The Vagrant VMWare Utility Windows installer targeted a custom location with a non-protected path that could be modified by an unprivileged user, introducing potential for unauthorized file system. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
Authentication Bypass
VMware
Microsoft
Vagrant Vmware Utility
NVD
CVSS 3.1
3.3
EPSS
0.1%
Organization admins can delete pending invites created in an organization they are not part of. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
Grafana
NVD
CVSS 3.1
2.7
EPSS
0.5%
Profile files from TRO600 series radios are extracted in plain-text and encrypted file formats. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Information Disclosure
Tro610 Firmware
Tro620 Firmware
Tro670 Firmware
NVD
CVSS 3.1
2.7
EPSS
0.4%