critical: CVSS score 8.8 (7.0 or more) and EPSS 0.45 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Feb 2021 16:57:33 GMTCVEcriticalCVE-2021-21972: Path traversal in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2021-21972/https://agentprime.io/advisories/CVE-2021-21972/CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 3 Nov 2021: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Feb 2021 16:42:05 GMTCVEcriticalKEVCVE-2021-21973: Server-side request forgery in VMware vCenter Server and othershttps://agentprime.io/advisories/CVE-2021-21973/https://agentprime.io/advisories/CVE-2021-21973/CVSS 5.3 (Medium). Critical: In CISA’s KEV catalogue since 7 Mar 2022: it is known to be exploited. Published by the CVE Program. Not analysed by agentprime yet.Wed, 24 Feb 2021 16:42:02 GMTCVEcriticalKEV