cwe-23
Safeguard articles tagged "cwe-23" — guides, analysis, and best practices for software supply chain and application security.
9 articles
CVE-2021-22017: VMware vCenter Server Improper Access Control
CVE-2021-22017 affects VMware vCenter Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-01-10.
CVE-2021-21972: VMware vCenter Server Remote Code Execution Vulnerability
CVE-2021-21972 affects VMware vCenter Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2021-22005: VMware vCenter Server File Upload Vulnerability
CVE-2021-22005 affects VMware vCenter Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-5410: VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability
CVE-2020-5410 affects VMware Tanzu Spring Cloud Configuration (Config) Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-03-25.
CVE-2021-38163: SAP NetWeaver Unrestricted File Upload Vulnerability
CVE-2021-38163 affects SAP NetWeaver and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-06-09.
CVE-2022-37042: Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability
CVE-2022-37042 affects Synacor Zimbra Collaboration Suite (ZCS) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-08-11.
CVE-2025-64446: Fortinet FortiWeb Path Traversal Vulnerability
CVE-2025-64446 affects Fortinet FortiWeb and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-11-14.
CVE-2024-27199: JetBrains TeamCity Relative Path Traversal Vulnerability
CVE-2024-27199 affects JetBrains TeamCity and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-04-20.
CVE-2026-34926: Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability
CVE-2026-34926 affects Trend Micro Apex One and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2026-05-21.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.