EUVD-2008-3500

Malware in sbrugna...

EUVD-2009-2273

Malware in sbrugna...

EUVD-2010-0713

Malware in sbrugna...

EUVD-2008-4261

Malware in sbrugna...

EUVD-2006-5973

Malware in sbrugna...

EUVD-2009-0522

Malware in sbrugna...

CVE-2013-1405: Improper Authentication

VMware vCenter Server 4.0 before Update 4b and 4.1 before Update 3a, VMware VirtualCenter 2.5, VMware vSphere Client 4.0 before Update 4b and 4.1 before Update 3a, VMware VI-Client 2.5, VMware ESXi 3.5 through 4.1, and VMware ESX 3.5 through 4.1 do not properly implement the management...

VMWare VirtualCenter ActiveX memory corruption

Tom Sawyer's Default GET Extension Factory ActiveX memory corruption...

CVE-2011-0426

Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors...

PT-2011-2339

Name of the Vulnerable Software and Affected Versions VMware vCenter versions 4.0 through 4.0 Update 2 VMware vCenter version 4.1 VMware VirtualCenter versions 2.5 through 2.5 Update 5 Description A directory traversal issue allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2011-0426: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in vCenter Server in VMware vCenter 4.0 before Update 3 and 4.1 before Update 1, and VMware VirtualCenter 2.5 before Update 6a, allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2009-2277: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "context data."...

CVE-2010-0686: Improper Input Validation

WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin of requests via unspecified vectors, related to a "URL forwarding vulnerability."...

CVE-2010-1137: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5, and the Server Console in VMware Server 1.0, allows remote attackers to inject arbitrary web script or HTML via the name of a virtual machine...

CVE-2009-0518: Exposure of Sensitive Information to an Unauthorized Actor

VI Client in VMware VirtualCenter before 2.5 Update 4, VMware ESXi 3.5 before Update 4, and VMware ESX 3.5 before Update 4 retains the VirtualCenter Server password in process memory, which might allow local users to obtain this password...

CVE-2008-4278: Exposure of Sensitive Information to an Unauthorized Actor

VMware VirtualCenter 2.5 before Update 3 build 119838 on Windows displays a user's password in cleartext when the password contains unspecified special characters, which allows physically proximate attackers to steal the password...

CVE-2008-3514

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other...

CVE-2008-3514: Exposure of Sensitive Information to an Unauthorized Actor

VMware VirtualCenter 2.5 before Update 2 and 2.0.2 before Update 5 relies on client-side "enabled/disabled functionality" for access control, which allows remote attackers to determine valid user names by enabling functionality in the GUI and then making an "attempt to assign permissions to other...

CVE-2006-5990: Improper Input Validation

VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 Build 33643 and 1.4.x before 1.4.1 Patch 1 Build 33425, when server certificate verification is enabled, does not verify the server's X.509 certificate when creating an SSL session, which allows remote malicious servers to spoof valid servers v...