Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- greenplum-db gpdb, vmware greenplum database +1 moreArbitrary File Write when Extracting Tarballs in greenplum-dbCVE-2023-311317.4 High
- vmware aria operations, cloud foundation +1 moreVMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with...CVE-2023-208806.7 Medium
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a Local privilege escalation vulnerability. A malicious actor...CVE-2023-208796.7 Medium
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a deserialization vulnerability. A malicious actor with...CVE-2023-208787.2 High
- vmware cloud foundation, vrealize operations +1 moreVMware Aria Operations contains a privilege escalation vulnerability. An authenticated malicious...CVE-2023-208778.8 High
- vmware fusion, workstation +1 moreVMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD...CVE-2023-20872Public exploit8.8 High
- vmware fusionVMware Fusion contains a local privilege escalation vulnerability. A malicious actor with read...CVE-2023-208717.8 High
- vmware fusion, workstation +1 moreVMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the...CVE-2023-208706.0 Medium
- vmware fusion, workstation +1 moreVMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow...CVE-2023-208698.2 High
- service location protocol project location protocol, ietf service location protocol (slp), netapp smi-s provider +3 more +5 moreThe Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to...CVE-2023-29552In KEVEPSS 64.0%7.5 High
- spring boot, vmware spring boot +1 moreSpring Boot Security Bypass with Wildcard Pattern Matching on Cloud FoundryCVE-2023-20873Fix available9.8 Critical
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor...CVE-2023-208657.2 High
- vmware aria operations for logs, cloud foundation +1 moreVMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated,...CVE-2023-20864EPSS 70.4%9.8 Critical
- spring security, vmware spring security, netapp active iq unified manager +2 moreSpring Security logout not clearing security contextCVE-2023-20862Fix available6.3 Medium
- vmware spring sessionSpring Session session ID can be logged to the standard output streamCVE-2023-20866Fix available6.5 Medium
- vmware spring frameworkSpring Framework vulnerable to denial of serviceCVE-2023-20863Fix available6.5 Medium
- vmware spring frameworkSpring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatchCVE-2023-20860Public exploitFix available7.5 High
- vmware spring frameworkSpring Framework vulnerable to denial of service via specially crafted SpEL expressionCVE-2023-20861Fix available6.5 Medium
- vmware spring vault, spring cloud config, spring cloud vault +2 moreSpring Vault vulnerable to insertion of sensitive information into a log fileCVE-2023-20859Fix available5.5 Medium
- vmware workspace one contentVMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with...CVE-2023-208576.8 Medium
- vmware carbon black app controlVMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x prior to 8.8.6, and 8.9.x.prior to 8...CVE-2023-20858EPSS 16.9%7.2 High
- vmware vrealize orchestrator, vrealize automation +1 moreVMware vRealize Orchestrator contains an XML External Entity (XXE) vulnerability. A malicious...CVE-2023-208558.8 High
- vmware ixgbenProtection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware...CVE-2022-367973.3 Low
- vmware ixgbenProtection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware...CVE-2022-364164.4 Medium
- vmware workstationVMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with...CVE-2023-208548.4 High
- vmware vrealize operationsVMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could...CVE-2023-208568.8 High
- vmware vrealize log insightVMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor...CVE-2022-31711Public exploitEPSS 22.3%5.3 Medium
- vmware vrealize log insightvRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor...CVE-2022-317107.5 High
- vmware vrealize log insightThe vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated,...CVE-2022-31706Public exploitEPSS 87.1%9.8 Critical
- vmware vrealize log insightThe vRealize Log Insight contains a broken access control vulnerability. An unauthenticated...CVE-2022-31704Public exploitEPSS 81.0%9.8 Critical
- apache shiro, vmware spring boot +1 moreApache Shiro before 1.11.0, when used with Spring Boot 2.6+, may allow authentication bypass through a specially crafted HTTP requestCVE-2023-22602Fix available7.5 High
- vmware vrealize operationsvRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated...CVE-2022-317084.9 Medium
- vmware vrealize operationsvRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated...CVE-2022-317077.2 High
- vmware esxi, fusion, workstation +2 moreVMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB...CVE-2022-31705Public exploit8.2 High
- vmware vrealize log insightvRealize Network Insight (vRNI) directory traversal vulnerability in vRNI REST API. A malicious...CVE-2022-317037.5 High
- vmware vrealize network insightvRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI...CVE-2022-317029.8 Critical
- vmware access, cloud foundation, identity manager connector +2 moreVMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability....CVE-2022-317015.3 Medium
- vmware access, identity manager, cloud foundation +2 moreVMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution...CVE-2022-317007.2 High
- vmware esxi, cloud foundation +1 moreVMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted...CVE-2022-316993.3 Low
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability in the content library service. A...CVE-2022-31698EPSS 47.8%5.3 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains an information disclosure vulnerability due to the logging of...CVE-2022-316975.5 Medium
- vmware esxi, cloud foundation +1 moreVMware ESXi contains a memory corruption vulnerability that exists in the way it handles a...CVE-2022-316968.8 High
- vmware open-vm-toolsAn issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended...CVE-2009-1143Fix available7.0 High
- vmware open vm toolsAn issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a...CVE-2009-1142Fix available6.7 Medium
- vmware hyperic agent** UNSUPPORTED WHEN ASSIGNED ** A remote insecure deserialization vulnerability exixsts in VMWare...CVE-2022-386529.9 Critical
- vmware hyperic server** UNSUPPORTED WHEN ASSIGNED ** A security filter misconfiguration exists in VMware Hyperic...CVE-2022-386519.8 Critical
- vmware hyperic server** UNSUPPORTED WHEN ASSIGNED ** A remote unauthenticated insecure deserialization vulnerability...CVE-2022-3865010.0 Critical
- vmware workspace one assistVMware Workspace ONE Assist prior to 22.10 contains a Session fixation vulnerability. A malicious...CVE-2022-316899.8 Critical
- vmware workspace one assistVMware Workspace ONE Assist prior to 22.10 contains a Reflected cross-site scripting (XSS)...CVE-2022-316886.1 Medium
- vmware workspace one assistVMware Workspace ONE Assist prior to 22.10 contains a Broken Access Control vulnerability. A...CVE-2022-316879.8 Critical
- Show moreLoading…