vmware

950 tracked vulnerabilities.

CVE-2018-6978 MEDIUM
vRealize Operations 6.6.0-6.6.1.11286876 - Local Privilege Escalation via Support Scripts
Dec 18, 2018
CVSS 6.7
EPSS 0.00
CVE-2018-6982 MEDIUM
VMware ESXi - Information Disclosure via vmxnet3 Uninitialized Stack Memory
Dec 04, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-6981 HIGH
VMware Workstation 14.0.0-14.1.3 & Fusion 10.0.0-10.1.3 - Uninitialized Memory Usage in vmxnet3
Dec 04, 2018
CVSS 8.8
EPSS 0.07
CVE-2018-6983 HIGH
VMware Workstation 14.0.0-14.1.5 and Fusion 10.0.0-10.1.5 - Integer Overflow in Virtual Network Devices
Nov 27, 2018
CVSS 8.8
EPSS 0.00
CVE-2018-11077 MEDIUM
Dell EMC Avamar Server 7.2.0-7.5.1 and 18.1 - Authenticated OS Command Injection via getlogs Utility
Nov 26, 2018
CVSS 6.7
EPSS 0.00
CVE-2018-11076 MEDIUM
Dell EMC Avamar Server <7.4.1 - Info Disclosure
Nov 26, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-11067 MEDIUM
Dell EMC Avamar and Integrated Data Protection Appliance - Unauthenticated Open Redirect via Malicious Link
Nov 26, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-11066 CRITICAL
Dell EMC Avamar Server 7.2.0-18.1 and IDPA 2.0-2.2 - Unauthenticated Remote Code Execution
Nov 26, 2018
CVSS 9.8
EPSS 0.41
CVE-2018-6980 HIGH
VMware vRealize Log Insight 4.6-4.6.1 and 4.7 < 4.7.1 - Incorrect Authorization in User Registration Method
Nov 13, 2018
CVSS 7.2
EPSS 0.00
CVE-2018-15756 HIGH
Spring Framework 4.2.0-4.3.19 and 5.0.0-5.0.9 - Denial of Service via Malicious Range Requests
Oct 18, 2018
CVSS 7.5
EPSS 0.20
CVE-2018-6974 HIGH
VMware Workstation 14.0-14.1.2 and Fusion 10.0-10.1.2 - Out-of-bounds Read in SVGA Device
Oct 16, 2018
CVSS 8.8
EPSS 0.00
CVE-2018-6977 MEDIUM
VMware ESXi 6.0-6.7, Workstation 14.0.0-14.1.5, Fusion 10.0.0-10.1.5 - DoS via 3D-Rendering Shader Infinite Loop
Oct 09, 2018
CVSS 6.5
EPSS 0.00
CVE-2018-6979 HIGH
VMware AirWatch Console 9.1.0.0-9.1.5.6 - SAML Authentication Bypass via Device Enrollment
Oct 05, 2018
CVSS 7.4
EPSS 0.00
CVE-2018-11087 MEDIUM
Spring AMQP 1.0.0-1.7.9 and 2.0.0-2.0.5 - Improper Certificate Validation
Sep 14, 2018
CVSS 5.9
EPSS 0.01
CVE-2018-6976 MEDIUM
VMware Workspace ONE < 4.14 - Sensitive Data Exposure via Unencrypted SQLite Database
Sep 11, 2018
CVSS 5.3
EPSS 0.00
CVE-2018-6975 MEDIUM
VMware Intelligent Hub < 5.8.1 - Unprotected Sensitive Data Exposure via Missing Encryption
Sep 11, 2018
CVSS 5.5
EPSS 0.00
CVE-2018-6973 HIGH
VMware Fusion 10.0.0-10.1.2 and Workstation 14.0.0-14.1.2 - Out-of-bounds Write in e1000 Device
Aug 15, 2018
CVSS 8.8
EPSS 0.00
CVE-2018-6970 MEDIUM
VMware Horizon Client 4.0.0-4.8.0 and Horizon View 6.0.0-6.2.6 - Out-of-bounds Read in Message Framework Library
Aug 13, 2018
CVSS 6.5
EPSS 0.01
CVE-2018-6972 MEDIUM
VMware Workstation 14.0-14.1.1 and Fusion 10.0-10.1.1 - Denial of Service via RPC Handler NULL Pointer Dereference
Jul 25, 2018
CVSS 6.5
EPSS 0.03
CVE-2018-6971 HIGH
VMware Horizon View Agents 7.0.0-7.5.0 - Local Information Disclosure via Insecure Logging
Jul 25, 2018
CVSS 7.8
EPSS 0.00
CVE-2018-6969 HIGH
VMware Tools < 10.3.0 - Out-of-bounds Read in HGFS
Jul 13, 2018
CVSS 7.0
EPSS 0.00
CVE-2018-6967 HIGH
VMware Fusion 10.0-10.1.1 and Workstation 14.0-14.1.1 - Out-of-bounds Read in Shader Translator
Jul 09, 2018
CVSS 8.1
EPSS 0.00
CVE-2018-6966 HIGH
VMware Fusion 10.0-10.1.1 and Workstation 14.0-14.1.1 - Out-of-bounds Read in Shader Translator
Jul 09, 2018
CVSS 8.1
EPSS 0.00
CVE-2018-6965 HIGH
VMware Workstation 14.0-14.1.1 and Fusion 10.0-10.1.1 - Out-of-bounds Read in Shader Translator
Jul 09, 2018
CVSS 8.1
EPSS 0.00
CVE-2018-11040 HIGH
Spring Framework <5.0.7 & <4.3.18 - XSS
Jun 25, 2018
CVSS 7.5
EPSS 0.07
Products
workstation 213 esxi 139 cloud_foundation 132 fusion 131 player 89 esx 86 vcenter_server 79 server 58 spring_framework 48 ace 44 identity_manager 28 workstation_pro 27 workstation_player 26 horizon_client 25 spring_security 24 Workstation 23 tools 22 vrealize_suite_lifecycle_manager 21 vrealize_automation 20 spring_boot 18 vrealize_operations 18 ESXi 16 vmware_workstation 15 vrealize_log_insight 15 workspace_one_access 15 horizon_view 14 spring_ai 14 vcenter_server_appliance 14 Fusion 13 aria_operations 13
Quick Filters
Critical CVEs With Exploits In CISA KEV