Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

VMware vCenter Server ApplianceInfoleak

Risk 21
Severity
4
Infoleak
AV:N/AC:L/Au:S/C:P/I:N/A:N

VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents, which allows remote authenticated users to read arbitrary files via unspecified vectors.

First published (updated )
CVE-2012-6325

VMware vCenter Server AppliancePath Traversal

Risk 21
Severity
4
Path Traversal
AV:N/AC:L/Au:S/C:P/I:N/A:N

Directory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2 and 5.1 before Patch 1 allows remote authenticated users to read arbitrary files via unspecified vectors.

First published (updated )
CVE-2012-6324

VMware vCenter Server ApplianceVMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabl…

Risk 22
Severity
4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

VMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is enabled, allows remote attackers to bypass authentication by providing a valid username in conjunction with an empty password.

First published (updated )
CVE-2013-3107

VMware vCenter Server ApplianceVMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Upda…

Risk 22
Severity
4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

VMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before Update 3c does not properly validate certificates when connecting to a CIM Server on an ESXi host, which allows man-in-the-middle attackers to spoof CIM servers via a crafted certificate.

First published (updated )
CVE-2014-8371

Oracle MySQLUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.1…

Risk 46
Severity
6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRINFOSC.

First published (updated )
CVE-2014-4258

VMware vCenter ServerUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2…

Risk 22
Severity
4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.0.2.0 and 10.3.6.0 allows remote attackers to affect integrity via vectors related to WLS - Web Services.

First published (updated )
CVE-2014-4241

VMware vCenter Server ApplianceXSS

Risk 22
Severity
4.3
XSS
AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

First published (updated )
CVE-2014-3797

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203