vmware Vulnerability Advisory Catalog

Total 863 security vulnerabilities recorded for vmware software and firmware.

← Back to All Vendors
Component: ixgben

Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user...

📅 2023-02-16
CVSS 3.3 Dossier →
Component: ixgben

Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated use...

📅 2023-02-16
CVSS 4.4 Dossier →
Component: workstation

VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit...

📅 2023-02-03
CVSS 8.4 Dossier →
Component: vrealize_operations

VMware vRealize Operations (vROps) contains a CSRF bypass vulnerability. A malicious user could execute actions on the vROps platform on behalf of the...

📅 2023-02-01
CVSS 8.8 Dossier →
Component: vrealize_log_insight

VMware vRealize Log Insight contains an Information Disclosure Vulnerability. A malicious actor can remotely collect sensitive session and application...

📅 2023-01-26
CVSS 5.3 Dossier →
Component: vrealize_log_insight

vRealize Log Insight contains a deserialization vulnerability. An unauthenticated malicious actor can remotely trigger the deserialization of untruste...

📅 2023-01-26
CVSS 7.5 Dossier →
CVE-2022-31706 CRITICAL
Component: vrealize_log_insight

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system ...

📅 2023-01-26
CVSS 9.8 Dossier →
CVE-2022-31704 CRITICAL
Component: vrealize_log_insight

The vRealize Log Insight contains a broken access control vulnerability. An unauthenticated malicious actor can remotely inject code into sensitive fi...

📅 2023-01-26
CVSS 9.8 Dossier →
Component: vrealize_operations

vRealize Operations (vROps) contains a broken access control vulnerability. VMware has evaluated the severity of this issue to be in the Moderate seve...

📅 2022-12-16
CVSS 4.9 Dossier →
Component: vrealize_operations

vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important seve...

📅 2022-12-16
CVSS 7.2 Dossier →
Component: workstation

VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local a...

📅 2022-12-14
CVSS 8.2 Dossier →
Component: vrealize_log_insight

The vRealize Log Insight contains a Directory Traversal Vulnerability. An unauthenticated, malicious actor can inject files into the operating system ...

📅 2022-12-14
CVSS 7.5 Dossier →
CVE-2022-31702 CRITICAL
Component: vrealize_network_insight

vRealize Network Insight (vRNI) contains a command injection vulnerability present in the vRNI REST API. A malicious actor with network access to the ...

📅 2022-12-14
CVSS 9.8 Dossier →
Component: access

VMware Workspace ONE Access and Identity Manager contain a broken authentication vulnerability. VMware has evaluated the severity of this issue to be ...

📅 2022-12-14
CVSS 5.3 Dossier →
Component: access

VMware Workspace ONE Access and Identity Manager contain an authenticated remote code execution vulnerability. VMware has evaluated the severity of th...

📅 2022-12-14
CVSS 7.2 Dossier →
Component: cloud_foundation

VMware ESXi contains a heap-overflow vulnerability. A malicious local actor with restricted privileges within a sandbox process may exploit this issue...

📅 2022-12-13
CVSS 3.3 Dossier →
Component: cloud_foundation

The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCe...

📅 2022-12-13
CVSS 5.3 Dossier →
Component: vcenter_server

The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A malicious actor with access to a...

📅 2022-12-13
CVSS 5.5 Dossier →
Component: cloud_foundation

VMware ESXi contains a memory corruption vulnerability that exists in the way it handles a network socket. A malicious actor with local access to ESXi...

📅 2022-12-13
CVSS 8.8 Dossier →
Component: open-vm-tools

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can bypass intended access restrictions on mounting shares via a symlink attac...

📅 2022-11-23
CVSS 7.0 Dossier →
CVE-2009-1142 MEDIUM
Component: open_vm_tools

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wra...

📅 2022-11-23
CVSS 6.7 Dossier →
CVE-2022-38652 CRITICAL
Component: hyperic_agent

A remote insecure deserialization vulnerability exixsts in VMWare Hyperic Agent 5.8.6. Exploitation of this vulnerability enables a malicious authenti...

📅 2022-11-12
CVSS 9.9 Dossier →
CVE-2022-38651 CRITICAL
Component: hyperic_server

A security filter misconfiguration exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a malicious party to bypass some ...

📅 2022-11-12
CVSS 9.8 Dossier →
CVE-2022-38650 CRITICAL
Component: hyperic_server

A remote unauthenticated insecure deserialization vulnerability exists in VMware Hyperic Server 5.8.6. Exploitation of this vulnerability enables a ma...

📅 2022-11-12
CVSS 10.0 Dossier →
Page 10 of 36 (863 Total Records)