ES
Virtualization
ESXi
On CISA KEVExploited in the wildRansomware-linked
138
CVEs
8
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 7High 39Medium 37Low 3
Watch
Add ESXi to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-3992 RansomwareIn wildKEV | 9.8 | Oct 20 | VMware ESXi OpenSLP Use-After-Free Vulnerability Affected: VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) |
| CVE-2019-5544 RansomwareIn wildKEV | 9.8 | Dec 6 | VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability Affected: 6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +34 more |
| CVE-2012-1516 | 9.9 | May 4 | The VMX process in VMware ESXi 3.5 through 4.1 and ESX 3.5 through 4.1 does not properly handle RPC commands, which allows guest OS users to cause a denial of service (memory… Affected: 3.5; 3.5; 4.0; 4.0; 4.0; 4.0; +2 more |
| CVE-2021-21994 | 9.8 | Jul 13 | SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2010-0211 | 9.8 | Jul 28 | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a… Affected: 4.0; 4.1 |
| CVE-2019-5521 | 9.6 | Sep 20 | VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x… Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
| CVE-2020-3955 | 9.3 | Apr 29 | ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes Affected: 6.5; 6.5; 6.5; 6.5; 6.5; 6.5; +34 more |
Showing 7