ES
Virtualization
ESXi
On CISA KEVExploited in the wildRansomware-linked
142
CVEs
8
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 10High 40Medium 37Low 3
Watch
Add ESXi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-3657 | – | Sep 10 | Buffer overflow in VMware ESXi 4.0 through 5.0, and ESX 4.0 and 4.1, allows remote attackers to execute arbitrary code or cause a denial of service via unspecified vectors Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.1; +3 more |
| CVE-2013-1661 | – | Sep 4 | VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a denial of… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.1; +6 more |
| CVE-2013-1659 | – | Feb 22 | VMware vCenter Server 4.0 before Update 4b, 5.0 before Update 2, and 5.1 before 5.1.0b; VMware ESXi 3.5 through 5.1; and VMware ESX 3.5 through 4.1 do not properly implement the… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +16 more |
| CVE-2013-1405 | – | Feb 15 | VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +2 more |
| CVE-2013-1406 | – | Feb 11 | The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before… Affected: 4.0; 4.0; 4.0; 4.0; 4.0; 4.1; +6 more |
| CVE-2012-5703 | – | Nov 20 | The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2)… Affected: 4.1 |
| CVE-2012-3289 | – | Jun 14 | VMware Workstation 8.x before 8.0.4, VMware Player 4.x before 4.0.4, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 allow remote attackers to cause a denial of… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +5 more |
| CVE-2012-3288 | – | Jun 14 | VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +5 more |
| CVE-2012-2450 | – | May 4 | VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +5 more |
| CVE-2012-2449 | – | May 4 | VMware Workstation 8.x before 8.0.3, VMware Player 4.x before 4.0.3, VMware Fusion 4.x through 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 do not properly… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +5 more |
| CVE-2012-2448 | – | May 4 | VMware ESXi 3.5 through 5.0 and ESX 3.5 through 4.1 allow remote attackers to execute arbitrary code or cause a denial of service (memory overwrite) via NFS traffic Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +5 more |
| CVE-2012-1517 | – | May 4 | The VMX process in VMware ESXi 4.1 and ESX 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory overwrite and process crash)… Affected: 4.1 |
| CVE-2012-1518 | – | Apr 17 | VMware Workstation 8.x before 8.0.2, VMware Player 4.x before 4.0.2, VMware Fusion 4.x before 4.1.2, VMware ESXi 3.5 through 5.0, and VMware ESX 3.5 through 4.1 use an incorrect… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +5 more |
| CVE-2012-1515 | – | Apr 2 | VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting… Affected: 3.5; 4.0; 4.1 |
| CVE-2012-1510 | – | Mar 16 | Buffer overflow in the WDDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges… Affected: 4.0; 4.1; 5.0 |
| CVE-2012-1508 | – | Mar 16 | The XPDM display driver in VMware ESXi 4.0, 4.1, and 5.0; VMware ESX 4.0 and 4.1; and VMware View before 4.6.1 allows guest OS users to gain guest OS privileges or cause a denial… Affected: 4.0; 4.1; 5.0 |
| CVE-2011-2146 | – | Jun 6 | mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi… Affected: 3.5; 4.0; 4.1 |
| CVE-2011-2145 | – | Jun 6 | mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi… Affected: 3.5; 4.0; 4.1 |
| CVE-2011-1787 | – | Jun 6 | Race condition in mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before… Affected: 3.5; 4.0; 4.1 |
| CVE-2011-1789 | – | May 9 | The self-extracting installer in the vSphere Client Installer package in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, VMware ESXi 4.x before 4.1 Update 1, and… Affected: 4.0; 4.1 |
