Search Results (1043 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2016-0898 1 Vmware 1 Pivotal Software Mysql 2024-11-21 10.0 Critical
MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup component logs, and not the system log, thus were not exposed outside the Service Backup VM.
CVE-2024-38814 1 Vmware 1 Vmware Hcx 2024-10-21 8.8 High
An authenticated SQL injection vulnerability in VMware HCX was privately reported to VMware. A malicious authenticated user with non-administrator privileges may be able to enter specially crafted SQL queries and perform unauthorized remote code execution on the HCX manager.  Updates are available to remediate this vulnerability in affected VMware products.
CVE-2024-38811 1 Vmware 1 Fusion 2024-09-17 8.8 High
VMware Fusion (13.x before 13.6) contains a code-execution vulnerability due to the usage of an insecure environment variable. A malicious actor with standard user privileges may exploit this vulnerability to execute code in the context of the Fusion application.