Vulnerability index

Browse CVEs

800 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Esx HIGH 7.5
CVE-2013-3657

Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service v…

Mitigation only
Fix from $1,950 2013-09-10
Workstation MEDIUM 6.9
CVE-2013-1662

vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host…

Mitigation only
Fix from $1,600 2013-08-24
Vcenter Chargeback Manager HIGH 7.5
CVE-2013-3520EPSS 56%

VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via …

Fix: after 2.5.0
Fix from $1,950 2013-06-17
Vcenter Server Appliance HIGH 9.0
CVE-2013-3079

VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by le…

Mitigation only
Fix from $1,950 2013-05-01
Vcenter Server Appliance HIGH 9.0
CVE-2013-3080

VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently…

Mitigation only
Fix from $1,950 2013-05-01
Vcenter Server HIGH 7.8
CVE-2012-6326

VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service…

Patch available
Fix from $1,950 2013-02-22
Vcenter Server HIGH 7.6
CVE-2013-1659

VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 d…

Mitigation only
Fix from $1,950 2013-02-22
Vcenter Server HIGH 10.0
CVE-2013-1405

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 bef…

Mitigation only
Fix from $1,950 2013-02-15
Workstation HIGH 7.2
CVE-2013-1406

The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows,…

Mitigation only
Fix from $1,950 2013-02-11
View MEDIUM 5.0
CVE-2012-5978

Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x b…

Mitigation only
Fix from $1,600 2012-12-19
Springsource Spring Security MEDIUM 5.1
CVE-2011-2731

Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication obj…

Fix: after 3.0.5
Fix from $1,600 2012-12-05
Springsource Spring Security MEDIUM 5.0
CVE-2012-5055

DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password…

Fix: after 2.0.6
Fix from $1,600 2012-12-05
Esx MEDIUM 5.0
CVE-2012-5703

The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1)…

Mitigation only
Fix from $1,600 2012-11-20
Ovf Tool HIGH 9.3
CVE-2012-3569EPSS 48%

Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and ot…

Patch available
Fix from $1,950 2012-11-14
Player HIGH 8.3
CVE-2012-5458

VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows …

Mitigation only
Fix from $1,950 2012-11-14
Player HIGH 7.9
CVE-2012-5459

Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain…

Patch available
Fix from $1,950 2012-11-14
Movie Decoder MEDIUM 6.9
CVE-2012-4897

Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse exec…

Fix: after 7.1.2
Fix from $1,600 2012-10-05
Capacityiq MEDIUM 5.0
CVE-2012-5051

Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspecified vectors.

Mitigation only
Fix from $1,600 2012-10-05
Workstation MEDIUM 6.9
CVE-2012-1666

Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMwar…

Fix: after 8.0.3
Fix from $1,600 2012-09-08
Workstation HIGH 9.3
CVE-2012-3288

VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware…

Mitigation only
Fix from $1,950 2012-06-14
Workstation HIGH 7.8
CVE-2012-3289

VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attacke…

Mitigation only
Fix from $1,950 2012-06-14
Vma HIGH 7.2
CVE-2012-2752

Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the curr…

Mitigation only
Fix from $1,950 2012-06-01
Esx CRITICAL 9.9
CVE-2012-1516

The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a …

Mitigation only
Fix from $2,300 2012-05-04
Esx HIGH 9.0
CVE-2012-1517

The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memor…

Mitigation only
Fix from $1,950 2012-05-04
Workstation HIGH 9.0
CVE-2012-2449

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5…

Mitigation only
Fix from $1,950 2012-05-04
Workstation HIGH 9.0
CVE-2012-2450

VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 …

Mitigation only
Fix from $1,950 2012-05-04
Esxi HIGH 7.5
CVE-2012-2448

VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) …

Mitigation only
Fix from $1,950 2012-05-04
Workstation HIGH 8.3
CVE-2012-1518

VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 …

Mitigation only
Fix from $1,950 2012-04-17
Esxi HIGH 8.3
CVE-2012-1515

VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain gues…

Mitigation only
Fix from $1,950 2012-04-02
Esx HIGH 7.2
CVE-2012-1510

Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS use…

Fix: after 4.6.0
Fix from $1,950 2012-03-16