Vmware

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-7460 1Vmware 1Vrealize Automation May 6, 2026 Dec 29, 2016 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML docum...Show more The Single Sign-On feature in VMware vCenter Server 5.5 before U3e and 6.0 before U2a and vRealize Automation 6.x before 6.2.5 allows remote attackers to read arbitrary files or cause a denial of service via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.Show less
CVE-2016-7459 1Vmware 1Vcenter Server May 6, 2026 Dec 29, 2016 N/A· v4 7.7 HIGH· v3 4.0 MEDIUM· v2 VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an ext...Show more VMware vCenter Server 5.5 before U3e and 6.0 before U2a allows remote authenticated users to read arbitrary files via a (1) Log Browser, (2) Distributed Switch setup, or (3) Content Library XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.Show less
CVE-2016-7458 1Vmware 1Vsphere Client May 6, 2026 Dec 29, 2016 N/A· v4 5.8 MEDIUM· v3 5.0 MEDIUM· v2 VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instances to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity...Show more VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instances to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.Show less
CVE-2016-7457 1Vmware 1Vrealize Operations May 6, 2026 Dec 29, 2016 N/A· v4 10.0 CRITICAL· v3 8.0 HIGH· v2 VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors.
CVE-2016-7456 1Vmware 1Vsphere Data Protection May 6, 2026 Dec 29, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 VMware vSphere Data Protection (VDP) 5.5.x though 6.1.x has an SSH private key with a publicly known password, which makes it easier for remote attackers to obtain login access via an SSH session.
CVE-2016-7087 1Vmware 1Horizon View May 6, 2026 Dec 29, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in the Connection Server in VMware Horizon View 5.x before 5.3.7, 6.x before 6.2.3, and 7.x before 7.0.1 allows remote attackers to obtain sensitive information via unspecified vectors.
CVE-2016-7086 1Vmware 2Workstation Player Workstation Pro May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directo...Show more The installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse setup64.exe file in the installation directory.Show less
CVE-2016-7085 1Vmware 2Workstation Player Workstation Pro May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL i...Show more Untrusted search path vulnerability in the installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows allows local users to gain privileges via a Trojan horse DLL in an unspecified directory.Show less
CVE-2016-7084 1Vmware 2Workstation Player Workstation Pro May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on...Show more tpview.dll in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allows guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via a JPEG 2000 image.Show less
CVE-2016-7083 1Vmware 2Workstation Player Workstation Pro May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 5.9 MEDIUM· v2 VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or...Show more VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via TrueType fonts embedded in EMFSPOOL.Show less
CVE-2016-7082 1Vmware 2Workstation Player Workstation Pro May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 5.9 MEDIUM· v2 VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or...Show more VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS or cause a denial of service (host OS memory corruption) via an EMF file.Show less
CVE-2016-7081 1Vmware 2Workstation Player Workstation Pro May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 6.9 MEDIUM· v2 Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to e...Show more Multiple heap-based buffer overflows in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x before 12.5.0 on Windows, when Cortado ThinPrint virtual printing is enabled, allow guest OS users to execute arbitrary code on the host OS via unspecified vectors.Show less
CVE-2016-7080 1Vmware 1Tools May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vuln...Show more The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7079.Show less
CVE-2016-7079 1Vmware 1Tools May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vuln...Show more The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7080.Show less
CVE-2016-5334 1Vmware 2Identity Manager Vrealize Automation May 6, 2026 Dec 29, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors.
CVE-2016-5329 1Vmware 1Fusion May 6, 2026 Dec 29, 2016 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.
CVE-2016-5328 1Vmware 1Tools May 6, 2026 Dec 29, 2016 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vector...Show more VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.Show less
CVE-2016-5336 1Vmware 1Vrealize Automation May 6, 2026 Aug 31, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-5335 1Vmware 2Identity Manager Vrealize Automation May 6, 2026 Aug 31, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors.
CVE-2016-5333 1Vmware 1Photon Os May 6, 2026 Aug 31, 2016 N/A· v4 9.8 CRITICAL· v3 9.3 HIGH· v2 VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.

Previous 1...333435...48 Next