ES
Product
ESX
87
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 9Medium 8Low 1
Watch
Add ESX to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-4263 | – | Jan 18 | The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization… Affected: 3.0.0; 3.0.1; 3.0.2; 3.0.3; 3.5; 3.5; +4 more |
| CVE-2010-4526 | – | Jan 11 | Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.33 allows remote attackers to cause a denial of service… Affected: 4.0; 4.1 |
| CVE-2010-4297 | – | Dec 6 | The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and… Affected: 3.5; 4.0; 4.1 |
| CVE-2010-1142 | – | Apr 12 | VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x… Affected: 2.5.5; 3.0.3; 3.5; 4.0 |
| CVE-2010-1141 | – | Apr 12 | VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x… Affected: 2.5.5; 3.0.3; 3.5; 4.0 |
| CVE-2009-3080 | – | Nov 20 | Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8 allows local users to cause a denial of service or possibly gain… Affected: 3.5 |
| CVE-2009-3733 | – | Nov 2 | Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows… Affected: 3.0.3; 3.5 |
| CVE-2009-2267 | – | Nov 2 | VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10… Affected: 2.5.5; 3.0.3; 3.5; 4.0 |
| CVE-2009-2848 | – | Aug 18 | The execve function in the Linux kernel, possibly 2.6.30-rc6 and earlier, does not properly clear the current->clear_child_tid pointer, which allows local users to cause a denial… Affected: 4.0 |
| CVE-2009-1805 | – | Jun 1 | Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier,… Affected: 3.0.2; 3.0.3; 3.5 |
| CVE-2009-1630 | – | May 14 | The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka… Affected: 2.5.5; 3.0.3; 3.5; 4.0 |
| CVE-2009-1244 | – | Apr 13 | Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware… Affected: 3.0.2; 3.0.3; 3.5 |
| CVE-2009-1072 | – | Mar 25 | nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as… Affected: 3.0.3; 3.5; 4.0 |
| CVE-2009-0778 | – | Mar 12 | The icmp_send function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent… Affected: 2.5.5; 3.0.3; 3.5; 4.0 |
| CVE-2008-4914 | – | Feb 3 | Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service (host… Affected: 3.5 |
| CVE-2008-4917 | – | Dec 9 | Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware… Affected: 3.0.2 through 3.5 |
| CVE-2008-4915 | – | Nov 10 | The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier,… Affected: 2.5.4 through 3.5 |
| CVE-2008-4281 | – | Nov 10 | Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement… Affected: through 3.5 |
| CVE-2008-4279 | – | Oct 6 | The CPU hardware emulation for 64-bit guest operating systems in VMware Workstation 6.0.x before 6.0.5 build 109488 and 5.x before 5.5.8 build 108000; Player 2.0.x before 2.0.5… Affected: 2.5.4 through 3.5 |
| CVE-2008-2101 | – | Sep 3 | The VMware Consolidated Backup (VCB) command-line utilities in VMware ESX 3.0.1 through 3.0.3 and ESX 3.5 place a password on the command line, which allows local users to obtain… Affected: 3.0.1; 3.0.2; 3.0.3; 3.5 |
| CVE-2007-5671 | – | Jun 5 | HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server… Affected: 2.5.4; 3.0.0; 3.0.1; 3.0.2 |
| CVE-2008-2100 | – | Jun 5 | Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion… Affected: 2.5.4; 2.5.5; 3.0.0; 3.0.1; 3.0.2; 3.5 |
| CVE-2008-2097 | – | Jun 5 | Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length." Affected: 3.5 |
| CVE-2008-0967 | – | Jun 5 | Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707… Affected: 3.0.0; 3.0.1; 3.0.2 |
| CVE-2007-5360 | – | Jan 8 | Buffer overflow in OpenPegasus Management server, when compiled to use PAM and with PEGASUS_USE_PAM_STANDALONE_PROC defined, as used in VMWare ESX Server 3.0.1 and 3.0.2, might… Affected: 3.0.1; 3.0.2 |
| CVE-2007-0063 | – | Sep 21 | Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1… Affected: 2.0.2; 2.1.3; 2.5.3; 2.5.4; 3.0.0; 3.0.1 |
| CVE-2007-0061 | – | Sep 21 | The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Player 2 before 2.0.1 Build 55017, ACE… Affected: 2.0.2; 2.1.3; 2.5.3; 2.5.4; 3.0.0; 3.0.1 |
| CVE-2007-1271 | – | Apr 6 | Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service (application crash) via unspecified vectors Affected: 3.0.0; 3.0.1 |
| CVE-2007-1270 | – | Apr 6 | Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive information, or possibly execute arbitrary… Affected: 3.0.0; 3.0.1 |
| CVE-2006-2481 | – | Jul 31 | VMware ESX Server 2.0.x before 2.0.2 and 2.x before 2.5.2 patch 4 stores authentication credentials in base 64 encoded format in the vmware.mui.kid and vmware.mui.sid cookies,… Affected: 2.0; 2.0.1; 2.1; 2.1.1; 2.1.2; 2.5; +1 more |
| CVE-2006-3589 | – | Jul 21 | vmware-config.pl in VMware for Linux, ESX Server 2.x, and Infrastructure 3 does not check the return code from a Perl chmod function call, which might cause an SSL key file to be… Affected: 2.0; 2.0.1; 2.1; 2.1.1; 2.1.2; 2.5; +1 more |
| CVE-2005-3619 | – | Dec 31 | Cross-site scripting (XSS) vulnerability in the management interface for VMware ESX 2.5.x before 2.5.2 upgrade patch 2, 2.1.x before 2.1.2 upgrade patch 6, and 2.0.x before 2.0.1… Affected: 2.0; 2.0.1; 2.1.1; 2.1.2; 2.5; 2.5.2 |
| CVE-2005-4773 | – | Dec 31 | The configuration of VMware ESX Server 2.x, 2.0.x, 2.1.x, and 2.5.x allows local users to cause a denial of service (shutdown) via the (1) halt, (2) poweroff, and (3) reboot… Affected: through 2.5.2; 1.5.2; 1.5.2; 1.5.2; 2.0; 2.0.1; +3 more |
| CVE-2005-3620 | – | Dec 31 | The management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3 patch 2 records passwords in cleartext in URLs that are… Affected: 2.0.1 before 2.0.2; 2.1.1 before 2.1.3; 2.5.2 before 2.5.3 |
| CVE-2005-3618 | – | Dec 31 | Cross-site request forgery (CSRF) vulnerability in the management interface for VMware ESX Server 2.0.x before 2.0.2 patch 1, 2.1.x before 2.1.3 patch 1, and 2.x before 2.5.3… Affected: 2.0.1 before 2.0.2; 2.1.1 before 2.1.3; 2.5.2 before 2.5.3 |
| CVE-2005-4583 | – | Dec 29 | Unspecified vulnerability in the Management Interface in VMware ESX Server 2.x up to 2.5.x before 24 December 2005 allows "remote code execution in the Web browser" via… Affected: 2.0; 2.0.1; 2.1.1; 2.1.2; 2.5; 2.5.2 |
| CVE-2003-1291 | – | Dec 31 | VMware ESX Server 1.5.2 before Patch 4 allows local users to execute arbitrary programs as root via certain modified VMware ESX Server environment variables Affected: 1.5.2; 1.5.2; 1.5.2 |