Vendor
VMware
241 known vulnerabilities.
Products
Workstation 51
Fusion 42
ESXi 25
Cloud Foundation 17
Telco Cloud Platform 17
VMware Aria Operations 15
VMware ESXi 14
Telco Cloud Infrastructure 14
Workstation Pro/Player 12
SALT 11
Horizon View Client for Windows 9
VMware Telco Cloud Platform 8
Avi Load Balancer 8
Spring Framework 7
VMware Workstation 7
VMware Fusion 7
vSphere Foundation 7
vCenter Server 6
VMware vCenter Server (vCenter Server) 5
VMware Cloud Foundation (vCenter Server) 5
Fusion Pro / Fusion 5
VMware Cloud Foundation 5
Spring AI 5
VMware tools 4
VMware Telco Cloud Infrastructure 4
VMware Aria Operations for Logs 4
VMware vCenter Server 4
vCenter 4
VCF operations 4
Vmware Aria Automation 3
VMware NSX 3
Airwatch Console 3
vRealize Automation 3
Workstation and Fusion 3
vRealize Operations for Horizon Adapter 3
VMware ESXi, Workstation, and Fusion 3
ESX 3
NSX 2
VMware AirWatch Console (AWC) 2
VMware Avi Load Balancer 2
241 results · Feed
-
Unscored —
The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 d…
-
Unscored —
VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files load…
-
Unscored —
VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds…
-
Unscored —
VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vuln…
-
Unscored —
VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds…
-
Unscored —
VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds…
-
Unscored —
VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP n…
-
Unscored —
VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in V…
-
Unscored —
The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere…
-
Unscored —
VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which …
-
Unscored —
VMware AirWatch Launcher for Android prior to 3.2.2 contains a vulnerability that could allow an escalation of privileg…
-
Unscored —
VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a…
-
Unscored —
VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add m…
-
Unscored —
VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch…
-
Unscored —
VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.…
-
Unscored —
VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XS…
-
Unscored —
VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to…
-
Unscored —
VMware Tools prior to 10.0.9 contains multiple file system races in libDeployPkg, related to the use of hard-coded path…
-
Unscored —
VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service …
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds r…
-
Unscored —
VMware Unified Access Gateway (2.5.x, 2.7.x, 2.8.x prior to 2.8.1) and Horizon View (7.x prior to 7.1.0, 6.x prior to 6…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds w…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple heap buffer-ove…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain a heap buffer-overflow v…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain multiple out-of-bounds r…
-
Unscored —
The drag-and-drop (DnD) function in VMware Workstation 12.x before version 12.5.4 and Fusion 8.x before version 8.5.5 h…
-
Unscored —
VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vuln…
-
Unscored —
VMware Workstation Pro/Player 12.x before 12.5.3 contains a DLL loading vulnerability that occurs due to the "vmware-vm…
-
Unscored —
VMware Workstation Pro/Player 12.x before 12.5.3 contains a security vulnerability that exists in the SVGA driver. An a…
-
Unscored —CVE-2017-4905 Public exploit
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESX…
-
Unscored —
The XHCI controller in VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6…
-
Unscored —
VMware ESXi 6.5 without patch ESXi650-201703410-SG and 5.5 without patch ESXi550-201703401-SG; Workstation Pro / Player…
-
Unscored —
VMware ESXi 6.5 without patch ESXi650-201703410-SG, 6.0 U3 without patch ESXi600-201703401-SG, 6.0 U2 without patch ESX…
-
Unscored —
VMware Workstation Pro/Player 12.x before 12.5.3 contains a NULL pointer dereference vulnerability that exists in the S…
-
Unscored —
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using rev…
-
Unscored —CVE-2017-4914 Public exploit
VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of t…
-
Unscored —
VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attack…
-
Unscored —CVE-2017-4916 Public exploit
VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Succe…
-
Unscored —CVE-2017-4915 Public exploit
VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration fi…
-
Unscored —
Airwatch Agent for Android contains a vulnerability that may allow a device to bypass root detection. Successful exploi…