Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.2VMware ESXi Arbitrary Write VulnerabilityKEVEPSS 1.0%Mar 4, 2025
- High8.2VMware ESXi and Workstation TOCTOU Race Condition VulnerabilityKEVEPSS 1.6%Mar 4, 2025
- UnknownVMware ESXi Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVFeb 27, 2025
- UnknownVMware Spring Framework Unintended Proxy or Intermediary ('Confused Deputy')KEVFeb 25, 2025
- UnknownSpring Framework WebMvc.fn or WebFlux.fn Path Traversal VulnerabilityKEVOct 22, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityKEVOct 11, 2024
- UnknownVMware ESXi Out-of-bounds Write VulnerabilityKEVOct 11, 2024
- Critical9.8VMware vCenter Server Privilege Escalation VulnerabilityKEVEPSS 17.4%Sep 17, 2024
- Critical9.8VMware vCenter Server Heap-Based Buffer Overflow VulnerabilityKEVEPSS 54.6%Sep 17, 2024
- UnknownVMware ESXi, Workstation, and Fusion UHCI USB Controller VulnerabilityKEVSep 11, 2024
- UnknownVMware ESXi, Workstation, and Fusion XHCI USB Controller VulnerabilityKEVSep 11, 2024
- UnknownVMware vrealize_operations_for_horizon Incorrect AuthorizationKEVJul 25, 2024
- Critical9.8Broadcom VMware vCenter Server Out-of-bounds Write VulnerabilityKEVEPSS 22.4%Jun 17, 2024
- High7.8In the Linux kernel, the following vulnerability has been resolved: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique().EPSS 0.6%May 30, 2024
- High7.2VMware ESXi Authentication Bypass VulnerabilityKEVEPSS 26.8%Apr 23, 2024
- UnknownVMware vRealize Log Insight Information DisclosureKEVDec 20, 2023
- UnknownVMware vrealize_log_insight Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVDec 20, 2023
- UnknownVMware vRealize Remote Code ExecutionKEVDec 20, 2023
- UnknownVMware view_planner Improper Input ValidationKEVDec 3, 2023
- UnknownVMware cloud_director Missing Authentication for Critical FunctionKEVNov 14, 2023
- UnknownVMware Workspace ONE Access, Identity Manager and vRealize Automation Authentication BypassKEVNov 13, 2023
- Critical9.8VMware vCenter Server Out-of-Bounds Write VulnerabilityKEVEPSS 99.4%Oct 25, 2023
- UnknownVMware workstation Uncontrolled Search Path ElementKEVJun 22, 2023
- Low3.9VMware Tools Authentication Bypass VulnerabilityKEVEPSS 13.5%Jun 13, 2023
- Critical9.8Vmware Aria Operations for Networks Command Injection VulnerabilityKEVEPSS 98.3%Jun 7, 2023