Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
se of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038281 - http://www.securityfocus.com/bid/97921 - http://www.securitytracker.com/id/1038280 - http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE ID: CVE-2017-4913 State: PUBLISHED Published: 2017-06-08T13:00:00 Last Updated: 2024-08-05T14:47:42.915Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Integer overflow vulnerability via Cortado ThinPrint Description: VMware Workstation (12.x prior to 12.5.3) and Horizon View Client (4.x prior to 4.4.0) contain an integer-overflow vulnerability in the True Type Font parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS th
a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038281 - http://www.securityfocus.com/bid/97920 - http://www.vmware.com/security/advisories/VMSA-2017-0008.html
CVE ID: CVE-2017-4914 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T14:47:43.209Z Vendors: VMware Products: vSphere Data Protection (VDP) Problem Types: Remote Command Execution Description: VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x contains a deserialization issue. Exploitation of this issue may allow a remote attacker to execute commands on the appliance. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98939 - https://www.exploit-db.com/exploits/42152/ - http://www.vmware.com/security/advisories/VMSA-2017-0010.html - http://www.securitytracker.com/id/1038617
CVE ID: CVE-2017-4915 State: PUBLISHED Published: 2017-05-22T14:00:00 Last Updated: 2024-08-05T14:47:42.913Z Vendors: VMware Products: Workstation Pro/Player Problem Types: Privilege Escalation Description: VMware Workstation Pro/Player contains an insecure library loading vulnerability via ALSA sound driver configuration files. Successful exploitation of this issue may allow unprivileged host users to escalate their privileges to root in a Linux host machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98566 - https://www.vmware.com/security/advisories/VMSA-2017-0009.html - http://www.securitytracker.com/id/1038525 - https://www.exploit-
ww.vmware.com/security/advisories/VMSA-2017-0009.html - http://www.securitytracker.com/id/1038525 - https://www.exploit-db.com/exploits/42045/
CVE ID: CVE-2017-4916 State: PUBLISHED Published: 2017-05-22T14:00:00 Last Updated: 2024-08-05T14:47:42.914Z Vendors: VMware Products: Workstation Pro/Player Problem Types: NULL pointer dereference Description: VMware Workstation Pro/Player contains a NULL pointer dereference vulnerability that exists in the vstor2 driver. Successful exploitation of this issue may allow host users with normal user privileges to trigger a denial-of-service in a Windows host machine. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038526 - https://www.vmware.com/security/advisories/VMSA-2017-0009.html - http://www.securityfocus.com/bid/98560 - https://www.exp
ttps://www.vmware.com/security/advisories/VMSA-2017-0009.html - http://www.securityfocus.com/bid/98560 - https://www.exploit-db.com/exploits/42140/
CVE ID: CVE-2017-4917 State: PUBLISHED Published: 2017-06-07T17:00:00 Last Updated: 2024-08-05T14:47:42.912Z Vendors: VMware Products: vSphere Data Protection (VDP) Problem Types: Information Disclosure Description: VMware vSphere Data Protection (VDP) 6.1.x, 6.0.x, 5.8.x, and 5.5.x locally stores vCenter Server credentials using reversible encryption. This issue may allow plaintext credentials to be obtained. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/98936 - http://www.vmware.com/security/advisories/VMSA-2017-0010.html - http://www.securitytracker.com/id/1038617
CVE ID: CVE-2017-4918 State: PUBLISHED Published: 2017-06-08T19:00:00 Last Updated: 2024-08-05T14:47:43.194Z Vendors: VMware Products: Horizon View Client for Mac Problem Types: Command injection vulnerability Description: VMware Horizon View Client (2.x, 3.x and 4.x prior to 4.5.0) contains a command injection vulnerability in the service startup script. Successful exploitation of this issue may allow unprivileged users to escalate their privileges to root on the Mac OSX system where the client is installed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038642 - https://www.vmware.com/security/advisories/VMSA-2017-0011.html - http://www.
