Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- pivotal spring framework, spring security, spring security +2 moreSpring Security and Spring Framework may not recognize certain paths that should be protectedCVE-2016-5007Fix available7.5 High
- pivotal spring security, spring security +1 moreAuthorization Bypass in Spring SecurityCVE-2014-3527Fix available9.8 Critical
- pivotal spring security, spring security +1 moreImproper Authentication in Spring SecurityCVE-2014-0097Fix available7.3 High
- vmware workstation pro/player, workstation pro, workstation player +2 moreVMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in...CVE-2017-4916Public exploit6.5 Medium
- vmware workstation pro/player, workstation pro, workstation player +2 moreVMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound...CVE-2017-4915Public exploit7.8 High
- vmware airwatch inbox, airwatch console, airwatch agent +2 moreAirwatch Inbox for Android contains a vulnerability that may allow a rooted device to decrypt the...CVE-2017-48963.8 Low
- vmware airwatch agent, airwatch inbox +1 moreAirwatch Agent for Android contains a vulnerability that may allow a device to bypass root...CVE-2017-48958.8 High
- fedoraproject fedora, vmware spring advanced message queuing protocol +1 moreImproper Input Validation in Spring AMQPCVE-2016-2173Public exploitFix available9.8 Critical
- vmware toolsVMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the...CVE-2015-5191Fix available6.7 Medium
- ibm websphere application server, vmware spring security +1 moreSecurity Constraint Bypass in Spring SecurityCVE-2016-9879Fix available7.5 High
- pivotal software spring frameworkPivotal Spring Framework Paths provided to the ResourceServlet were not properly sanitizedCVE-2016-9878Fix available7.5 High
- vmware esxiCross-site scripting (XSS) vulnerability in the Host Client in VMware vSphere Hypervisor (aka...CVE-2016-74635.4 Medium
- vmware vrealize operationsThe Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote...CVE-2016-74628.5 High
- vmware fusion, fusion pro, workstation player +1 more +3 moreThe drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware...CVE-2016-74618.8 High
- vmware vrealize automationThe Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and...CVE-2016-74609.1 Critical
- vmware vcenter serverVMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read...CVE-2016-74597.7 High
- vmware vsphere clientVMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi...CVE-2016-74585.8 Medium
- vmware vrealize operationsVMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain...CVE-2016-745710.0 Critical
- vmware vsphere data protectionVMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly...CVE-2016-7456Public exploitEPSS 32.8%9.8 Critical
- vmware horizon viewDirectory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3...CVE-2016-70875.3 Medium
- vmware workstation player, workstation pro +1 moreThe installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x...CVE-2016-70867.8 High
- vmware workstation player, workstation pro +1 moreUntrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0...CVE-2016-70857.8 High
- vmware workstation player, workstation pro +1 moretpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before...CVE-2016-7084Public exploit7.8 High
- vmware workstation player, workstation pro +1 moreVMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on...CVE-2016-7083Public exploit7.8 High
- vmware workstation player, workstation pro +1 moreVMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on...CVE-2016-70827.8 High
- vmware workstation player, workstation pro +1 moreMultiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware...CVE-2016-70817.8 High
- vmware toolsThe graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local...CVE-2016-70807.8 High
- vmware toolsThe graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local...CVE-2016-70797.8 High
- vmware identity manager, vrealize automation +1 moreVMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote...CVE-2016-53345.3 Medium
- vmware fusionVMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows...CVE-2016-53295.5 Medium
- vmware toolsVMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is...CVE-2016-53285.5 Medium
- vmware vrealize automationVMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via...CVE-2016-53369.8 Critical
- vmware identity manager, vrealize automation +1 moreVMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users...CVE-2016-53357.8 High
- vmware photon osVMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys...CVE-2016-53339.8 Critical
- vmware vrealize log insightDirectory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows...CVE-2016-53325.3 Medium
- vmware esxi, vcenter server +1 moreCRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote...CVE-2016-53316.1 Medium
- vmware esxi, fusion, tools +2 more +4 moreUntrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0...CVE-2016-5330Public exploitEPSS 19.5%7.8 High
- vmware vrealize log insightCross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before...CVE-2016-20828.8 High
- vmware vrealize log insightCross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2...CVE-2016-20816.1 Medium
- vmware nsx edge, vcloud networking and security edge +1 moreVMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the...CVE-2016-20795.9 Medium
- vmware vcenter serverCross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0...CVE-2015-69316.1 Medium
- vmware vcenter serverCross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before...CVE-2016-20786.1 Medium
- vmware player, workstation +1 moreVMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly...CVE-2016-20779.8 Critical
- vmware vcenter server, vcloud director, vcloud automation identity appliance +2 moreClient Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2;...CVE-2016-20767.6 High
- vmware vrealize business advanced and enterpriseCross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x...CVE-2016-20755.4 Medium
- vmware vrealize automationCross-site scripting (XSS) vulnerability in VMware vRealize Automation 6.x before 6.2.4 on Linux...CVE-2015-23445.4 Medium
- vmware esxi, fusion, player +1 more +3 moreThe VMware Tools HGFS (aka Shared Folders) implementation in VMware Workstation 11.x before 11.1...CVE-2015-69336.3 Medium
- vmware vcenter orchestrator, vrealize orchestrator +1 moreSerialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x,...CVE-2015-69347.3 High
- vmware spring framework, debian linux +1 moreFiles or Directories Accessible to External Parties in org.springframework:spring-coreCVE-2015-5211Fix available9.6 Critical
- vmware vcenter serverThe JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6...CVE-2015-2342Public exploitEPSS 89.0%10.0 High
- Show moreLoading…