vmware Vulnerability Advisory Catalog

Total 863 security vulnerabilities recorded for vmware software and firmware.

← Back to All Vendors
CVE-2020-5414 MEDIUM
Component: tanzu_application_service_for_virtual_machines

VMware Tanzu Application Service for VMs (2.7.x versions prior to 2.7.19, 2.8.x versions prior to 2.8.13, and 2.9.x versions prior to 2.9.7) contains ...

📅 2020-07-31
CVSS 5.7 Dossier →
CVE-2020-5413 CRITICAL
Component: spring_integration

Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default op...

📅 2020-07-31
CVSS 9.8 Dossier →
Component: gemfire

VMware GemFire versions prior to 9.10.0, 9.9.2, 9.8.7, and 9.7.6, and VMware Tanzu GemFire for VMs versions prior to 1.11.1 and 1.10.2, when deployed ...

📅 2020-07-31
CVSS 8.8 Dossier →
CVE-2019-11286 CRITICAL
Component: gemfire

VMware GemFire versions prior to 9.10.0, 9.9.1, 9.8.5, and 9.7.5, and VMware Tanzu GemFire for VMs versions prior to 1.11.0, 1.10.1, 1.9.2, and 1.8.2,...

📅 2020-07-31
CVSS 9.1 Dossier →
Component: fusion

VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4...

📅 2020-07-10
CVSS 7.8 Dossier →
Component: velocloud_orchestrator

The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Veloc...

📅 2020-07-08
CVSS 8.8 Dossier →
CVE-2020-3971 MEDIUM
Component: cloud_foundation

VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) c...

📅 2020-06-25
CVSS 5.5 Dossier →
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-25
CVSS 3.8 Dossier →
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-25
CVSS 8.2 Dossier →
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-25
CVSS 7.5 Dossier →
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-25
CVSS 7.5 Dossier →
CVE-2020-3965 MEDIUM
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-25
CVSS 5.5 Dossier →
CVE-2020-3964 MEDIUM
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-25
CVSS 4.7 Dossier →
CVE-2020-3963 MEDIUM
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-25
CVSS 5.5 Dossier →
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-24
CVSS 8.2 Dossier →
Component: cloud_foundation

VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5....

📅 2020-06-24
CVSS 7.8 Dossier →
Component: tools

VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation...

📅 2020-06-19
CVSS 3.3 Dossier →
Component: horizon_client

VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loa...

📅 2020-06-15
CVSS 7.8 Dossier →
Component: spring_cloud_config

Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrar...

📅 2020-06-02
CVSS 7.5 Dossier →
Component: fusion

VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x bef...

📅 2020-05-29
CVSS 3.3 Dossier →
CVE-2020-3958 MEDIUM
Component: fusion

VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x bef...

📅 2020-05-29
CVSS 5.5 Dossier →
Component: fusion

VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local p...

📅 2020-05-29
CVSS 7.0 Dossier →
Component: vcloud_director

VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input ...

📅 2020-05-20
CVSS 8.8 Dossier →
CVE-2020-3955 CRITICAL
Component: esxi

ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewin...

📅 2020-04-29
CVSS 9.3 Dossier →
Page 19 of 36 (863 Total Records)