http://www.securitytracker.com/id/1038642 - https://www.vmware.com/security/advisories/VMSA-2017-0011.html - http://www.securityfocus.com/bid/98984
CVE ID: CVE-2017-4919 State: PUBLISHED Published: 2017-07-28T22:00:00Z Last Updated: 2024-09-16T16:29:02.295Z Vendors: VMware Products: VMware vCenter Server Problem Types: Unauthorized Access Heap buffer-overflow vulnerability Description: VMware vCenter Server 5.5, 6.0, 6.5 allows vSphere users with certain, limited vSphere privileges to use the VIX API to access Guest Operating Systems without the need to authenticate. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039004 - http://www.vmware.com/security/advisories/VMSA-2017-0012.html - http://www.securityfocus.com/bid/100102
CVE ID: CVE-2017-4920 State: PUBLISHED Published: 2017-12-05T21:00:00Z Last Updated: 2024-09-16T22:09:24.189Z Vendors: VMware Products: NSX-V Edge Problem Types: Denial of Service Description: The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement (LSA). A rogue LSA may exploit this issue resulting in continuous sending of LSAs between two routers eventually going in loop or loss of connectivity. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0014.html - http://www.securityfocus.com/bid/100277
CVE ID: CVE-2017-4921 State: PUBLISHED Published: 2017-08-01T16:00:00 Last Updated: 2024-08-05T14:47:42.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Server (6.5 prior to 6.5 U1) contains an insecure library loading issue that occurs due to the use of LD_LIBRARY_PATH variable in an unsafe manner. Successful exploitation of this issue may allow unprivileged host users to load a shared library that may lead to privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0013.html - http://www.securitytracker.com/id/1039013 - http://www.securityfocus.com/bid/100006
CVE ID: CVE-2017-4922 State: PUBLISHED Published: 2017-08-01T16:00:00 Last Updated: 2024-08-05T14:47:43.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical information when the service gets restarted. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100012 - https://www.vmware.com/security/advisories/VMSA-2017-0013.html - http://www.securi
://www.securityfocus.com/bid/100012 - https://www.vmware.com/security/advisories/VMSA-2017-0013.html - http://www.securitytracker.com/id/1039013
CVE ID: CVE-2017-4923 State: PUBLISHED Published: 2017-08-01T16:00:00 Last Updated: 2024-08-05T14:47:43.301Z Vendors: n/a Products: n/a Problem Types: n/a Description: VMware vCenter Server (6.5 prior to 6.5 U1) contains an information disclosure vulnerability. This issue may allow plaintext credentials to be obtained when using the vCenter Server Appliance file-based backup feature. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0013.html - http://www.securityfocus.com/bid/99997 - http://www.securitytracker.com/id/1039013
CVE ID: CVE-2017-4924 State: PUBLISHED Published: 2017-09-15T13:00:00Z Last Updated: 2024-09-17T02:20:43.435Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Out-of-bounds write vulnerability Description: VMware ESXi (ESXi 6.5 without patch ESXi650-201707101-SG), Workstation (12.x before 12.5.7) and Fusion (8.x before 8.5.8) contain an out-of-bounds write vulnerability in SVGA device. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039365 - http://www.securityfocus.com/bid/100843 - http://www.securitytracker.com/id/1039366 - https://www.vmware.com/security/advisori
/www.securityfocus.com/bid/100843 - http://www.securitytracker.com/id/1039366 - https://www.vmware.com/security/advisories/VMSA-2017-0015.html - https://0patch.blogspot.com/2017/10/micropatching-hypervisor-with-running.html
CVE ID: CVE-2017-4925 State: PUBLISHED Published: 2017-09-15T13:00:00Z Last Updated: 2024-09-17T03:03:34.620Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: NULL pointer dereference vulnerability Description: VMware ESXi 6.5 without patch ESXi650-201707101-SG, ESXi 6.0 without patch ESXi600-201706101-SG, ESXi 5.5 without patch ESXi550-201709101-SG, Workstation (12.x before 12.5.3), Fusion (8.x before 8.5.4) contain a NULL pointer dereference vulnerability. This issue occurs when handling guest RPC requests. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs. Additional Analyst Notes: - CVE Program Container: References
attackers with normal user privileges to crash their VMs. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039368 - http://www.securityfocus.com/bid/100842 - https://www.vmware.com/security/advisories/VMSA-2017-0015.html - http://www.securitytracker.com/id/1039367
CVE ID: CVE-2017-4926 State: PUBLISHED Published: 2017-09-15T13:00:00Z Last Updated: 2024-09-16T17:59:16.493Z Vendors: VMware Products: vCenter Server Problem Types: Stored XSS Description: VMware vCenter Server (6.5 prior to 6.5 U1) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker with VC user privileges can inject malicious java-scripts which will get executed when other VC users access the page. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039364 - https://www.vmware.com/security/advisories/VMSA-2017-0015.html - http://www.securityfocus.com/bid/100844
