Browse CVEs

HIGH 8.8 CVE-2018-6983 VMware Workstation (15.x before 15.0.2 and 14.x before 14.1.5) and Fusion (11.x before 11.0.2 and 10.x before 10.1.5) contain an integer overflow vul… Workstation 10.1.5 / 11.0.2+ Fix from $1,9502018-11-27 CRITICAL 9.8 CVE-2018-11066EPSS 10% Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrate… Vsphere Data Protection Patch available Fix from $2,3002018-11-26 MEDIUM 6.7 CVE-2018-11077 'getlogs' utility in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1 and 18.1 and Dell EMC Integrated Data Pro… Vsphere Data Protection Patch available Fix from $1,6002018-11-26 MEDIUM 6.5 CVE-2018-11076 Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0 and 7.4.1 and Dell EMC Integrated Data Protection Appliance (IDPA) 2.0 are affected… Vsphere Data Protection Patch available Fix from $1,6002018-11-26 MEDIUM 6.1 CVE-2018-11067 Dell EMC Avamar Client Manager in Dell EMC Avamar Server versions 7.2.0, 7.2.1, 7.3.0, 7.3.1, 7.4.0, 7.4.1, 7.5.0, 7.5.1, 18.1 and Dell EMC Integrate… Vsphere Data Protection Patch available Fix from $1,6002018-11-26 HIGH 7.2 CVE-2018-6980 VMware vRealize Log Insight (4.7.x before 4.7.1 and 4.6.x before 4.6.2) contains a vulnerability due to improper authorization in the user registrati… Vrealize Log Insight 4.6.2 / 4.7.1+ Fix from $1,9502018-11-13 HIGH 7.5 CVE-2018-15756EPSS 10% Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch pro… Spring Framework 4.3.20 / 5.0.10+ Fix from $1,9502018-10-18 HIGH 8.8 CVE-2018-6974 VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3)… Workstation 10.1.3 / 14.1.3+ Fix from $1,9502018-10-16 MEDIUM 6.5 CVE-2018-6977 VMware ESXi (6.7, 6.5, 6.0), Workstation (15.x and 14.x) and Fusion (11.x and 10.x) contain a denial-of-service vulnerability due to an infinite loop… Esxi after 15.0.2 Fix from $1,6002018-10-09 HIGH 7.4 CVE-2018-6979 The VMware Workspace ONE Unified Endpoint Management Console (A/W Console) 9.7.x prior to 9.7.0.3, 9.6.x prior to 9.6.0.7, 9.5.x prior to 9.5.0.16, 9… Airwatch Console 9.1.5.6 / 9.2.3.27+ Fix from $1,9502018-10-05 MEDIUM 5.9 CVE-2018-11087 Pivotal Spring AMQP, 1.x versions prior to 1.7.10 and 2.x versions prior to 2.0.6, expose a man-in-the-middle vulnerability due to lack of hostname v… Rabbitmq Java Client 1.7.10 / 2.0.6+ Fix from $1,6002018-09-14 MEDIUM 5.5 CVE-2018-6975 The AirWatch Agent for iOS prior to 5.8.1 contains a data protection vulnerability whereby the files and keychain entries in the Agent are not encryp… Intelligent Hub 5.8.1+ Fix from $1,6002018-09-11 MEDIUM 5.3 CVE-2018-6976 The VMware Content Locker for iOS prior to 4.14 contains a data protection vulnerability in the SQLite database. This vulnerability relates to unencr… Workspace One 4.14+ Fix from $1,6002018-09-11 HIGH 8.8 CVE-2018-6973 VMware Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds write vulnerability in the e1000 device. This issue … Fusion 10.1.3 / 14.1.3+ Fix from $1,9502018-08-15 MEDIUM 6.5 CVE-2018-6970 VMware Horizon 6 (6.x.x before 6.2.7), Horizon 7 (7.x.x before 7.5.1), and Horizon Client (4.x.x and prior before 4.8.1) contain an out-of-bounds rea… Horizon Client 4.8.1 / 6.2.7+ Fix from $1,6002018-08-13 HIGH 7.8 CVE-2018-6971 VMware Horizon View Agents (7.x.x before 7.5.1) contain a local information disclosure vulnerability due to insecure logging of credentials in the vm… Horizon View Agents 7.5.1+ Fix from $1,9502018-07-25 MEDIUM 6.5 CVE-2018-6972 VMware ESXi (6.7 before ESXi670-201806401-BG, 6.5 before ESXi650-201806401-BG, 6.0 before ESXi600-201806401-BG and 5.5 before ESXi550-201806401-BG), … Workstation 10.1.2 / 14.1.2+ Fix from $1,6002018-07-25 HIGH 7.0 CVE-2018-6969 VMware Tools (10.x and prior before 10.3.0) contains an out-of-bounds read vulnerability in HGFS. Successful exploitation of this issue may lead to i… Tools 10.3.0+ Fix from $1,9502018-07-13 HIGH 8.1 CVE-2018-6965 VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulner… Workstation 10.1.2 / 14.1.2+ Fix from $1,9502018-07-09 HIGH 8.1 CVE-2018-6966 VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulner… Fusion 10.1.2 / 14.1.2+ Fix from $1,9502018-07-09 HIGH 8.1 CVE-2018-6967 VMware ESXi (6.7 before ESXi670-201806401-BG), Workstation (14.x before 14.1.2), and Fusion (10.x before 10.1.2) contain an out-of-bounds read vulner… Fusion 10.1.2 / 14.1.2+ Fix from $1,9502018-07-09 HIGH 7.5 CVE-2018-11040 Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-dom… Spring Framework 4.3.18 / 5.0.7+ Fix from $1,9502018-06-25 MEDIUM 5.9 CVE-2018-11039 Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the… Spring Framework 4.3.18 / 5.0.7+ Fix from $1,6002018-06-25 CRITICAL 10.0 CVE-2018-6968EPSS 5% The VMware AirWatch Agent for Android prior to 8.2 and AirWatch Agent for Windows Mobile prior to 6.5.2 contain a remote code execution vulnerability… Airwatch Agent 6.5.2 / 8.2+ Fix from $2,3002018-06-11 HIGH 8.1 CVE-2018-6961 KEVEPSS 86% VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection vulnerability in the local web UI component. This component i… Nsx Sd Wan By Velocloud 3.1.0+ Fix from $1,9502018-06-11 HIGH 7.8 CVE-2018-6964 VMware Horizon Client for Linux (4.x before 4.8.0 and prior) contains a local privilege escalation vulnerability due to insecure usage of SUID binary… Horizon Client 4.8.0+ Fix from $1,9502018-05-29 HIGH 7.8 CVE-2018-6962 VMware Fusion (10.x before 10.1.2) contains a signature bypass vulnerability which may lead to a local privilege escalation. Fusion 10.1.2+ Fix from $1,9502018-05-22 MEDIUM 5.5 CVE-2018-6963 VMware Workstation (14.x before 14.1.2) and Fusion (10.x before 10.1.2) contain multiple denial-of-service vulnerabilities that occur due to NULL poi… Fusion 10.1.2 / 14.1.2+ Fix from $1,6002018-05-22 HIGH 8.8 CVE-2018-1258 Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method secur… Spring Framework 7.0.0.1 / 8.3+ Fix from $1,9502018-05-11 HIGH 7.5 CVE-2018-1259EPSS 5% Spring Data Commons, versions 1.13 prior to 1.13.12 and 2.0 prior to 2.0.7, used in combination with XMLBeam 1.4.14 or earlier versions, contains a p… Spring Data Rest after 3.0.6 Fix from $1,9502018-05-11