Vmware

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-7080 1Vmware 1Tools May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vuln...Show more The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7079.Show less
CVE-2016-7079 1Vmware 1Tools May 6, 2026 Dec 29, 2016 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vuln...Show more The graphic acceleration functions in VMware Tools 9.x and 10.x before 10.0.9 on OS X allow local users to gain privileges or cause a denial of service (NULL pointer dereference) via unspecified vectors, a different vulnerability than CVE-2016-7080.Show less
CVE-2016-5334 1Vmware 2Identity Manager Vrealize Automation May 6, 2026 Dec 29, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors.
CVE-2016-5329 1Vmware 1Fusion May 6, 2026 Dec 29, 2016 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 VMware Fusion 8.x before 8.5 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.
CVE-2016-5328 1Vmware 1Tools May 6, 2026 Dec 29, 2016 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vector...Show more VMware Tools 9.x and 10.x before 10.1.0 on OS X, when System Integrity Protection (SIP) is enabled, allows local users to determine kernel memory addresses and bypass the kASLR protection mechanism via unspecified vectors.Show less
CVE-2016-5336 1Vmware 1Vrealize Automation May 6, 2026 Aug 31, 2016 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-5335 1Vmware 2Identity Manager Vrealize Automation May 6, 2026 Aug 31, 2016 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 VMware Identity Manager 2.x before 2.7 and vRealize Automation 7.0.x before 7.1 allow local users to obtain root access via unspecified vectors.
CVE-2016-5333 1Vmware 1Photon Os May 6, 2026 Aug 31, 2016 N/A· v4 9.8 CRITICAL· v3 9.3 HIGH· v2 VMware Photos OS OVA 1.0 before 2016-08-14 has a default SSH public key in an authorized_keys file, which allows remote attackers to obtain SSH access by leveraging knowledge of the private key.
CVE-2016-5332 1Vmware 1Vrealize Log Insight May 6, 2026 Aug 31, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.6.0 allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2016-5331 1Vmware 2Esxi Vcenter Server May 6, 2026 Aug 8, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 CRLF injection vulnerability in VMware vCenter Server 6.0 before U2 and ESXi 6.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
CVE-2016-5330 1Vmware 5Esxi FusionTools+2 more May 6, 2026 Aug 8, 2016 N/A· v4 7.8 HIGH· v3 4.4 MEDIUM· v2 Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12....Show more Untrusted search path vulnerability in the HGFS (aka Shared Folders) feature in VMware Tools 10.0.5 in VMware ESXi 5.0 through 6.0, VMware Workstation Pro 12.1.x before 12.1.1, VMware Workstation Player 12.1.x before 12.1.1, and VMware Fusion 8.1.x before 8.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory.Show less
CVE-2015-3192 3Fedoraproject Pivotal SoftwareVmware 3Fedora Spring FrameworkSpring Framework May 6, 2026 Jul 12, 2016 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumptio...Show more Pivotal Spring Framework before 3.2.14 and 4.x before 4.1.7 do not properly process inline DTD declarations when DTD is not entirely disabled, which allows remote attackers to cause a denial of service (memory consumption and out-of-memory errors) via a crafted XML file.Show less
CVE-2016-2082 1Vmware 1Vrealize Log Insight May 6, 2026 Jul 3, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
CVE-2016-2081 1Vmware 1Vrealize Log Insight May 6, 2026 Jul 3, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in VMware vRealize Log Insight 2.x and 3.x before 3.3.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2016-2079 1Vmware 2Nsx Edge Vcloud Networking And Security Edge May 6, 2026 Jul 3, 2016 N/A· v4 5.9 MEDIUM· v3 4.3 MEDIUM· v2 VMware NSX Edge 6.1 before 6.1.7 and 6.2 before 6.2.3 and vCNS Edge 5.5 before 5.5.4.3, when the SSL-VPN feature is configured, allow remote attackers to obtain sensitive information via unspecified vectors.
CVE-2015-6931 1Vmware 1Vcenter Server May 6, 2026 Jul 3, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted...Show more Cross-site scripting (XSS) vulnerability in the vSphere Web Client in VMware vCenter Server 5.0 before U3g, 5.1 before U3d, and 5.5 before U2d allows remote attackers to inject arbitrary web script or HTML via a crafted URL.Show less
CVE-2016-2078 1Vmware 1Vcenter Server May 6, 2026 Jun 8, 2016 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or...Show more Cross-site scripting (XSS) vulnerability in the Web Client in VMware vCenter Server 5.1 before update 3d, 5.5 before update 3d, and 6.0 before update 2 on Windows allows remote attackers to inject arbitrary web script or HTML via the flashvars parameter.Show less
CVE-2016-2077 1Vmware 2Player Workstation May 6, 2026 May 18, 2016 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 VMware Workstation 11.x before 11.1.3 and VMware Player 7.x before 7.1.3 on Windows incorrectly access an executable file, which allows host OS users to gain host OS privileges via unspecified vectors.
CVE-2016-2076 1Vmware 3Vcenter Server Vcloud Automation Identity ApplianceVcloud Director May 6, 2026 Apr 15, 2016 N/A· v4 7.6 HIGH· v3 6.8 MEDIUM· v2 Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which a...Show more Client Integration Plugin (CIP) in VMware vCenter Server 5.5 U3a, U3b, and U3c and 6.0 before U2; vCloud Director 5.5.5; and vRealize Automation Identity Appliance 6.2.4 before 6.2.4.1 mishandles session content, which allows remote attackers to hijack sessions via a crafted web site.Show less
CVE-2016-2075 1Vmware 1Vrealize Business Advanced And Enterprise May 6, 2026 Mar 16, 2016 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in VMware vRealize Business Advanced and Enterprise 8.x before 8.2.5 on Linux allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Previous 1...383940...53 Next