Browse CVEs

MEDIUM 5.0 CVE-2012-5978 Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x b… View Mitigation only Fix from $1,6002012-12-19 MEDIUM 5.0 CVE-2012-5703 The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1)… Esx Mitigation only Fix from $1,6002012-11-20 HIGH 8.3 CVE-2012-5458 VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows … Player Mitigation only Fix from $1,9502012-11-14 MEDIUM 5.0 CVE-2012-5051 Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspecified vectors. Capacityiq Mitigation only Fix from $1,6002012-10-05 HIGH 9.3 CVE-2012-3288 VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware… Workstation Mitigation only Fix from $1,9502012-06-14 HIGH 7.8 CVE-2012-3289 VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attacke… Workstation Mitigation only Fix from $1,9502012-06-14 HIGH 7.2 CVE-2012-2752 Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the curr… Vma Mitigation only Fix from $1,9502012-06-01 CRITICAL 9.9 CVE-2012-1516 The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a … Esx Mitigation only Fix from $2,3002012-05-04 HIGH 9.0 CVE-2012-1517 The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memor… Esx Mitigation only Fix from $1,9502012-05-04 HIGH 9.0 CVE-2012-2449 VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5… Workstation Mitigation only Fix from $1,9502012-05-04 HIGH 9.0 CVE-2012-2450 VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 … Workstation Mitigation only Fix from $1,9502012-05-04 HIGH 7.5 CVE-2012-2448 VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) … Esxi Mitigation only Fix from $1,9502012-05-04 HIGH 8.3 CVE-2012-1518 VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 … Workstation Mitigation only Fix from $1,9502012-04-17 HIGH 8.3 CVE-2012-1515 VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain gues… Esxi Mitigation only Fix from $1,9502012-04-02 MEDIUM 5.0 CVE-2011-0527 VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during J… Tc Server Mitigation only Fix from $1,6002011-08-15 HIGH 9.3 CVE-2011-2217EPSS 42% Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka… Virtual Infrastructure Client Mitigation only Fix from $1,9502011-06-06 HIGH 7.8 CVE-2011-1785 VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic. Esx Mitigation only Fix from $1,9502011-05-03 MEDIUM 5.0 CVE-2011-1786 lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware … Esx Mitigation only Fix from $1,6002011-05-03 MEDIUM 6.9 CVE-2011-1126 VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users t… Vix Api Mitigation only Fix from $1,6002011-04-04 MEDIUM 5.0 CVE-2010-3609EPSS 17% The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (S… Esx Mitigation only Fix from $1,6002011-03-11 HIGH 9.3 CVE-2010-4573 The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows … Esxi Mitigation only Fix from $1,9502010-12-22 HIGH 7.2 CVE-2010-4296 vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.… Workstation Mitigation only Fix from $1,9502010-12-06 HIGH 7.2 CVE-2010-4297EPSS 5% The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x be… Workstation Mitigation only Fix from $1,9502010-12-06 MEDIUM 6.9 CVE-2010-4295 Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2… Workstation Mitigation only Fix from $1,6002010-12-06 MEDIUM 5.0 CVE-2010-3700 VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Applicati… Springsource Spring Security Mitigation only Fix from $1,6002010-10-29 MEDIUM 6.8 CVE-2010-1454 com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25… Tc Server Mitigation only Fix from $1,6002010-05-19 HIGH 9.3 CVE-2009-1564EPSS 6% Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in… Movie Decoder Mitigation only Fix from $1,9502010-04-12 MEDIUM 5.0 CVE-2009-3707EPSS 11% VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.… Ace No fix yet Fix from $1,6002009-10-16 MEDIUM 5.0 CVE-2009-2968 Directory traversal vulnerability in a support component in the web interface in VMware Studio 2.0 public beta before build 1017-185256 allows remote… Studio Mitigation only Fix from $1,6002009-09-02 HIGH 7.2 CVE-2009-1147 Unspecified vulnerability in vmci.sys in the Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.5.1 and earlier, VMware Player 2.… Ace Mitigation only Fix from $1,9502009-04-06