CVE ID: CVE-2017-4927 State: PUBLISHED Published: 2017-11-17T14:00:00Z Last Updated: 2024-09-17T02:00:47.903Z Vendors: VMware Products: vCenter Server Problem Types: LDAP denial of service vulnerability Description: VMware vCenter Server (6.5 prior to 6.5 U1 and 6.0 prior to 6.0 U3c) does not correctly handle specially crafted LDAP network packets which may allow for remote denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0017.html - http://www.securitytracker.com/id/1039759 - http://www.securityfocus.com/bid/101786
CVE ID: CVE-2017-4928 State: PUBLISHED Published: 2017-11-17T14:00:00Z Last Updated: 2024-09-17T03:48:41.110Z Vendors: VMware Products: vSphere Web Client Problem Types: Server-side request forgery and carriage return line feed injection issues Description: The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injection issues due to improper neutralization of URLs. An attacker may exploit these issues by sending a POST request with modified headers towards internal services leading to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/
ding to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0017.html - http://www.securitytracker.com/id/1039759 - http://www.securityfocus.com/bid/101785
CVE ID: CVE-2017-4929 State: PUBLISHED Published: 2017-11-17T14:00:00Z Last Updated: 2024-09-16T18:18:54.701Z Vendors: VMware Products: NSX Edge Problem Types: Cross-Site Scripting (XSS) vulnerability Description: VMware NSX Edge (6.2.x before 6.2.9 and 6.3.x before 6.3.5) contains a moderate Cross-Site Scripting (XSS) issue which may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0019.html - http://www.securityfocus.com/bid/101891 - http://www.securitytracker.com/id/1039837
CVE ID: CVE-2017-4930 State: PUBLISHED Published: 2017-11-16T21:00:00Z Last Updated: 2024-09-16T23:36:33.821Z Vendors: VMware Products: VMware AirWatch Console (AWC) Problem Types: Stored XSS vulnerability Description: VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add a malicious URL to an enrolled device's 'Links' page. Successful exploitation of this issue could result in an unsuspecting AWC user being redirected to a malicious URL. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039750 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html - http://www.secur
ww.securitytracker.com/id/1039750 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html - http://www.securityfocus.com/bid/101772
CVE ID: CVE-2017-4931 State: PUBLISHED Published: 2017-11-16T21:00:00Z Last Updated: 2024-09-16T20:48:08.283Z Vendors: VMware Products: VMware AirWatch Console (AWC) Problem Types: CSV file integrity vulnerability Description: VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful exploitation of this issue could result in an unsuspecting AWC user opening a CSV file which contains malicious content. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039750 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.htm
ferences: - http://www.securitytracker.com/id/1039750 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html - http://www.securityfocus.com/bid/101772
CVE ID: CVE-2017-4932 State: PUBLISHED Published: 2017-11-16T21:00:00Z Last Updated: 2024-09-16T20:47:52.105Z Vendors: VMware Products: VMware AirWatch Launcher for Android (AWL) Problem Types: Privilege escalation Description: VMware AirWatch Launcher for Android prior to 3.2.2 contains a vulnerability that could allow an escalation of privilege from the launcher UI context menu to native UI functionality and privilege. Successful exploitation of this issue could result in an escalation of privilege. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1039750 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html - http://www.secur
ww.securitytracker.com/id/1039750 - https://www.vmware.com/us/security/advisories/VMSA-2017-0016.html - http://www.securityfocus.com/bid/101771
CVE ID: CVE-2017-4933 State: PUBLISHED Published: 2017-12-20T15:00:00Z Last Updated: 2024-09-16T23:51:11.761Z Vendors: VMware Products: ESXi, Workstation, Fusion Problem Types: Heap overflow via authenticated VNC session Description: VMware ESXi (6.5 before ESXi650-201710401-BG), Workstation (12.x before 12.5.8), and Fusion (8.x before 8.5.9) contain a vulnerability that could allow an authenticated VNC session to cause a heap overflow via a specific set of VNC packets resulting in heap corruption. Successful exploitation of this issue could result in remote code execution in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must
