CVE-2008-1363

VMware product family on Windows (Workstation 6.0.x < 6.0.3, Workstation 5.5.x < 5.5.6, Player 2.0.x < 2.0.3, Player 1.0.x < 1.0.6, ACE 2.0.x < 2.0.1 and 1.0.x < 1.0.5, Server 1.0.x

CVE-2006-2662

CVE-2006-2662 relates to VMware Server before RC1, where credentials are not cleared from memory after a console connection. This memory-stays data can enable a local attacker with access to the machine to potentially gain privileges. Data in the connected documents confirms the issue description...

CVE-2010-1138

CVE-2010-1138 corresponds to an information-disclosure vulnerability in VMware hosted products where a guest can cause the host vmware-vmx memory to be exposed via the virtual networking stack when processing network packets. Affected products include VMware Workstation/Player/ACE/Server/Fusion a...

CVE-2006-3589

The CVE-2006-3589 issue affects VMware products on Linux: VMware Player/Workstation/Server for Linux, VMware ESX Server 2.x, and VMware Infrastructure 3. vmware-config.pl does not check the return code of Perl chmod, and lacks using safe_chmod, which can leave SSL key files with an unsafe umask a...

CVE-2007-2491

CVE-2007-2491 concerns the PIIX4 power management subsystem in VMware Workstation 5.5.3.34685 and VMware Server 1.0.1.29996. A crafted poke to I/O port 0x1004 lets a local user write to arbitrary memory, enabling a Denial of Service (virtual machine crash) or other unspecified impact. The issue i...

CVE-2008-3695

CVE-2008-3695 is grouped with other VMware ActiveX control issues (CVE-2008-3691 to CVE-2008-3696). The connected documents describe an unspecified vulnerability in VMware ActiveX controls across multiple products (Workstation, Player, ACE, Server) with unknown impact and remote attack vectors; n...

CVE-2010-1193

CVE-2010-1193 is a Cross-site Scripting (XSS) vulnerability in VMware WebAccess for VMware Server 2.0. The issue arises from improper handling of JSON error messages, enabling an attacker to inject arbitrary script/HTML when a user is enticed to click a crafted link. The vulnerability is part of ...

CVE-2007-5619

CVE-2007-5619 describes an unspecified vulnerability in VMware Server before 1.0.4 that causes user passwords to be recorded in cleartext in server logs , potentially allowing a local attacker to gain privileges. The NVD assesses a high impact (CVSS v2: base score 7.2; LOCAL access, low attack co...