Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
tual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. The workaround for this issue involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0006.html - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0762
CVE ID: CVE-2019-5517 State: PUBLISHED Published: 2019-04-15T17:20:08 Last Updated: 2024-08-04T20:01:51.289Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Multiple Out-of-bounds read vulnerabilities Description: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain multiple out-of-bounds read vulnerabilities in the shader translator. Exploitation of these issues requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of these issues may lead to information disclosure or may allow a
hine with 3D graphics enabled. Successful exploitation of these issues may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. The workaround for these issues involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0006.html
CVE ID: CVE-2019-5518 State: PUBLISHED Published: 2019-04-01T20:39:57 Last Updated: 2024-08-04T20:01:51.546Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Out-of-bounds read/write vulnerability Description: VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain an out-of-bounds read/write vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allo
ssue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107541 - http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html - https://www.vmware.com/security/advisories/VMSA-2019-0005.html - https://www.zerodayinitiative.com/advisories/ZDI-19-421/
CVE ID: CVE-2019-5519 State: PUBLISHED Published: 2019-04-01T20:39:47 Last Updated: 2024-08-04T20:01:51.426Z Vendors: VMware Products: VMware ESXi, Workstation, Fusion Problem Types: Time-of-check Time-of-use (TOCTOU) vulnerability Description: VMware ESXi (6.7 before ESXi670-201903001, 6.5 before ESXi650-201903001, 6.0 before ESXi600-201903001), Workstation (15.x before 15.0.4, 14.x before 14.1.7), Fusion (11.x before 11.0.3, 10.x before 10.1.6) contain a Time-of-check Time-of-use (TOCTOU) vulnerability in the virtual USB 1.1 UHCI (Universal Host Controller Interface). Exploitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present.
loitation of this issue requires an attacker to have access to a virtual machine with a virtual USB controller present. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/107535 - http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html - https://www.vmware.com/security/advisories/VMSA-2019-0005.html - https://www.zerodayinitiative.com/advisories/ZDI-19-420/ - http://www.securityfocus.com/bid/108443
CVE ID: CVE-2019-5520 State: PUBLISHED Published: 2019-04-15T17:12:06 Last Updated: 2024-08-04T20:01:51.278Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Out-of-bounds read vulnerability Description: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6), Fusion (11.x before 11.0.3 and 10.x before 10.1.6) updates address an out-of-bounds read vulnerability. Exploitation of this issue requires an attacker to have access to a virtual machine with 3D graphics enabled. Successful exploitation of this issue may lead to information disclosure.The workaround for this issue involves disabling the 3
ful exploitation of this issue may lead to information disclosure.The workaround for this issue involves disabling the 3D-acceleration feature. This feature is not enabled by default on ESXi and is enabled by default on Workstation and Fusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0006.html - https://www.zerodayinitiative.com/advisories/ZDI-19-369/
CVE ID: CVE-2019-5521 State: PUBLISHED Published: 2019-09-20T18:00:52 Last Updated: 2024-08-04T20:01:51.589Z Vendors: VMware Products: VMware ESXi, VMware Workstation, VMware Fusion Problem Types: Out of bounds read vulnerability Description: VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201903001), Workstation (15.x before 15.0.3 and 14.x before 14.1.6) and Fusion (11.x before 11.0.3 and 10.x before 10.1.6) contain an out-of-bounds read vulnerability in the pixel shader functionality. Successful exploitation of this issue may lead to information disclosure or may allow attackers with normal user privileges to create a denial-of-service condition on the host. Exploitati
osure or may allow attackers with normal user privileges to create a denial-of-service condition on the host. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.talosintelligence.com/vulnerability_reports/TALOS-2019-0757 - https://www.vmware.com/security/advisories/VMSA-2019-0012.html
