Browse CVEs

HIGH 7.5 CVE-2019-16919 Harbor API has a Broken Access Control vulnerability. The vulnerability allows project administrators to use the Harbor API to create a robot account… Cloud Foundation 1.8.4+ Fix from $1,9502019-10-18 HIGH 8.8 CVE-2019-5527 ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the sever… Horizon 5.2.0 / 10.0.5+ Fix from $1,9502019-10-10 CRITICAL 9.6 CVE-2019-5521 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (1… Fusion 10.1.6 / 11.0.3+ Fix from $2,3002019-09-20 MEDIUM 5.4 CVE-2019-5531 VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter … Esxi Mitigation only Fix from $1,6002019-09-18 HIGH 7.7 CVE-2019-5532 VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to t… Vcenter Server No fix yet Fix from $1,9502019-09-18 HIGH 7.7 CVE-2019-5534 VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Vi… Vcenter Server No fix yet Fix from $1,9502019-09-18 MEDIUM 5.3 CVE-2019-5528 VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available. Esxi Patch available Fix from $1,6002019-07-11 HIGH 7.3 CVE-2019-11272 Spring Security, versions 4.2.x up to 4.2.12, and older unsupported versions support plain text passwords using PlaintextPasswordEncoder. If an appli… Spring Security 4.2.13+ Fix from $1,9502019-06-26 HIGH 8.8 CVE-2019-5525 VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious … Workstation 15.1.0+ Fix from $1,9502019-06-06 HIGH 7.1 CVE-2019-5522 VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machi… Tools 10.3.10+ Fix from $1,9502019-06-06 HIGH 7.8 CVE-2019-5526EPSS 9% VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful ex… Workstation 15.1.0+ Fix from $1,9502019-05-15 MEDIUM 6.5 CVE-2019-3799EPSS 85% Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions … Spring Cloud Config 1.4.6 / 2.0.4+ Fix from $1,6002019-05-06 MEDIUM 6.8 CVE-2019-5517 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x… Fusion 10.1.6 / 11.0.3+ Fix from $1,6002019-04-15 MEDIUM 5.9 CVE-2019-5520 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x… Fusion 10.1.6 / 11.0.3+ Fix from $1,6002019-04-15 MEDIUM 6.8 CVE-2019-5516 VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x… Fusion 10.1.6 / 11.0.3+ Fix from $1,6002019-04-15 HIGH 8.8 CVE-2019-5511 VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle paths appropriately. Successful exploitation of this i… Workstation 14.1.6 / 15.0.3+ Fix from $1,9502019-04-09 HIGH 8.8 CVE-2019-5512 VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) running on Windows does not handle COM classes appropriately. Successful exploitation of … Workstation 14.1.6 / 15.0.3+ Fix from $1,9502019-04-09 MEDIUM 5.3 CVE-2019-5513 VMware Horizon Connection Server (7.x before 7.8, 7.5.x before 7.5.2, 6.x before 6.2.8) contains an information disclosure vulnerability. Successful … Horizon 6.2.8 / 7.5.2+ Fix from $1,6002019-04-09 MEDIUM 5.3 CVE-2019-3795 Spring Security versions 4.2.x prior to 4.2.12, 5.0.x prior to 5.0.12, and 5.1.x prior to 5.1.5 contain an insecure randomness vulnerability when usi… Spring Security 4.2.12 / 5.0.12+ Fix from $1,6002019-04-09 HIGH 8.8 CVE-2019-5515 VMware Workstation (15.x before 15.0.3, 14.x before 14.1.6) and Fusion (11.x before 11.0.3, 10.x before 10.1.6) updates address an out-of-bounds writ… Fusion 10.1.6 / 11.0.3+ Fix from $1,9502019-04-02 HIGH 8.8 CVE-2019-5524 VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network ada… Fusion 10.1.6 / 14.1.6+ Fix from $1,9502019-04-02 MEDIUM 6.8 CVE-2019-5519 VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before … Fusion 10.1.6 / 11.0.3+ Fix from $1,6002019-04-01 HIGH 8.8 CVE-2019-5514 VMware VMware Fusion (11.x before 11.0.3) contains a security vulnerability due to certain unauthenticated APIs accessible through a web socket. An a… Fusion 11.0.3+ Fix from $1,9502019-04-01 MEDIUM 6.8 CVE-2019-5518 VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before … Fusion 10.1.6 / 11.0.3+ Fix from $1,6002019-04-01 CRITICAL 9.8 CVE-2019-5523 VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and Provider … Vcloud Director 9.5.0.3+ Fix from $2,3002019-04-01 CRITICAL 9.8 CVE-2019-3772 Spring Integration (spring-integration-xml and spring-integration-ws modules), versions 4.3.18, 5.0.10, 5.1.1, and older unsupported versions, were s… Spring Integration after 5.1.1 Fix from $2,3002019-01-18 HIGH 7.4 CVE-2018-15801 Spring Security versions 5.1.x prior to 5.1.2 contain an authorization bypass vulnerability during JWT issuer validation. In order to be impacted, th… Spring Framework 5.1.2+ Fix from $1,9502018-12-19 MEDIUM 6.7 CVE-2018-6978 vRealize Operations (7.x before 7.0.0.11287810, 6.7.x before 6.7.0.11286837 and 6.6.x before 6.6.1.11286876) contains a local privilege escalation vu… Vrealize Operations 6.6.1.11286876 / 6.7.0.11286837+ Fix from $1,6002018-12-18 HIGH 8.8 CVE-2018-6981 VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG, VMware ESXi 6.0 without ESXi600-201811401-BG, VMware W… Workstation 10.1.4 / 14.1.4+ Fix from $1,9502018-12-04 MEDIUM 6.5 CVE-2018-6982 VMware ESXi 6.7 without ESXi670-201811401-BG and VMware ESXi 6.5 without ESXi650-201811301-BG contain uninitialized stack memory usage in the vmxnet3… Workstation 10.1.4 / 14.1.4+ Fix from $1,6002018-12-04