Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- vmware vcenter chargeback managerVMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which...CVE-2013-3520Public exploitEPSS 55.6%7.5 High
- vmware vcenter server applianceVMware vCenter Server 5.1 before Update 1, when anonymous LDAP binding for Active Directory is...CVE-2013-31074.3 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...CVE-2013-30809.0 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to...CVE-2013-30799.0 High
- vmware esxi, vcenter server, vcenter server appliance +2 moreVMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware...CVE-2013-16597.6 High
- vmware vcenter server, vcenter server appliance +1 moreVMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2,...CVE-2012-63267.8 High
- vmware esx, esxi, vcenter server +3 more +5 moreVMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5,...CVE-2013-140510.0 High
- vmware esx, esxi, fusion +2 more +4 moreThe Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware...CVE-2013-1406Public exploit7.2 High
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.0 before Update 2 does not properly parse XML documents,...CVE-2012-63254.0 Medium
- vmware vcenter server applianceDirectory traversal vulnerability in VMware vCenter Server Appliance (vCSA) 5.0 before Update 2...CVE-2012-63244.0 Medium
- vmware viewMultiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View...CVE-2012-59785.0 Medium
- vmware springsource spring securityExposure of Sensitive Information to an Unauthorized Actor in Spring SecurityCVE-2012-5055Fix available5.0 Medium
- vmware springsource spring securityImproper Control of Generation of Code in Spring SecurityCVE-2011-2732Public exploitFix available4.3 Medium
- vmware springsource spring securityConcurrent Execution using Shared Resource with Improper Synchronization in Spring SecurityCVE-2011-2731Fix available5.1 Medium
- vmware hyperic hqThe monitor perl script in the Sybase database plug-in in SpringSource Hyperic HQ before 4.3...CVE-2009-28992.1 Low
- vmware esx, esxi +1 moreThe vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of...CVE-2012-57035.0 Medium
- vmware player, workstation +1 moreUntrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x...CVE-2012-54597.9 High
- vmware player, workstation +1 moreVMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak...CVE-2012-54588.3 High
- vmware ovf tool, player, workstation +2 moreFormat string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x...CVE-2012-3569Public exploitEPSS 47.7%9.3 High
- vmware capacityiqDirectory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read...CVE-2012-50515.0 Medium
- vmware vcenter operationsCross-site scripting (XSS) vulnerability in the server in VMware vCenter Operations (aka vCOps)...CVE-2012-50504.3 Medium
- vmware movie decoderUntrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows...CVE-2012-48976.9 Medium
- vmware esx, fusion, player +2 more +4 moreUntrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware...CVE-2012-1666Public exploit6.9 Medium
- vmware esx, esxi, player +1 more +3 moreVMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0,...CVE-2012-32897.8 High
- vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x...CVE-2012-32889.3 High
- vmware vmaUntrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users...CVE-2012-27527.2 High
- vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1...CVE-2012-24509.0 High
- vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4...CVE-2012-24499.0 High
- vmware esx, esxi +1 moreVMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary...CVE-2012-24487.5 High
- vmware esx, esxi +1 moreThe VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which...CVE-2012-15179.0 High
- vmware esx, esxi +1 moreThe VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle...CVE-2012-15169.9 Critical
- vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1...CVE-2012-15188.3 High
- vmware esx, esxi +1 moreVMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O...CVE-2012-15158.3 High
- vmware vshield managerCross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before...CVE-2012-15146.8 Medium
- vmware vcenter orchestratorThe Web Configuration tool in VMware vCenter Orchestrator (vCO) 4.0 before Update 4, 4.1 before...CVE-2012-15134.0 Medium
- vmware vsphereCross-site scripting (XSS) vulnerability in the internal browser in vSphere Client in VMware...CVE-2012-15124.3 Medium
- vmware viewCross-site scripting (XSS) vulnerability in View Manager Portal in VMware View before 4.6.1...CVE-2012-15114.3 Medium
- vmware esx, esxi, view +2 moreBuffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4...CVE-2012-15107.2 High
- vmware viewBuffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to...CVE-2012-15097.2 High
- vmware esx, esxi, view +2 moreThe XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View...CVE-2012-15087.2 High
- vmware vcenter chargeback managerVMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API...CVE-2012-14726.4 Medium
- vmware zimbra desktopMultiple cross-site scripting (XSS) vulnerabilities in Zimbra Desktop 7.1.2 b10978 allow remote...CVE-2012-09034.3 Medium
- vmware vcenter update managerThe default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter...CVE-2011-4404Public exploitEPSS 58.9%5.0 Medium
- vmware ams, fusion, player +1 more +3 moreBuffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware...CVE-2011-38689.3 High
- vmware spring framework, spring security +1 moreSpring Framework and Spring Security vulnerable to Deserialization of Untrusted DataCVE-2011-2894Public exploitFix available6.8 Medium
- vmware tc serverVMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before...CVE-2011-05275.0 Medium
- linux kernel, canonical ubuntu linux, vmware esx +2 morenet/core/ethtool.c in the Linux kernel before 2.6.36 does not initialize certain data structures,...CVE-2010-46555.5 Medium
- tomsawyer get extension factory, vmware infrastructure, virtual infrastructure client +2 moreCertain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET...CVE-2011-2217Public exploitEPSS 42.0%9.3 High
- vmware esx, esxi, fusion +2 more +4 moremount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4...CVE-2011-2146Fix available2.1 Low
- vmware esx, esxi, fusion +2 more +4 moremount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4...CVE-2011-2145Fix available6.3 Medium
- Show moreLoading…