Vulnerability index

Browse CVEs

800 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Workstation HIGH 8.8
CVE-2018-6983

VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vul…

Fix: 10.1.5 / 11.0.2+
Fix from $1,950 2018-11-27
Vsphere Data Protection CRITICAL 9.8
CVE-2018-11066EPSS 10%

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrate…

Patch available
Fix from $2,300 2018-11-26
Vsphere Data Protection MEDIUM 6.7
CVE-2018-11077

'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Pro…

Patch available
Fix from $1,600 2018-11-26
Vsphere Data Protection MEDIUM 6.5
CVE-2018-11076

Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected…

Patch available
Fix from $1,600 2018-11-26
Vsphere Data Protection MEDIUM 6.1
CVE-2018-11067

Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrate…

Patch available
Fix from $1,600 2018-11-26
Vrealize Log Insight HIGH 7.2
CVE-2018-6980

VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registrati…

Fix: 4.6.2 / 4.7.1+
Fix from $1,950 2018-11-13
Spring Framework HIGH 7.5
CVE-2018-15756EPSS 10%

Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch pro…

Fix: 4.3.20 / 5.0.10+
Fix from $1,950 2018-10-18
Workstation HIGH 8.8
CVE-2018-6974

VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3)…

Fix: 10.1.3 / 14.1.3+
Fix from $1,950 2018-10-16
Esxi MEDIUM 6.5
CVE-2018-6977

VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop…

Fix: after 15.0.2
Fix from $1,600 2018-10-09
Airwatch Console HIGH 7.4
CVE-2018-6979

The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9…

Fix: 9.1.5.6 / 9.2.3.27+
Fix from $1,950 2018-10-05
Rabbitmq Java Client MEDIUM 5.9
CVE-2018-11087

Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname v…

Fix: 1.7.10 / 2.0.6+
Fix from $1,600 2018-09-14
Intelligent Hub MEDIUM 5.5
CVE-2018-6975

The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encryp…

Fix: 5.8.1+
Fix from $1,600 2018-09-11
Workspace One MEDIUM 5.3
CVE-2018-6976

The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencr…

Fix: 4.14+
Fix from $1,600 2018-09-11
Fusion HIGH 8.8
CVE-2018-6973

VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue …

Fix: 10.1.3 / 14.1.3+
Fix from $1,950 2018-08-15
Horizon Client MEDIUM 6.5
CVE-2018-6970

VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds rea…

Fix: 4.8.1 / 6.2.7+
Fix from $1,600 2018-08-13
Horizon View Agents HIGH 7.8
CVE-2018-6971

VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vm…

Fix: 7.5.1+
Fix from $1,950 2018-07-25
Workstation MEDIUM 6.5
CVE-2018-6972

VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), …

Fix: 10.1.2 / 14.1.2+
Fix from $1,600 2018-07-25
Tools HIGH 7.0
CVE-2018-6969

VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to i…

Fix: 10.3.0+
Fix from $1,950 2018-07-13
Workstation HIGH 8.1
CVE-2018-6965

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulner…

Fix: 10.1.2 / 14.1.2+
Fix from $1,950 2018-07-09
Fusion HIGH 8.1
CVE-2018-6966

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulner…

Fix: 10.1.2 / 14.1.2+
Fix from $1,950 2018-07-09
Fusion HIGH 8.1
CVE-2018-6967

VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulner…

Fix: 10.1.2 / 14.1.2+
Fix from $1,950 2018-07-09
Spring Framework HIGH 7.5
CVE-2018-11040

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-dom…

Fix: 4.3.18 / 5.0.7+
Fix from $1,950 2018-06-25
Spring Framework MEDIUM 5.9
CVE-2018-11039

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the…

Fix: 4.3.18 / 5.0.7+
Fix from $1,600 2018-06-25
Airwatch Agent CRITICAL 10.0
CVE-2018-6968EPSS 5%

The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability…

Fix: 6.5.2 / 8.2+
Fix from $2,300 2018-06-11
Nsx Sd Wan By Velocloud HIGH 8.1
CVE-2018-6961 KEVEPSS 86%

VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component i…

Fix: 3.1.0+
Fix from $1,950 2018-06-11
Horizon Client HIGH 7.8
CVE-2018-6964

VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary…

Fix: 4.8.0+
Fix from $1,950 2018-05-29
Fusion HIGH 7.8
CVE-2018-6962

VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation.

Fix: 10.1.2+
Fix from $1,950 2018-05-22
Fusion MEDIUM 5.5
CVE-2018-6963

VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL poi…

Fix: 10.1.2 / 14.1.2+
Fix from $1,600 2018-05-22
Spring Framework HIGH 8.8
CVE-2018-1258

Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method secur…

Fix: 7.0.0.1 / 8.3+
Fix from $1,950 2018-05-11
Spring Data Rest HIGH 7.5
CVE-2018-1259EPSS 5%

Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a p…

Fix: after 3.0.6
Fix from $1,950 2018-05-11