The vulnerability of VMware NSX network virtualization platform, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the user interface of the VMware NSX networking virtualization platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of VMware Cloud Foundation’s virtualization platform, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of VMware Cloud Foundation’s virtualization platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability in the user interface of the VMware NSX networking virtualization platform allows attackers to perform cross-site scripting attacks.

The vulnerability of the user interface of the VMware NSX networking virtualization platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of VMware NSX network virtualization platform, related to the lack of security measures for website structures, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the user interface of the VMware NSX networking virtualization platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of VMware ESXi, Workstation, Fusion, and Cloud Foundation software-related to uncontrolled resource consumption allows attackers to trigger service failures.

The vulnerabilities of VMware ESXi, Workstation, Fusion, and Cloud Foundation software are related to uncontrolled resource consumption. Exploiting these vulnerabilities can allow attackers to cause service failures...

The vulnerability of PVSCSI controller software products from VMware (ESXi, Workstation, Fusion, Cloud Foundation) relates to writing beyond the buffer boundaries, allowing an attacker to execute arbitrary code.

The vulnerability of PVSCSI controller software from VMware ESXi, Workstation, Fusion, and Cloud Foundation relates to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Port 443 of the VMware Cloud Foundation virtualization platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Port 443 component of the VMware Cloud Foundation virtualization platform relates to the possibility of bypassing the catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of Port 443 of the VMware Cloud Foundation virtualization platform allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Port 443 on the VMware Cloud Foundation virtualization platform is related to information disclosure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of VMware ESXi and Cloud Foundation software lies in their uncontrolled resource consumption, which allows attackers to trigger service failures.

The vulnerability of VMware ESXi and Cloud Foundation software-related programs is related to uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Linux Distros Unpatched Vulnerability : CVE-2014-4199

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a...

Linux Distros Unpatched Vulnerability : CVE-2023-34059

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack...

VMware Spring Framework <= 5.3.43, 6.0.0 - 6.0.29, 6.1.0 - 6.1.21, 6.2.0 - 6.2.9 Path Traversal Vulnerability - Linux

The VMware Spring Framework is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

VMware Spring Framework <= 5.3.43, 6.0.0 - 6.0.29, 6.1.0 - 6.1.21, 6.2.0 - 6.2.9 Path Traversal Vulnerability - Windows

The VMware Spring Framework is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-7342

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

Linux Distros Unpatched Vulnerability : CVE-2025-22247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMware Tools contains an insecure file handling vulnerability. A malicious actor with non-administrative privileges on a guest VM may tamper the local files to...

Linux Distros Unpatched Vulnerability : CVE-2023-34058

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges...

VMware Spring Framework 安全漏洞

VMware Spring Framework is a set of open source Java, JavaEE application frameworks from VMware. The framework helps developers build high-quality applications. A security vulnerability exists in VMware Spring Framework that stems from a path traversal vulnerability on a non-compliant servlet...

CVE-2025-7342

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

CVE-2025-7342

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...

CVE-2025-7342: Use of Hard-coded Credentials

A security issue was discovered in the Kubernetes Image Builder where default credentials are enabled during the Windows image build process when using the Nutanix or VMware OVA providers. These credentials, which allow root access, are disabled at the conclusion of the build. Kubernetes clusters...