Vulnerability index

Browse CVEs

800 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Vshield Manager MEDIUM 6.8
CVE-2012-1514

Cross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attacke…

Fix: after 4.1
Fix from $1,600 2012-03-16
Esx HIGH 7.2
CVE-2012-1508

The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS…

Fix: after 4.6.0
Fix from $1,950 2012-03-16
View HIGH 7.2
CVE-2012-1509

Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors.

Fix: after 4.6.0
Fix from $1,950 2012-03-16
Vcenter Chargeback Manager MEDIUM 6.4
CVE-2012-1472

VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary f…

Fix: after 2.0.0
Fix from $1,600 2012-03-13
Vcenter Update Manager MEDIUM 5.0
CVE-2011-4404EPSS 60%

The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before U…

Patch available
Fix from $1,600 2011-11-19
Workstation HIGH 9.3
CVE-2011-3868EPSS 6%

Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remot…

Patch available
Fix from $1,950 2011-10-07
Spring Framework MEDIUM 6.8
CVE-2011-2894EPSS 9%

Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects fr…

Fix: after 3.0.5
Fix from $1,600 2011-10-04
Tc Server MEDIUM 5.0
CVE-2011-0527

VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during J…

Mitigation only
Fix from $1,600 2011-08-15
Virtual Infrastructure Client HIGH 9.3
CVE-2011-2217EPSS 42%

Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka…

Mitigation only
Fix from $1,950 2011-06-06
Esx MEDIUM 6.3
CVE-2011-2145

mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.…

Patch available
Fix from $1,600 2011-06-06
Workstation MEDIUM 6.9
CVE-2011-1787

Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4…

Patch available
Fix from $1,600 2011-06-06
Esx MEDIUM 5.0
CVE-2011-1789

The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x …

Patch available
Fix from $1,600 2011-05-09
Esx HIGH 7.8
CVE-2011-1785

VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic.

Mitigation only
Fix from $1,950 2011-05-03
Esx MEDIUM 5.0
CVE-2011-1786

lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware …

Mitigation only
Fix from $1,600 2011-05-03
Vix Api MEDIUM 6.9
CVE-2011-1126

VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users t…

Mitigation only
Fix from $1,600 2011-04-04
Esx MEDIUM 5.0
CVE-2010-3609EPSS 17%

The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (S…

Mitigation only
Fix from $1,600 2011-03-11
Esxi HIGH 9.3
CVE-2010-4573

The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows …

Mitigation only
Fix from $1,950 2010-12-22
Movie Decoder HIGH 9.3
CVE-2010-4294EPSS 6%

The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VM…

Fix: after 6.5.5
Fix from $1,950 2010-12-06
Workstation HIGH 7.2
CVE-2010-4296

vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.…

Mitigation only
Fix from $1,950 2010-12-06
Workstation HIGH 7.2
CVE-2010-4297EPSS 5%

The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x be…

Mitigation only
Fix from $1,950 2010-12-06
Workstation MEDIUM 6.9
CVE-2010-4295

Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2…

Mitigation only
Fix from $1,600 2010-12-06
Springsource Spring Security MEDIUM 5.0
CVE-2010-3700

VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Applicati…

Mitigation only
Fix from $1,600 2010-10-29
Esxi CRITICAL 9.8
CVE-2010-0211EPSS 28%

The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows re…

Fix: 10.6.5+
Fix from $2,300 2010-07-28
Studio MEDIUM 6.0
CVE-2010-2667

Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users …

Patch available
Fix from $1,600 2010-07-22
Tc Server MEDIUM 6.8
CVE-2010-1454

com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25…

Mitigation only
Fix from $1,600 2010-05-19
Ace MEDIUM 5.0
CVE-2009-4811

VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.…

Patch available
Fix from $1,600 2010-04-27
Ace HIGH 10.0
CVE-2009-3732EPSS 16%

Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via…

Fix: 2.5.4 / 6.5.4+
Fix from $1,950 2010-04-12
Movie Decoder HIGH 9.3
CVE-2009-1564EPSS 6%

Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in…

Mitigation only
Fix from $1,950 2010-04-12
Movie Decoder HIGH 9.3
CVE-2009-1565EPSS 6%

vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x befo…

Patch available
Fix from $1,950 2010-04-12
Workstation HIGH 8.5
CVE-2010-1141

VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 buil…

Patch available
Fix from $1,950 2010-04-12