Vmware - CVE CyberSecurity Database News (Page 6)

Mar 23, 2023 Java Vmware

CVE-2023-20859 - Sensitive Information Leakage in Spring Vault Through Log Files

When it comes to protecting sensitive data, secrets management tools like Spring Vault are a major asset for modern applications. However, sometimes security flaws crop

Feb 22, 2023 XXE API Exploit Vmware

CVE-2023-20855 - How an XXE Bug in VMware vRealize Orchestrator Opens Doors for Attackers

TL;DR: A security vulnerability (CVE-2023-20855) was discovered in VMware vRealize Orchestrator, allowing attackers with basic access to potentially steal secrets or escalate privileges using

Jan 26, 2023 RCE API Exploit Vmware

CVE-2022-31706 - Remote Code Execution via Directory Traversal in VMware vRealize Log Insight

In early 2023, a critical vulnerability was discovered within VMware’s vRealize Log Insight (now known as VMware Aria Operations for Logs). This vulnerability, assigned

Jan 26, 2023 Exploit Vmware

CVE-2022-31704 - Remote Code Execution in VMware vRealize Log Insight Explained

In 2022, cybersecurity researchers discovered a critical vulnerability—CVE-2022-31704—in VMware vRealize Log Insight, now renamed Aria Operations for Logs. This post will break down

Nov 29, 2022 XSS WordPress Exploit Vmware Tools

CVE-2021-31693 - Exploiting XSS in 10Web Photo Gallery Plugin for WordPress (Through 1.5.68)

The 10Web Photo Gallery plugin is popular among WordPress users for creating attractive image galleries. However, security researchers discovered a serious vulnerability—CVE-2021-31693—which can