Vulnerability index

Browse CVEs

139 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

View MEDIUM 5.0
CVE-2012-5978

Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x b…

Mitigation only
Fix from $1,600 2012-12-19
Esx MEDIUM 5.0
CVE-2012-5703

The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1)…

Mitigation only
Fix from $1,600 2012-11-20
Player HIGH 8.3
CVE-2012-5458

VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows …

Mitigation only
Fix from $1,950 2012-11-14
Capacityiq MEDIUM 5.0
CVE-2012-5051

Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspecified vectors.

Mitigation only
Fix from $1,600 2012-10-05
Workstation HIGH 9.3
CVE-2012-3288

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware…

Mitigation only
Fix from $1,950 2012-06-14
Workstation HIGH 7.8
CVE-2012-3289

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attacke…

Mitigation only
Fix from $1,950 2012-06-14
Vma HIGH 7.2
CVE-2012-2752

Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the curr…

Mitigation only
Fix from $1,950 2012-06-01
Esx CRITICAL 9.9
CVE-2012-1516

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a …

Mitigation only
Fix from $2,300 2012-05-04
Esx HIGH 9.0
CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memor…

Mitigation only
Fix from $1,950 2012-05-04
Workstation HIGH 9.0
CVE-2012-2449

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5…

Mitigation only
Fix from $1,950 2012-05-04
Workstation HIGH 9.0
CVE-2012-2450

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 …

Mitigation only
Fix from $1,950 2012-05-04
Esxi HIGH 7.5
CVE-2012-2448

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) …

Mitigation only
Fix from $1,950 2012-05-04
Workstation HIGH 8.3
CVE-2012-1518

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 …

Mitigation only
Fix from $1,950 2012-04-17
Esxi HIGH 8.3
CVE-2012-1515

VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain gues…

Mitigation only
Fix from $1,950 2012-04-02
Tc Server MEDIUM 5.0
CVE-2011-0527

VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during J…

Mitigation only
Fix from $1,600 2011-08-15
Virtual Infrastructure Client HIGH 9.3
CVE-2011-2217EPSS 42%

Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka…

Mitigation only
Fix from $1,950 2011-06-06
Esx HIGH 7.8
CVE-2011-1785

VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic.

Mitigation only
Fix from $1,950 2011-05-03
Esx MEDIUM 5.0
CVE-2011-1786

lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware …

Mitigation only
Fix from $1,600 2011-05-03
Vix Api MEDIUM 6.9
CVE-2011-1126

VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users t…

Mitigation only
Fix from $1,600 2011-04-04
Esx MEDIUM 5.0
CVE-2010-3609EPSS 17%

The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (S…

Mitigation only
Fix from $1,600 2011-03-11
Esxi HIGH 9.3
CVE-2010-4573

The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows …

Mitigation only
Fix from $1,950 2010-12-22
Workstation HIGH 7.2
CVE-2010-4296

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.…

Mitigation only
Fix from $1,950 2010-12-06
Workstation HIGH 7.2
CVE-2010-4297EPSS 5%

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x be…

Mitigation only
Fix from $1,950 2010-12-06
Workstation MEDIUM 6.9
CVE-2010-4295

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2…

Mitigation only
Fix from $1,600 2010-12-06
Springsource Spring Security MEDIUM 5.0
CVE-2010-3700

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Applicati…

Mitigation only
Fix from $1,600 2010-10-29
Tc Server MEDIUM 6.8
CVE-2010-1454

com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25…

Mitigation only
Fix from $1,600 2010-05-19
Movie Decoder HIGH 9.3
CVE-2009-1564EPSS 6%

Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in…

Mitigation only
Fix from $1,950 2010-04-12
Ace MEDIUM 5.0
CVE-2009-3707EPSS 11%

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.…

No fix yet
Fix from $1,600 2009-10-16
Studio MEDIUM 5.0
CVE-2009-2968

Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote…

Mitigation only
Fix from $1,600 2009-09-02
Ace HIGH 7.2
CVE-2009-1147

Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.…

Mitigation only
Fix from $1,950 2009-04-06