in a virtual machine via the authenticated VNC session. Note: In order for exploitation to be possible in ESXi, VNC must be manually enabled in a virtual machine's .vmx configuration file. In addition, ESXi must be configured to allow VNC traffic through the built-in firewall. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0021.html - http://www.securitytracker.com/id/1040025 - http://www.securitytracker.com/id/1040024
CVE ID: CVE-2017-4934 State: PUBLISHED Published: 2017-11-17T14:00:00Z Last Updated: 2024-09-16T20:47:54.197Z Vendors: VMware Products: Workstation, Fusion Problem Types: Heap buffer-overflow vulnerability Description: VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a heap buffer-overflow vulnerability in VMNAT device. This issue may allow a guest to execute code on the host. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0018.html - http://www.securityfocus.com/bid/101903 - http://www.securitytracker.com/id/1039835
CVE ID: CVE-2017-4935 State: PUBLISHED Published: 2017-11-17T14:00:00Z Last Updated: 2024-09-16T17:18:03.849Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Out-of-bounds write vulnerability Description: VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds write vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horiz
ient, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View Client. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0018.html - http://www.securitytracker.com/id/1039836 - http://www.securitytracker.com/id/1039835 - http://www.securityfocus.com/bid/101902
CVE ID: CVE-2017-4936 State: PUBLISHED Published: 2017-11-17T14:00:00Z Last Updated: 2024-09-17T00:26:28.117Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Out-of-bounds read vulnerability Description: VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon
nt, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0018.html - http://www.securitytracker.com/id/1039836 - http://www.securityfocus.com/bid/101892 - http://www.securitytracker.com/id/1039835
CVE ID: CVE-2017-4937 State: PUBLISHED Published: 2017-11-17T14:00:00Z Last Updated: 2024-09-16T22:09:02.328Z Vendors: VMware Products: Workstation, Horizon View Client for Windows Problem Types: Out-of-bounds read vulnerability Description: VMware Workstation (12.x before 12.5.8) and Horizon View Client for Windows (4.x before 4.6.1) contain an out-of-bounds read vulnerability in JPEG2000 parser in the TPView.dll. On Workstation, this may allow a guest to execute code or perform a Denial of Service on the Windows OS that runs Workstation. In the case of a Horizon View Client, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon
nt, this may allow a View desktop to execute code or perform a Denial of Service on the Windows OS that runs the Horizon View Client. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon View Client. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0018.html - http://www.securitytracker.com/id/1039836 - http://www.securityfocus.com/bid/101892 - http://www.securitytracker.com/id/1039835
CVE ID: CVE-2017-4938 State: PUBLISHED Published: 2017-11-17T14:00:00Z Last Updated: 2024-09-17T03:28:55.869Z Vendors: VMware Products: Workstation, Fusion Problem Types: NULL pointer dereference vulnerability Description: VMware Workstation (12.x before 12.5.8) and Fusion (8.x before 8.5.9) contain a guest RPC NULL pointer dereference vulnerability. Successful exploitation of this issue may allow attackers with normal user privileges to crash their VMs. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0018.html - http://www.securitytracker.com/id/1039835 - http://www.securityfocus.com/bid/101887
CVE ID: CVE-2017-4939 State: PUBLISHED Published: 2017-11-17T21:00:00Z Last Updated: 2024-09-16T19:30:26.507Z Vendors: VMware Products: Workstation Problem Types: DLL hijacking vulnerability Description: VMware Workstation (12.x before 12.5.8) installer contains a DLL hijacking issue that exists due to some DLL files loaded by the application improperly. This issue may allow an attacker to load a DLL file of the attacker's choosing that could execute arbitrary code. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0018.html - http://www.securityfocus.com/bid/101890
CVE ID: CVE-2017-4940 State: PUBLISHED Published: 2017-12-20T15:00:00Z Last Updated: 2024-09-17T03:02:37.214Z Vendors: VMware Products: ESXi Problem Types: Stored cross-site scripting vulnerability Description: The ESXi Host Client in VMware ESXi (6.5 before ESXi650-201712103-SG, 5.5 before ESXi600-201711103-SG and 5.5 before ESXi550-201709102-SG) contains a vulnerability that may allow for stored cross-site scripting (XSS). An attacker can exploit this vulnerability by injecting Javascript, which might get executed when other users access the Host Client. Additional Analyst Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0021.html - http://
t Notes: - CVE Program Container: References: - https://www.vmware.com/security/advisories/VMSA-2017-0021.html - http://www.securitytracker.com/id/1040024