Skip to contentVmware vulnerabilities
Products
Show 120 moreShow less
Newest
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 morePrivilege escalation vulnerabilityCVE-2024-38813In KEVEPSS 17.4%7.5 High
- vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 moreHeap-overflow vulnerabilityCVE-2024-38812In KEVEPSS 54.6%9.8 Critical
- spring, spring by vmware tanzu framework +1 moreCVE-2024-38816: Path traversal vulnerability in functional web frameworksCVE-2024-38816Public exploitFix availableEPSS 21.3%7.5 High
- vmware fusionCode-execution vulnerabilityCVE-2024-388118.8 High
- spring framework, vmware spring framework, netapp active iq unified manager +1 more +3 moreCVE-2024-38808: Spring Expression DoS VulnerabilityCVE-2024-38808Fix available4.3 Medium
- spring security, vmware spring security +1 moreMissing Authorization When Using @AuthorizeReturnObjectCVE-2024-38810Fix available6.5 Medium
- spring cloud data flow, vmware spring cloud data flow +1 moreCVE-2024-37084: Remote code execution in Spring Cloud Data FlowCVE-2024-37084Public exploitFix availableEPSS 35.2%9.8 Critical
- vmware aria automation, cloud foundation +1 moreVMSA-2024-0017: VMware Aria Automation updates address SQL-injection vulnerability (CVE-2024-22280)CVE-2024-222808.5 High
- spring by vmware tanzu cloud function framework, vmware spring cloud function +1 moreSpring Cloud Function Web DOS VulnerabilityCVE-2024-22271Fix available8.2 High
- vmware cloud directorVMware Cloud Director Availability contains an HTML injection vulnerability.
A
malicious actor...CVE-2024-222776.4 Medium
- vmware cloud director object storage extensionVMware Cloud Director Object Storage Extension contains an Insertion of Sensitive Information...CVE-2024-222765.3 Medium
- vmware workspace one uemVMware Workspace One UEM update addresses an information exposure vulnerability.
A malicious...CVE-2024-222606.8 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains a denial-of-service vulnerability. A malicious actor with network...CVE-2024-370875.3 Medium
- vmware esxi, cloud foundation +1 moreVMware ESXi contains an out-of-bounds read vulnerability. A
malicious actor with local...CVE-2024-370866.8 Medium
- vmware esxi, cloud foundation +1 moreVMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient...CVE-2024-37085In KEVPublic exploitEPSS 26.8%6.8 Medium
- vmware vcenter server, cloud foundation +1 moreThe vCenter Server contains multiple local privilege escalation vulnerabilities due to...CVE-2024-37081Public exploit7.8 High
- vmware vcenter server, cloud foundation +1 morevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC...CVE-2024-37080EPSS 12.5%9.8 Critical
- vmware vcenter server, broadcom vmware vcenter server, vmware cloud foundation +2 morevCenter Server contains a heap-overflow vulnerability in the implementation of the DCERPC...CVE-2024-37079In KEVEPSS 22.4%9.8 Critical
- vmware vcenter server, cloud foundation, cloud foundation (vcenter server) +2 moreThe vCenter Server contains a partial file read vulnerability. A malicious actor with...CVE-2024-22275Public exploit4.9 Medium
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 moreThe vCenter Server contains an authenticated remote code execution vulnerability. A malicious...CVE-2024-22274Public exploit7.2 High
- vmware esxi, fusion, workstation +2 more +4 moreThe storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write...CVE-2024-222738.1 High
- vmware fusion, workstation +1 moreVMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest...CVE-2024-222707.1 High
- vmware fusion, workstation +1 moreVMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth...CVE-2024-222697.1 High
- vmware fusion, workstation +1 moreVMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader...CVE-2024-222687.1 High
- na vmware workstation, vmware fusion, workstation +2 moreVMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A...CVE-2024-222679.3 Critical
- vmware avi load balancerVMware Avi Load Balancer updates address multiple vulnerabilitiesCVE-2024-222666.5 Medium
- vmware avi load balancerVMware Avi Load Balancer updates address multiple vulnerabilitiesCVE-2024-222647.2 High
- spring framework, vmware spring framework +1 moreCVE-2024-22262: Spring Framework URL Parsing with Host ValidationCVE-2024-22262Public exploitFix available8.1 High
- vmware sd-wan edgeVMware SD-WAN Edge contains a missing authentication and protection mechanism vulnerability.
A...CVE-2024-222474.8 Medium
- vmware sd-wan edgeVMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially...CVE-2024-222467.4 High
- springCVE-2024-22258: PKCE Downgrade in Spring Authorization ServerCVE-2024-22258Fix available6.1 Medium
- spring framework, vmware spring framework, netapp active iq unified manager +2 moreCVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)CVE-2024-22259Fix available8.1 High
- vmware cloud directorVMware Cloud Director contains a partial information disclosure vulnerability. A malicious actor...CVE-2024-222564.3 Medium
- vmware esxi, fusion, workstation +1 more +3 moreInformation disclosure vulnerabilityCVE-2024-222557.1 High
- vmware esxi, broadcom vmware cloud foundation, vmware cloud foundation +2 moreOut-of-bounds write vulnerabilityCVE-2024-222547.9 High
- vmware esxi, fusion, workstation +1 more +3 moreUse-after-free vulnerabilityCVE-2024-222539.3 Critical
- vmware esxi, fusion, workstation +1 more +3 moreUse-after-free vulnerabilityCVE-2024-222529.3 Critical
- vmware fusion, workstation +1 moreOut-of-bounds read vulnerabilityCVE-2024-222515.9 Medium
- pivotal software spring framework, spring framework, netapp active iq unified manager +2 moreCVE-2024-22243: Spring Framework URL Parsing with Host ValidationCVE-2024-22243Public exploitFix available8.1 High
- vmware aria operations, cloud foundation +1 moreVMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor...CVE-2024-222356.7 Medium
- vmware enhanced authentication plugin, enhanced authentication plug-in (eap) +1 moreSession Hijack Vulnerability in Deprecated EAP Browser PluginCVE-2024-222507.8 High
- vmware enhanced authentication plug-in (eap), enhanced authentication plugin +1 moreArbitrary Authentication Relay Vulnerability in Deprecated EAP Browser PluginCVE-2024-222459.6 Critical
- spring security, vmware spring security +1 moreCVE-2024-22234: Broken Access Control in Spring Security With Direct Use of isFullyAuthenticatedCVE-2024-22234Fix available7.4 High
- vmware salt projectSpecially crafted url can be created which leads to a directory traversal in the salt file serverCVE-2024-22232Fix available7.7 High
- vmware salt projectSyndic cache directory creation is vulnerable to a directory traversal attackCVE-2024-22231Fix available5.0 Medium
- vmware aria operations for networksAria Operations for Networks contains a cross site scripting vulnerability. A malicious actor...CVE-2024-22241EPSS 37.8%4.3 Medium
- vmware aria operations for networksAria Operations for Networks contains a local file read vulnerability. A malicious actor with...CVE-2024-222404.9 Medium
- vmware aria operations for networksAria Operations for Networks contains a local privilege escalation vulnerability. A console user...CVE-2024-222395.3 Medium
- vmware aria operations for networksAria Operations for Networks contains a cross site scripting vulnerability. A malicious actor...CVE-2024-222386.4 Medium
- vmware aria operations for networksAria Operations for Networks contains a local privilege escalation vulnerability. A console user...CVE-2024-222377.8 High
- Show moreLoading…