Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 09:03:38 +0000 certfr-2017-avi-404 — De multiples vulnérabilités ont été découvertes dans VMware vCenter Server. Elles permettent à un attaquant de provoque… https://cve.radiocsirt.org/vuln/certfr-2017-avi-404 certfr-2017-avi-404 https://cve.radiocsirt.org/vuln/certfr-2017-avi-404 cnvd-2017-33977 https://cve.radiocsirt.org/vuln/cnvd-2017-33977 cnvd-2017-33977 https://cve.radiocsirt.org/vuln/cnvd-2017-33977 EUVD-2026-184582 https://cve.radiocsirt.org/vuln/euvd-2026-184582 EUVD-2026-184582 https://cve.radiocsirt.org/vuln/euvd-2026-184582 fkie_cve-2017-4928 https://cve.radiocsirt.org/vuln/fkie_cve-2017-4928 <p>The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.</p> <p>The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-4928 GHSA-hgcm-2jjw-4pr2 https://cve.radiocsirt.org/vuln/ghsa-hgcm-2jjw-4pr2 <p>The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.</p> <p>The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure.</p> https://cve.radiocsirt.org/vuln/ghsa-hgcm-2jjw-4pr2 gsd-2017-4928 https://cve.radiocsirt.org/vuln/gsd-2017-4928 gsd-2017-4928 https://cve.radiocsirt.org/vuln/gsd-2017-4928