CVE ID: CVE-2019-5522 State: PUBLISHED Published: 2019-06-06T19:00:03 Last Updated: 2024-08-04T20:01:51.934Z Vendors: VMware Products: VMware Tools for Windows Problem Types: Out of bounds read vulnerability Description: VMware Tools for Windows update addresses an out of bounds read vulnerability in vm3dmp driver which is installed with vmtools in Windows guest machines. This issue is present in versions 10.2.x and 10.3.x prior to 10.3.10. A local attacker with non-administrative access to a Windows guest with VMware Tools installed may be able to leak kernel information or create a denial of service attack on the same Windows guest machine. Additional Analyst Notes: - CVE Program Container
r create a denial of service attack on the same Windows guest machine. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0009.html - http://www.securityfocus.com/bid/108673
CVE ID: CVE-2019-5523 State: PUBLISHED Published: 2019-04-01T17:11:35 Last Updated: 2024-08-04T20:01:51.415Z Vendors: VMware Products: VMware vCloud Director for Service Providers (vCD) Problem Types: Remote Session Hijack vulnerability Description: VMware vCloud Director for Service Providers 9.5.x prior to 9.5.0.3 update resolves a Remote Session Hijack vulnerability in the Tenant and Provider Portals. Successful exploitation of this issue may allow a malicious actor to access the Tenant or Provider Portals by impersonating a currently logged in session. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152289/VMware-Security-Advisory-201
t Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152289/VMware-Security-Advisory-2019-0004.html - http://www.securityfocus.com/bid/107638 - https://www.vmware.com/security/advisories/VMSA-2019-0004.html
CVE ID: CVE-2019-5524 State: PUBLISHED Published: 2019-04-02T14:08:48 Last Updated: 2024-08-04T20:01:51.398Z Vendors: VMware Products: VMware Workstation, VMware Fusion Problem Types: Out-of-bounds write vulnerability Description: VMware Workstation (14.x before 14.1.6) and Fusion (10.x before 10.1.6) contain an out-of-bounds write vulnerability in the e1000 virtual network adapter. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/152290/VMware-Security-Advisory-2019-0005.html - http://www.securityfocus.com/bid/107635 - https://www.vmware.com/security/advisories/VMSA-2019-0005.html
CVE ID: CVE-2019-5525 State: PUBLISHED Published: 2019-06-06T19:00:44 Last Updated: 2024-08-04T20:01:51.689Z Vendors: VMware Products: VMware Workstation Problem Types: Use-after-free vulnerability Description: VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0009.html - http://www.securityfocus.com/bid/1
ainer: References: - https://www.vmware.com/security/advisories/VMSA-2019-0009.html - http://www.securityfocus.com/bid/108674
CVE ID: CVE-2019-5526 State: PUBLISHED Published: 2019-05-15T15:18:12 Last Updated: 2024-08-04T20:01:51.466Z Vendors: n/a Products: VMware Workstation Problem Types: DLL hijacking vulnerability Description: VMware Workstation (15.x before 15.1.0) contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where Workstation is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0007.html - http://www.securityfocus.com/bid/108333 - htt
rences: - https://www.vmware.com/security/advisories/VMSA-2019-0007.html - http://www.securityfocus.com/bid/108333 - http://packetstormsecurity.com/files/152946/VMware-Workstation-DLL-Hijacking.html
CVE ID: CVE-2019-5527 State: PUBLISHED Published: 2019-10-10T16:28:46 Last Updated: 2024-08-04T20:01:50.856Z Vendors: n/a Products: ESXi, Workstation, Fusion, VMRC and Horizon Client Problem Types: Use-after-free vulnerability Description: ESXi, Workstation, Fusion, VMRC and Horizon Client contain a use-after-free vulnerability in the virtual sound device. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0014.html
CVE ID: CVE-2019-5528 State: PUBLISHED Published: 2019-07-11T20:15:02 Last Updated: 2024-08-04T20:01:51.756Z Vendors: VMware Products: ESXi Problem Types: Partial DoS Description: VMware ESXi 6.5 suffers from partial denial of service vulnerability in hostd process. Patch ESXi650-201907201-UG for this issue is available. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0011.html - http://www.securityfocus.com/bid/109130
CVE ID: CVE-2019-5530 State: PUBLISHED Published: 2019-08-29T00:53:03 Last Updated: 2024-08-04T20:01:51.458Z Vendors: n/a Products: InstallBuilder Problem Types: Authenticode signature bypass Description: Windows binaries generated with InstallBuilder versions earlier than 19.7.0 are vulnerable to tampering even if they contain a valid Authenticode signature. Additional Analyst Notes: - CVE Program Container: References: - https://blog.bitrock.com/2019/08/installer-tampering-while-preserving.html
