Browse CVEs

CRITICAL 10.0 CVE-2016-0898 MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to the Service Backup c… Pivotal Software Mysql Mitigation only Fix from $2,3002018-03-29 MEDIUM 6.1 CVE-2017-4940 The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a… Esxi Mitigation only Fix from $1,6002017-12-20 HIGH 8.1 CVE-2017-4995 An issue was discovered in Pivotal Spring Security 4.2.0.RELEASE through 4.2.2.RELEASE, and Spring Security 5.0.0.M1. When configured to enable defau… Spring Security Mitigation only Fix from $1,9502017-11-27 MEDIUM 6.1 CVE-2017-8044 In Pivotal Single Sign-On for PCF (1.3.x versions prior to 1.3.4 and 1.4.x versions prior to 1.4.3), certain pages allow code to be injected into the… Single Sign On For Pivotal Cloud Foundry Mitigation only Fix from $1,6002017-11-27 HIGH 7.8 CVE-2017-4939 VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improper… Workstation Mitigation only Fix from $1,9502017-11-17 CRITICAL 9.0 CVE-2017-4919 VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating System… Vcenter Server Mitigation only Fix from $2,3002017-07-28 CRITICAL 9.8 CVE-2017-4918 VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exp… Horizon View Mitigation only Fix from $2,3002017-06-08 CRITICAL 9.9 CVE-2017-4901EPSS 20% The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 has an out-of-bounds memory acc… Fusion Mitigation only Fix from $2,3002017-06-08 CRITICAL 9.8 CVE-2017-4907 VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6.2.4) contain a heap buffer-ov… Horizon View Mitigation only Fix from $2,3002017-06-08 HIGH 7.8 CVE-2017-4908 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-overflow vulnerabilities in JPEG2… Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2017-4909 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow vulnerability in TrueType Font … Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2017-4910 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in JPEG200… Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2017-4911 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds write vulnerabilities in JPEG20… Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2017-4912 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds read vulnerabilities in TrueTyp… Horizon View Mitigation only Fix from $1,9502017-06-08 HIGH 7.8 CVE-2017-4913 VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Fon… Horizon View Mitigation only Fix from $1,9502017-06-08 CRITICAL 9.8 CVE-2014-3527 When using the CAS Proxy ticket authentication from Spring Security 3.1 to 3.2.4 a malicious CAS Service could trick another CAS Service into authent… Spring Security Mitigation only Fix from $2,3002017-05-25 CRITICAL 9.6 CVE-2015-5211 Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versions is vulnerable to a Reflect… Spring Framework No fix yet Fix from $2,3002017-05-25 HIGH 8.8 CVE-2014-0225 When processing user provided XML documents, the Spring Framework 4.0.0 to 4.0.4, 3.0.0 to 3.2.8, and possibly earlier unsupported versions did not d… Spring Framework Mitigation only Fix from $1,9502017-05-25 HIGH 7.5 CVE-2016-5007 Both Spring Security 3.2.x, 4.0.x, 4.1.0 and the Spring Framework 3.2.x, 4.0.x, 4.1.x, 4.2.x rely on URL pattern mappings for authorization and for m… Spring Framework Mitigation only Fix from $1,9502017-05-25 HIGH 7.3 CVE-2014-0097 The ActiveDirectoryLdapAuthenticator in Spring Security 3.2.0 to 3.2.1 and 3.1.0 to 3.1.5 does not check the password length. If the directory allows… Spring Security Mitigation only Fix from $1,9502017-05-25 HIGH 7.5 CVE-2016-9879 An issue was discovered in Pivotal Spring Security before 3.2.10, 4.1.x before 4.1.4, and 4.2.x before 4.2.1. Spring Security does not consider URL p… Spring Security Mitigation only Fix from $1,9502017-01-06 CRITICAL 10.0 CVE-2016-7457 VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, vi… Vrealize Operations Mitigation only Fix from $2,3002016-12-29 CRITICAL 9.8 CVE-2016-7456EPSS 33% VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attac… Vsphere Data Protection Mitigation only Fix from $2,3002016-12-29 CRITICAL 9.1 CVE-2016-7460 The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attacker… Vrealize Automation Mitigation only Fix from $2,3002016-12-29 HIGH 8.8 CVE-2016-7461 The drag-and-drop (aka DnD) function in VMware Workstation Pro 12.x before 12.5.2 and VMware Workstation Player 12.x before 12.5.2 and VMware Fusion … Fusion Mitigation only Fix from $1,9502016-12-29 HIGH 8.5 CVE-2016-7462 The Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to write arbitrary content to files o… Vrealize Operations Mitigation only Fix from $1,9502016-12-29 HIGH 7.8 CVE-2016-7081 Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when C… Workstation Player Mitigation only Fix from $1,9502016-12-29 HIGH 7.8 CVE-2016-7082 VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is ena… Workstation Player Mitigation only Fix from $1,9502016-12-29 HIGH 7.8 CVE-2016-7083 VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is ena… Workstation Player No fix yet Fix from $1,9502016-12-29 HIGH 7.8 CVE-2016-7084 tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual p… Workstation Player No fix yet Fix from $1,9502016-12-29