NVD List
Id | Name | Description | Reject | CVSS Version | CVSS Score | Severity | Pub Date | Modified Date | Actions |
---|---|---|---|---|---|---|---|---|---|
21864 | CVE-2016-7458 | VMware vSphere Client 5.5 before U3e and 6.0 before U2a allows remote vCenter Server and ESXi instances to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue. | 2 | 5 | Medium | 2017-01-19 | 2017-01-03 | View | |
29908 | CVE-2014-1210 | VMware vSphere Client 5.0 before Update 3 and 5.1 before Update 2 does not properly validate X.509 certificates, which allows man-in-the-middle attackers to spoof SSL servers via a crafted certificate. | 2 | 5.8 | Medium | 2017-01-19 | 2014-04-14 | View | |
29907 | CVE-2014-1209 | VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downloading and execution of an arbitrary program via unspecified vectors. | 2 | 9.3 | High | 2017-01-19 | 2014-04-14 | View | |
21863 | CVE-2016-7457 | VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove virtual machines, via unspecified vectors. | 2 | 8 | High | 2017-01-19 | 2017-01-03 | View | |
20626 | CVE-2016-5336 | VMware vRealize Automation 7.0.x before 7.1 allows remote attackers to execute arbitrary code via unspecified vectors. | 2 | 7.5 | High | 2017-01-19 | 2016-11-28 | View |
Page 592 of 17672, showing 5 records out of 88360 total, starting on record 2956, ending on 2960