CVE ID: CVE-2019-5531 State: PUBLISHED Published: 2019-09-18T21:42:17 Last Updated: 2024-08-04T20:01:51.896Z Vendors: VMware Products: VMware vSphere ESXi, VMware vCenter Server Problem Types: Information disclosure vulnerability Description: VMware vSphere ESXi (6.7 prior to ESXi670-201810101-SG, 6.5 prior to ESXi650-201811102-SG, and 6.0 prior to ESXi600-201807103-SG) and VMware vCenter Server (6.7 prior to 6.7 U1b, 6.5 prior to 6.5 U2b, and 6.0 prior to 6.0 U3j) contain an information disclosure vulnerability in clients arising from insufficient session expiration. An attacker with physical access or an ability to mimic a websocket connection to a user’s browser may be able to obtain cont
tacker with physical access or an ability to mimic a websocket connection to a user’s browser may be able to obtain control of a VM Console after the user has logged out or their session has timed out. Additional Analyst Notes: - CVE Program Container: References: - http://www.vmware.com/security/advisories/VMSA-2019-0013.html
CVE ID: CVE-2019-5532 State: PUBLISHED Published: 2019-09-18T20:32:36 Last Updated: 2024-08-04T20:01:51.489Z Vendors: VMware Products: vCenter Server Problem Types: Information disclosure vulnerability Description: VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability due to the logging of credentials in plain-text for virtual machines deployed through OVF. A malicious user with access to the log files containing vCenter OVF-properties of a virtual machine deployed from an OVF may be able to view the credentials used to deploy the OVF (typically the root account of the virtual machine). Additional Analyst
to view the credentials used to deploy the OVF (typically the root account of the virtual machine). Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0013.html - http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html
CVE ID: CVE-2019-5533 State: PUBLISHED Published: 2019-10-28T22:14:46 Last Updated: 2024-08-04T20:01:51.956Z Vendors: VMware Products: SD-WAN by VeloCloud Problem Types: Information disclosure vulnerability Description: In VMware SD-WAN by VeloCloud versions 3.x prior to 3.3.0, the VeloCloud Orchestrator parameter authorization check mistakenly allows enterprise users to obtain information of Managed Service Provider accounts. Among the information is username, first and last name, phone numbers and e-mail address if present but no other personal data. VMware has evaluated the severity of this issue to be in the moderate severity range with a maximum CVSSv3 base score of 4.3. Additional Anal
the severity of this issue to be in the moderate severity range with a maximum CVSSv3 base score of 4.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0017.html
CVE ID: CVE-2019-5534 State: PUBLISHED Published: 2019-09-18T20:32:33 Last Updated: 2024-08-04T20:01:51.962Z Vendors: VMware Products: vCenter Server Problem Types: Information disclosure vulnerability Description: VMware vCenter Server (6.7.x prior to 6.7 U3, 6.5 prior to 6.5 U3 and 6.0 prior to 6.0 U3j) contains an information disclosure vulnerability where Virtual Machines deployed from an OVF could expose login information via the virtual machine's vAppConfig properties. A malicious actor with access to query the vAppConfig properties of a virtual machine deployed from an OVF may be able to view the credentials used to deploy the OVF (typically the root account of the virtual machine). A
an OVF may be able to view the credentials used to deploy the OVF (typically the root account of the virtual machine). Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0013.html - http://packetstormsecurity.com/files/154536/VMware-Security-Advisory-2019-0013.html
CVE ID: CVE-2019-5535 State: PUBLISHED Published: 2019-10-10T16:29:16 Last Updated: 2024-08-04T20:01:51.615Z Vendors: n/a Products: VMware Workstation and Fusion Problem Types: Network denial-of-service vulnerability Description: VMware Workstation and Fusion contain a network denial-of-service vulnerability due to improper handling of certain IPv6 packets. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 4.7. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0014.html
CVE ID: CVE-2019-5536 State: PUBLISHED Published: 2019-10-28T15:56:36 Last Updated: 2024-08-04T20:01:51.626Z Vendors: n/a Products: VMware ESXi, Workstation and Fusion Problem Types: Denial-of-service vulnerability Description: VMware ESXi (6.7 before ESXi670-201908101-SG and 6.5 before ESXi650-201910401-SG), Workstation (15.x before 15.5.0) and Fusion (11.x before 11.5.0) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. I
r own VM. Exploitation of this issue require an attacker to have access to a virtual machine with 3D graphics enabled. It is not enabled by default on ESXi and is enabled by default on Workstation and Fusion. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0019.html
