PT-2025-35082

Name of the Vulnerable Software and Affected Versions Checkmk Exchange plugin VMware vSAN affected versions not specified Description The Checkmk Exchange plugin for VMware vSAN contains an improper certificate validation flaw. This allows attackers positioned in a Man-in-the-Middle MitM position...

CVE-2025-58126: Improper Certificate Validation

Improper Certificate Validation in Checkmk Exchange plugin VMware vSAN allows attackers in MitM position to intercept traffic...

Checkmk Exchange plugin VMware vSAN 安全漏洞

Checkmk Exchange plugin VMware vSAN is a plugin for device status monitoring from Checkmk Germany. A security vulnerability exists in Checkmk Exchange plugin VMware vSAN that stems from improper certificate validation and could lead to a man-in-the-middle attacker intercepting traffic...

The vulnerability in the user interface of the VMware NSX networking virtualization platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the user interface of the VMware NSX networking virtualization platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of Port 443 of the VMware Cloud Foundation virtualization platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Port 443 on the VMware Cloud Foundation virtualization platform is related to information disclosure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of VMware NSX network virtualization platform, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the user interface of the VMware NSX networking virtualization platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of VMware ESXi, Workstation, Fusion, and Cloud Foundation software-related to uncontrolled resource consumption allows attackers to trigger service failures.

The vulnerabilities of VMware ESXi, Workstation, Fusion, and Cloud Foundation software are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service failures...

The vulnerability of VMware NSX network virtualization platform, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the user interface of the VMware NSX networking virtualization platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of PVSCSI controller software products from VMware (ESXi, Workstation, Fusion, Cloud Foundation) relates to writing beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of PVSCSI controller software from VMware ESXi, Workstation, Fusion, and Cloud Foundation relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the software for managing VMware vCenter Server’s virtual infrastructure lies in insufficient checking of unusual or exceptional states, allowing a perpetrator to trigger a service failure.

The vulnerability of the software for managing VMware vCenter Server infrastructure is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of Port 443 of the VMware Cloud Foundation virtualization platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Port 443 component of the VMware Cloud Foundation virtualization platform relates to the possibility of bypassing the catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerabilities of VMware ESXi, VMware vCenter Server, and Cloud Foundation software stem from the lack of protective measures for the website structure, allowing attackers to execute cross-site scripting (XSS) attacks.

The vulnerabilities of VMware ESXi, VMware vCenter Server, and Cloud Foundation programs are related to the lack of measures taken to protect the website structure. Exploiting these vulnerabilities allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of VMware ESXi and Cloud Foundation software lies in their uncontrolled resource consumption, which allows attackers to trigger service failures.

The vulnerability of VMware ESXi and Cloud Foundation software-related programs is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of VMware Cloud Foundation’s virtualization platform, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of VMware Cloud Foundation’s virtualization platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Linux Distros Unpatched Vulnerability : CVE-2014-4199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a...

Linux Distros Unpatched Vulnerability : CVE-2023-34059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack...

VMware Spring Framework <= 5.3.43, 6.0.0 - 6.0.29, 6.1.0 - 6.1.21, 6.2.0 - 6.2.9 Path Traversal Vulnerability - Windows

The VMware Spring Framework is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Spring Framework <= 5.3.43, 6.0.0 - 6.0.29, 6.1.0 - 6.1.21, 6.2.0 - 6.2.9 Path Traversal Vulnerability - Linux

The VMware Spring Framework is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-7342

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

Linux Distros Unpatched Vulnerability : CVE-2025-22247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to...