Browse CVEs

MEDIUM 6.8 CVE-2012-1514 Cross-site request forgery (CSRF) vulnerability in VMware vShield Manager (vSM) 1.0.1 before Update 2 and 4.1.0 before Update 2 allows remote attacke… Vshield Manager after 4.1 Fix from $1,6002012-03-16 HIGH 7.2 CVE-2012-1508 The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS… Esx after 4.6.0 Fix from $1,9502012-03-16 HIGH 7.2 CVE-2012-1509 Buffer overflow in the XPDM display driver in VMware View before 4.6.1 allows guest OS users to gain guest OS privileges via unspecified vectors. View after 4.6.0 Fix from $1,9502012-03-16 MEDIUM 6.4 CVE-2012-1472 VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary f… Vcenter Chargeback Manager after 2.0.0 Fix from $1,6002012-03-13 MEDIUM 5.0 CVE-2011-4404EPSS 60% The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before U… Vcenter Update Manager Patch available Fix from $1,6002011-11-19 HIGH 9.3 CVE-2011-3868EPSS 6% Buffer overflow in VMware Workstation 7.x before 7.1.5, VMware Player 3.x before 3.1.5, VMware Fusion 3.1.x before 3.1.3, and VMware AMS allows remot… Workstation Patch available Fix from $1,9502011-10-07 MEDIUM 6.8 CVE-2011-2894EPSS 9% Spring Framework 3.0.0 through 3.0.5, Spring Security 3.0.0 through 3.0.5 and 2.0.0 through 2.0.6, and possibly other versions deserialize objects fr… Spring Framework after 3.0.5 Fix from $1,6002011-10-04 MEDIUM 5.0 CVE-2011-0527 VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords during J… Tc Server Mitigation only Fix from $1,6002011-08-15 HIGH 9.3 CVE-2011-2217EPSS 42% Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka… Virtual Infrastructure Client Mitigation only Fix from $1,9502011-06-06 MEDIUM 6.3 CVE-2011-2145 mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.… Esx Patch available Fix from $1,6002011-06-06 MEDIUM 6.9 CVE-2011-1787 Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4… Workstation Patch available Fix from $1,6002011-06-06 MEDIUM 5.0 CVE-2011-1789 The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x … Esx Patch available Fix from $1,6002011-05-09 HIGH 7.8 CVE-2011-1785 VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic. Esx Mitigation only Fix from $1,9502011-05-03 MEDIUM 5.0 CVE-2011-1786 lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware … Esx Mitigation only Fix from $1,6002011-05-03 MEDIUM 6.9 CVE-2011-1126 VMware vmrun, as used in VIX API 1.x before 1.10.3 and VMware Workstation 6.5.x and 7.x before 7.1.4 build 385536 on Linux, might allow local users t… Vix Api Mitigation only Fix from $1,6002011-04-04 MEDIUM 5.0 CVE-2010-3609EPSS 17% The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (S… Esx Mitigation only Fix from $1,6002011-03-11 HIGH 9.3 CVE-2010-4573 The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows … Esxi Mitigation only Fix from $1,9502010-12-22 HIGH 9.3 CVE-2010-4294EPSS 6% The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VM… Movie Decoder after 6.5.5 Fix from $1,9502010-12-06 HIGH 7.2 CVE-2010-4296 vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.… Workstation Mitigation only Fix from $1,9502010-12-06 HIGH 7.2 CVE-2010-4297EPSS 5% The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x be… Workstation Mitigation only Fix from $1,9502010-12-06 MEDIUM 6.9 CVE-2010-4295 Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2… Workstation Mitigation only Fix from $1,6002010-12-06 MEDIUM 5.0 CVE-2010-3700 VMware SpringSource Spring Security 2.x before 2.0.6 and 3.x before 3.0.4, and Acegi Security 1.0.0 through 1.0.7, as used in IBM WebSphere Applicati… Springsource Spring Security Mitigation only Fix from $1,6002010-10-29 CRITICAL 9.8 CVE-2010-0211EPSS 28% The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows re… Esxi 10.6.5+ Fix from $2,3002010-07-28 MEDIUM 6.0 CVE-2010-2667 Multiple unspecified vulnerabilities in the Virtual Appliance Management Infrastructure (VAMI) in VMware Studio 2.0 allow remote authenticated users … Studio Patch available Fix from $1,6002010-07-22 MEDIUM 6.8 CVE-2010-1454 com.springsource.tcserver.serviceability.rmi.JmxSocketListener in VMware SpringSource tc Server Runtime 6.0.19 and 6.0.20 before 6.0.20.D, and 6.0.25… Tc Server Mitigation only Fix from $1,6002010-05-19 MEDIUM 5.0 CVE-2009-4811 VMware Authentication Daemon 1.0 in vmware-authd.exe in the VMware Authorization Service in VMware Workstation 7.0 before 7.0.1 build 227600 and 6.5.… Ace Patch available Fix from $1,6002010-04-27 HIGH 10.0 CVE-2009-3732EPSS 16% Format string vulnerability in vmware-vmrc.exe build 158248 in VMware Remote Console (aka VMrc) allows remote attackers to execute arbitrary code via… Ace 2.5.4 / 6.5.4+ Fix from $1,9502010-04-12 HIGH 9.3 CVE-2009-1564EPSS 6% Heap-based buffer overflow in vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in… Movie Decoder Mitigation only Fix from $1,9502010-04-12 HIGH 9.3 CVE-2009-1565EPSS 6% vmnc.dll in the VMnc media codec in VMware Movie Decoder before 6.5.4 Build 246459 on Windows, and the movie decoder in VMware Workstation 6.5.x befo… Movie Decoder Patch available Fix from $1,9502010-04-12 HIGH 8.5 CVE-2010-1141 VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 buil… Workstation Patch available Fix from $1,9502010-04-12