CVE ID: CVE-2019-5537 State: PUBLISHED Published: 2019-10-28T15:04:08 Last Updated: 2024-08-04T20:01:51.576Z Vendors: n/a Products: VMware vCenter Server Appliance Problem Types: Information Disclosure Vulnerability Description: Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d) may allow a malicious actor to intercept sensitive data in transit over FTPS and HTTPS. A malicious actor with man-in-the-middle positioning between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit du
e positioning between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit during File-Based Backup and Restore operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0018.html
CVE ID: CVE-2019-5538 State: PUBLISHED Published: 2019-10-28T15:52:37 Last Updated: 2024-08-04T20:01:51.950Z Vendors: n/a Products: VMware vCenter Server Appliance Problem Types: Information Disclosure Vulnerability Description: Sensitive information disclosure vulnerability resulting from a lack of certificate validation during the File-Based Backup and Restore operations of VMware vCenter Server Appliance (6.7 before 6.7u3a and 6.5 before 6.5u3d) may allow a malicious actor to intercept sensitive data in transit over SCP. A malicious actor with man-in-the-middle positioning between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit during File-B
ng between vCenter Server Appliance and a backup target may be able to intercept sensitive data in transit during File-Based Backup and Restore operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0018.html
CVE ID: CVE-2019-5539 State: PUBLISHED Published: 2019-12-23T19:20:50 Last Updated: 2024-08-04T20:01:51.796Z Vendors: VMware Products: VMware Workstation, Horizon View Agent Problem Types: DLL hijacking vulnerability via Cortado Thinprint Description: VMware Workstation (15.x prior to 15.5.1) and Horizon View Agent (7.10.x prior to 7.10.1 and 7.5.x prior to 7.5.4) contain a DLL hijacking vulnerability due to insecure loading of a DLL by Cortado Thinprint. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a Windows machine where Workstation or View Agent is installed. Additional Analyst Notes: - CVE Program C
ministrator on a Windows machine where Workstation or View Agent is installed. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0023.html
CVE ID: CVE-2019-5540 State: PUBLISHED Published: 2019-11-20T15:10:59 Last Updated: 2024-08-04T20:01:51.413Z Vendors: VMware Products: Workstation and Fusion Problem Types: Information disclosure vulnerability Description: VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation of this issue may allow an attacker on a guest VM to disclose sensitive information by leaking memory from the host process. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0021.html
CVE ID: CVE-2019-5541 State: PUBLISHED Published: 2019-11-20T15:11:28 Last Updated: 2024-08-04T20:01:50.794Z Vendors: VMware Products: Workstation and Fusion Problem Types: Out-of-bounds write vulnerability Description: VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an out-of-bounds write vulnerability in the e1000e virtual network adapter. Successful exploitation of this issue may lead to code execution on the host from the guest or may allow attackers to create a denial-of-service condition on their own VM. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0021.html
CVE ID: CVE-2019-5542 State: PUBLISHED Published: 2019-11-20T15:11:57 Last Updated: 2024-08-04T20:01:50.748Z Vendors: VMware Products: Workstation and Fusion Problem Types: Denial-of-service vulnerability Description: VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain a denial-of-service vulnerability in the RPC handler. Successful exploitation of this issue may allow attackers with normal user privileges to create a denial-of-service condition on their own VM. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2019-0021.html
CVE ID: CVE-2019-5543 State: PUBLISHED Published: 2020-03-16T17:24:55 Last Updated: 2024-08-04T20:01:51.489Z Vendors: VMware Products: VMware Horizon Client for Windows, VMware Remote Console for Windows, VMware Workstation for Windows Problem Types: Privilege escalation vulnerability Description: For VMware Horizon Client for Windows (5.x and prior before 5.3.0), VMware Remote Console for Windows (10.x before 11.0.0), VMware Workstation for Windows (15.x before 15.5.2) the folder containing configuration files for the VMware USB arbitration service was found to be writable by all users. A local user on the system where the software is installed may exploit this issue to run commands as any
by all users. A local user on the system where the software is installed may exploit this issue to run commands as any user. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2020-0004.html