Vulnerability index

Browse CVEs

800 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Cloud Foundation HIGH 7.5
CVE-2019-16919

Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account…

Fix: 1.8.4+
Fix from $1,950 2019-10-18
Horizon HIGH 8.8
CVE-2019-5527

ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the sever…

Fix: 5.2.0 / 10.0.5+
Fix from $1,950 2019-10-10
Fusion CRITICAL 9.6
CVE-2019-5521

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (1…

Fix: 10.1.6 / 11.0.3+
Fix from $2,300 2019-09-20
Esxi MEDIUM 5.4
CVE-2019-5531

VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter …

Mitigation only
Fix from $1,600 2019-09-18
Vcenter Server HIGH 7.7
CVE-2019-5532

VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to t…

No fix yet
Fix from $1,950 2019-09-18
Vcenter Server HIGH 7.7
CVE-2019-5534

VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Vi…

No fix yet
Fix from $1,950 2019-09-18
Esxi MEDIUM 5.3
CVE-2019-5528

VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available.

Patch available
Fix from $1,600 2019-07-11
Spring Security HIGH 7.3
CVE-2019-11272

Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an appli…

Fix: 4.2.13+
Fix from $1,950 2019-06-26
Workstation HIGH 8.8
CVE-2019-5525

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious …

Fix: 15.1.0+
Fix from $1,950 2019-06-06
Tools HIGH 7.1
CVE-2019-5522

VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machi…

Fix: 10.3.10+
Fix from $1,950 2019-06-06
Workstation HIGH 7.8
CVE-2019-5526EPSS 9%

VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful ex…

Fix: 15.1.0+
Fix from $1,950 2019-05-15
Spring Cloud Config MEDIUM 6.5
CVE-2019-3799EPSS 85%

Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions …

Fix: 1.4.6 / 2.0.4+
Fix from $1,600 2019-05-06
Fusion MEDIUM 6.8
CVE-2019-5517

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x…

Fix: 10.1.6 / 11.0.3+
Fix from $1,600 2019-04-15
Fusion MEDIUM 5.9
CVE-2019-5520

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x…

Fix: 10.1.6 / 11.0.3+
Fix from $1,600 2019-04-15
Fusion MEDIUM 6.8
CVE-2019-5516

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x…

Fix: 10.1.6 / 11.0.3+
Fix from $1,600 2019-04-15
Workstation HIGH 8.8
CVE-2019-5511

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this i…

Fix: 14.1.6 / 15.0.3+
Fix from $1,950 2019-04-09
Workstation HIGH 8.8
CVE-2019-5512

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of …

Fix: 14.1.6 / 15.0.3+
Fix from $1,950 2019-04-09
Horizon MEDIUM 5.3
CVE-2019-5513

VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful …

Fix: 6.2.8 / 7.5.2+
Fix from $1,600 2019-04-09
Spring Security MEDIUM 5.3
CVE-2019-3795

Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when usi…

Fix: 4.2.12 / 5.0.12+
Fix from $1,600 2019-04-09
Fusion HIGH 8.8
CVE-2019-5515

VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds writ…

Fix: 10.1.6 / 11.0.3+
Fix from $1,950 2019-04-02
Fusion HIGH 8.8
CVE-2019-5524

VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network ada…

Fix: 10.1.6 / 14.1.6+
Fix from $1,950 2019-04-02
Fusion MEDIUM 6.8
CVE-2019-5519

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before …

Fix: 10.1.6 / 11.0.3+
Fix from $1,600 2019-04-01
Fusion HIGH 8.8
CVE-2019-5514

VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An a…

Fix: 11.0.3+
Fix from $1,950 2019-04-01
Fusion MEDIUM 6.8
CVE-2019-5518

VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before …

Fix: 10.1.6 / 11.0.3+
Fix from $1,600 2019-04-01
Vcloud Director CRITICAL 9.8
CVE-2019-5523

VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and Provider …

Fix: 9.5.0.3+
Fix from $2,300 2019-04-01
Spring Integration CRITICAL 9.8
CVE-2019-3772

Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were s…

Fix: after 5.1.1
Fix from $2,300 2019-01-18
Spring Framework HIGH 7.4
CVE-2018-15801

Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, th…

Fix: 5.1.2+
Fix from $1,950 2018-12-19
Vrealize Operations MEDIUM 6.7
CVE-2018-6978

vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vu…

Fix: 6.6.1.11286876 / 6.7.0.11286837+
Fix from $1,600 2018-12-18
Workstation HIGH 8.8
CVE-2018-6981

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware W…

Fix: 10.1.4 / 14.1.4+
Fix from $1,950 2018-12-04
Workstation MEDIUM 6.5
CVE-2018-6982

VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3…

Fix: 10.1.4 / 14.1.4+
Fix from $1,600 2018-12-04