| CVE-2011-1785 | – | May 3 | VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic Affected: 4.0; 4.1 |
| CVE-2011-1786 | – | May 3 | lsassd in Likewise Open /Enterprise 5.3 before build 7845, Open 6.0 before build 8325, and Enterprise 6.0 before build 178, as distributed in VMware ESXi 4.1 and ESX 4.1 and… Affected: 4.1 |
| CVE-2010-3609 | – | Mar 11 | The extension parser in slp_v2message.c in OpenSLP 1.2.1, and other versions before SVN revision 1647, as used in Service Location Protocol daemon (SLPD) in VMware ESX 4.0 and 4.1… Affected: 4.0; 4.1 |
| CVE-2011-0355 | – | Feb 17 | Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets,… Affected: 4.0; 4.1 |
| CVE-2010-4263 | – | Jan 18 | The igb_receive_skb function in drivers/net/igb/igb_main.c in the Intel Gigabit Ethernet (aka igb) subsystem in the Linux kernel before 2.6.34, when Single Root I/O Virtualization… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +7 more |
| CVE-2010-4573 | – | Dec 22 | The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain… Affected: 4.1 |
| CVE-2010-4297 | – | Dec 6 | The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and… Affected: 3.5; 4.0; 4.1 |
| CVE-2010-1142 | – | Apr 12 | VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x… Affected: 3.5; 4.0 |
| CVE-2010-1141 | – | Apr 12 | VMware Tools in VMware Workstation 6.5.x before 6.5.4 build 246459; VMware Player 2.5.x before 2.5.4 build 246459; VMware ACE 2.5.x before 2.5.4 build 246459; VMware Server 2.x… Affected: 3.5; 4.0 |
| CVE-2009-3733 | – | Nov 2 | Directory traversal vulnerability in VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138 on Linux, VMware ESXi 3.5, and VMware ESX 3.0.3 and 3.5 allows… Affected: 3.5 |
| CVE-2009-2267 | – | Nov 2 | VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10… Affected: 3.5; 4.0 |
| CVE-2009-1805 | – | Jun 1 | Unspecified vulnerability in the VMware Descheduled Time Accounting driver in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier,… Affected: 3.5 |
| CVE-2009-1244 | – | Apr 13 | Unspecified vulnerability in the virtual machine display function in VMware Workstation 6.5.1 and earlier; VMware Player 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware… Affected: 3.5 |
| CVE-2009-0518 | – | Apr 6 | VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process… Affected: 3.5 |
| CVE-2008-4916 | – | Apr 6 | Unspecified vulnerability in a guest virtual device driver in VMware Workstation before 5.5.9 build 126128, and 6.5.1 and earlier 6.x versions; VMware Player before 1.0.9 build… Affected: 3.5 |
| CVE-2008-4914 | – | Feb 3 | Unspecified vulnerability in VMware ESXi 3.5 before ESXe350-200901401-I-SG and ESX 3.5 before ESX350-200901401-SG allows local administrators to cause a denial of service (host… Affected: 3.5 |
| CVE-2008-4917 | – | Dec 9 | Unspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x versions; VMware Player 1.0.8 and earlier, and 2.0.5 and earlier 2.x versions; VMware… Affected: 3.5 |
| CVE-2008-4915 | – | Nov 10 | The CPU hardware emulation in VMware Workstation 6.0.5 and earlier and 5.5.8 and earlier; Player 2.0.x through 2.0.5 and 1.0.x through 1.0.8; ACE 2.0.x through 2.0.5 and earlier,… Affected: 3.5 |
| CVE-2008-4281 | – | Nov 10 | Directory traversal vulnerability in VMWare ESXi 3.5 before ESXe350-200810401-O-UG and ESX 3.5 before ESX350-200810201-UG allows administrators with the Datastore.FileManagement… Affected: through 3.5 |
| CVE-2008-2100 | – | Jun 5 | Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware ACE 2.x, VMware Server 1.x, VMware Fusion… Affected: 3.5 |
| CVE-2008-2097 | – | Jun 5 | Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length." Affected: 3.5 |
| CVE-2008-0967 | – | Jun 5 | Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057, VMware Player 1.x before 1.0.7 build 91707… Affected: 3.5 |