VA
Product
Vagrant
5
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 0Low 1
Watch
Add Vagrant to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5834 | 7.8 | Oct 27 | HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes Affected: before 2.4.0 |
| CVE-2022-42717 | 7.8 | Oct 11 | An issue was discovered in Hashicorp Packer before 2.3.1 Affected: before 2.3.1 |
| CVE-2017-16777 | 7.8 | Nov 16 | If HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.3 is installed but VMware Fusion is not, a local attacker can create a fake application directory and… Affected: 5.0.3 |
| CVE-2017-16001 | 7.8 | Nov 6 | In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.1, a local attacker or malware can silently subvert the plugin update process in order to escalate to… Affected: 5.0.1 |
| CVE-2024-10228 | 3.3 | Oct 29 | Vagrant VMWare Utility installation files vulnerable to modification by unprivileged user Affected: before 1.0.23 |
Showing 5