Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- vmware vcenter servervpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote...CVE-2015-10475.0 Medium
- vmware vcenter serverVMware vCenter Server 5.5 before u3 and 6.0 before u1 does not verify X.509 certificates from TLS...CVE-2015-69325.8 Medium
- pivotal software spring framework, fedoraproject fedora +1 morePivotal Spring Framework DoS Attack with XML InputCVE-2015-3192Fix available5.5 Medium
- vmware player, workstation, horizon view client +2 morevmware-vmx.exe in VMware Workstation 7.x through 10.x before 10.0.7 and 11.x before 11.1.1,...CVE-2015-36507.2 High
- vmware fusion, player, workstation +2 moreVMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x...CVE-2015-23417.8 High
- vmware horizon client, player, workstation +2 more +4 moreTPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...CVE-2015-23406.1 Medium
- vmware horizon client, player, workstation +2 more +4 moreTPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...CVE-2015-23396.1 Medium
- vmware horizon client, player, workstation +2 more +4 moreTPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...CVE-2015-23386.1 Medium
- vmware horizon client, player, workstation +2 more +4 moreTPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...CVE-2015-23375.8 Medium
- vmware horizon client, player, workstation +2 more +4 moreTPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x...CVE-2015-23365.8 Medium
- pivotal spring frameworkImproper Restriction of XML External Entity Reference in Spring FrameworkCVE-2014-0225Fix available8.8 High
- pivotal software spring frameworkModerate severity vulnerability that affects org.springframework:spring-coreCVE-2015-0201Fix available5.0 Medium
- vmware vsphere data protectionVMware vSphere Data Protection (VDP) 5.1, 5.5 before 5.5.9, and 5.8 before 5.8.1 and the proxy...CVE-2014-46324.3 Medium
- vmware esxi, player, workstation +2 morevmware-authd (aka the Authorization process) in VMware Workstation 10.x before 10.0.5, VMware...CVE-2015-10443.3 Low
- vmware fusion, player, workstation +2 moreThe Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x...CVE-2015-10433.3 Low
- vmware esxi, fusion, player +1 more +3 moreVMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, VMware Fusion 6.x before 6...CVE-2014-83706.4 Medium
- vmware vcloud automation centerThe VMware Remote Console (VMRC) function in VMware vCloud Automation Center (vCAC) 6.0.1 through...CVE-2014-83739.0 High
- vmware airwatchAirWatch by VMware On-Premise 7.3.x before 7.3.3.0 (FP3) allows remote authenticated users to...CVE-2014-83724.0 Medium
- vmware vcenter server applianceVMware vCenter Server Appliance (vCSA) 5.5 before Update 2, 5.1 before Update 3, and 5.0 before...CVE-2014-83714.3 Medium
- vmware vcenter server applianceCross-site scripting (XSS) vulnerability in VMware vCenter Server Appliance (vCSA) 5.1 before...CVE-2014-37974.3 Medium
- pivotal software spring frameworkImproper Limitation of a Pathname to a Restricted Directory in Spring FrameworkCVE-2014-3625Public exploitFix available5.0 Medium
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- vmware nsx, vcloud networking and security +1 moreVMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5...CVE-2014-37965.0 Medium
- vmware tools, vm-support, workstation +2 morevm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other...CVE-2014-4200Fix available4.7 Medium
- vmware tools, vm-support, workstation +2 morevm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other...CVE-2014-4199Fix available6.3 Medium
- oracle fusion middleware, vmware esxi, vcenter server +1 more +3 moreUnspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10...CVE-2014-42414.3 Medium
- oracle mysql, debian linux, mariadb +9 more +11 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...CVE-2014-4258Fix available6.5 Medium
- vmware vcenter server applianceRuby vSphere Console (RVC) in VMware vCenter Server Appliance allows remote authenticated users...CVE-2014-37909.0 High
- vmware esxi, fusion, player +1 more +3 moreVMware Tools in VMware Workstation 10.x before 10.0.2, VMware Player 6.x before 6.0.2, VMware...CVE-2014-37935.8 Medium
- vmware player, workstation +1 morevmx86.sys in VMware Workstation 10.0.1 build 1379776 and VMware Player 6.0.1 build 1379776 on...CVE-2014-23844.9 Medium
- vmware vsphere clientVMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X...CVE-2014-12105.8 Medium
- vmware vsphere clientVMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly...CVE-2014-12099.3 High
- springsource spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2014-0054Fix availableEPSS 91.4%6.8 Medium
- pivotal software spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2013-6429Fix availableEPSS 90.6%6.8 Medium
- vmware vcloud directorCross-site request forgery (CSRF) vulnerability in VMware vCloud Director 5.1.x before 5.1.3...CVE-2014-12116.8 Medium
- vmware esx, esxi, fusion +2 more +4 moreVMware Workstation 9.x before 9.0.1, VMware Player 5.x before 5.0.1, VMware Fusion 5.x before 5.0...CVE-2014-12083.3 Low
- vmware esx, esxi +1 moreVMware ESXi 4.0 through 5.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of...CVE-2014-12074.3 Medium
- springsource spring frameworkMissing XML Validation in Spring FrameworkCVE-2013-7315Fix available6.8 Medium
- springsource spring frameworkCross-Site Request Forgery in Spring FrameworkCVE-2013-4152Fix availableEPSS 25.6%6.8 Medium
- vmware esx, esxi +1 moreVMware ESXi 4.0 through 5.5 and ESX 4.0 and 4.1 allow local users to read or modify arbitrary...CVE-2013-59734.4 Medium
- vmware esx, esxi, fusion +2 more +4 morelgtosync.sys in VMware Workstation 9.x before 9.0.3, VMware Player 5.x before 5.0.3, VMware...CVE-2013-35197.9 High
- vmware player, workstation +1 moreVMware Workstation 9.x before 9.0.3 and VMware Player 5.x before 5.0.3 on Linux do not properly...CVE-2013-59727.2 High
- vmware hyperic hqThe Groovy script console in VMware Hyperic HQ 4.6.6 allows remote authenticated administrators...CVE-2013-6366Public exploit6.5 Medium
- vmware vcenter serverSession fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0...CVE-2013-59716.8 Medium
- vmware esx, esxi +1 morehostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to...CVE-2013-59707.1 High
- vmware esx, esxi +1 moreDirectory traversal vulnerability in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows...CVE-2013-36589.4 High
- vmware esx, esxi +1 moreBuffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to...CVE-2013-36577.5 High
- vmware esx, esxi +1 moreVMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File...CVE-2013-16614.3 Medium
- vmware player, workstation +1 morevmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on...CVE-2013-1662Public exploit6.9 Medium
- Show moreLoading…