Browse CVEs

HIGH 7.5 CVE-2013-3657 Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service v… Esx Mitigation only Fix from $1,9502013-09-10 MEDIUM 6.9 CVE-2013-1662 vmware-mount in VMware Workstation 8.x and 9.x and VMware Player 4.x and 5.x, on systems based on Debian GNU/Linux, allows host OS users to gain host… Workstation Mitigation only Fix from $1,6002013-08-24 HIGH 7.5 CVE-2013-3520EPSS 56% VMware vCenter Chargeback Manager (aka CBM) before 2.5.1 does not proper handle uploads, which allows remote attackers to execute arbitrary code via … Vcenter Chargeback Manager after 2.5.0 Fix from $1,9502013-06-17 HIGH 9.0 CVE-2013-3079 VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to execute arbitrary programs with root privileges by le… Vcenter Server Appliance Mitigation only Fix from $1,9502013-05-01 HIGH 9.0 CVE-2013-3080 VMware vCenter Server Appliance (vCSA) 5.1 before Update 1 allows remote authenticated users to create or overwrite arbitrary files, and consequently… Vcenter Server Appliance Mitigation only Fix from $1,9502013-05-01 HIGH 7.8 CVE-2012-6326 VMware vCenter Server 4.1 before Update 3 and 5.0 before Update 2, and vCSA 5.0 before Update 2, allows remote attackers to cause a denial of service… Vcenter Server Patch available Fix from $1,9502013-02-22 HIGH 7.6 CVE-2013-1659 VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 d… Vcenter Server Mitigation only Fix from $1,9502013-02-22 HIGH 10.0 CVE-2013-1405 VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 bef… Vcenter Server Mitigation only Fix from $1,9502013-02-15 HIGH 7.2 CVE-2013-1406 The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows,… Workstation Mitigation only Fix from $1,9502013-02-11 MEDIUM 5.0 CVE-2012-5978 Multiple directory traversal vulnerabilities in the (1) View Connection Server and (2) View Security Server in VMware View 4.x before 4.6.2 and 5.x b… View Mitigation only Fix from $1,6002012-12-19 MEDIUM 5.1 CVE-2011-2731 Race condition in the RunAsManager mechanism in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 stores the Authentication obj… Springsource Spring Security after 3.0.5 Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-5055 DaoAuthenticationProvider in VMware SpringSource Spring Security before 2.0.8, 3.0.x before 3.0.8, and 3.1.x before 3.1.3 does not check the password… Springsource Spring Security after 2.0.6 Fix from $1,6002012-12-05 MEDIUM 5.0 CVE-2012-5703 The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1)… Esx Mitigation only Fix from $1,6002012-11-20 HIGH 9.3 CVE-2012-3569EPSS 48% Format string vulnerability in VMware OVF Tool 2.1 on Windows, as used in VMware Workstation 8.x before 8.0.5, VMware Player 4.x before 4.0.5, and ot… Ovf Tool Patch available Fix from $1,9502012-11-14 HIGH 8.3 CVE-2012-5458 VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows use weak permissions for unspecified process threads, which allows … Player Mitigation only Fix from $1,9502012-11-14 HIGH 7.9 CVE-2012-5459 Untrusted search path vulnerability in VMware Workstation 8.x before 8.0.5 and VMware Player 4.x before 4.0.5 on Windows allows host OS users to gain… Player Patch available Fix from $1,9502012-11-14 MEDIUM 6.9 CVE-2012-4897 Untrusted search path vulnerability in the installer in VMware Movie Decoder before 9.0 allows local users to gain privileges via a Trojan horse exec… Movie Decoder after 7.1.2 Fix from $1,6002012-10-05 MEDIUM 5.0 CVE-2012-5051 Directory traversal vulnerability in VMware CapacityIQ 1.5.x allows remote attackers to read arbitrary files via unspecified vectors. Capacityiq Mitigation only Fix from $1,6002012-10-05 MEDIUM 6.9 CVE-2012-1666 Untrusted search path vulnerability in VMware Tools in VMware Workstation before 8.0.4, VMware Player before 4.0.4, VMware Fusion before 4.1.2, VMwar… Workstation after 8.0.3 Fix from $1,6002012-09-08 HIGH 9.3 CVE-2012-3288 VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware… Workstation Mitigation only Fix from $1,9502012-06-14 HIGH 7.8 CVE-2012-3289 VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attacke… Workstation Mitigation only Fix from $1,9502012-06-14 HIGH 7.2 CVE-2012-2752 Untrusted search path vulnerability in VMware vMA 4.x and 5.x before 5.0.0.2 allows local users to gain privileges via a Trojan horse DLL in the curr… Vma Mitigation only Fix from $1,9502012-06-01 CRITICAL 9.9 CVE-2012-1516 The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a … Esx Mitigation only Fix from $2,3002012-05-04 HIGH 9.0 CVE-2012-1517 The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memor… Esx Mitigation only Fix from $1,9502012-05-04 HIGH 9.0 CVE-2012-2449 VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5… Workstation Mitigation only Fix from $1,9502012-05-04 HIGH 9.0 CVE-2012-2450 VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 … Workstation Mitigation only Fix from $1,9502012-05-04 HIGH 7.5 CVE-2012-2448 VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) … Esxi Mitigation only Fix from $1,9502012-05-04 HIGH 8.3 CVE-2012-1518 VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 … Workstation Mitigation only Fix from $1,9502012-04-17 HIGH 8.3 CVE-2012-1515 VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain gues… Esxi Mitigation only Fix from $1,9502012-04-02 HIGH 7.2 CVE-2012-1510 Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS use… Esx after 4.6.0 Fix from $1,9502012-03-16