rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-3955 
ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.
Problem types: description: Stored Cross-Site-Scripting (XSS)
Affected products: vendor: VMware
product: ESXi
Published: 2020-04-29T02:14:06.000Z
CVE-2020-3956 
VMware Cloud Director 10.0.x before 10.0.0.2, 9.7.0.x before 9.7.0.5, 9.5.0.x before 9.5.0.6, and 9.1.0.x before 9.1.0.4 do not properly handle input leading to a code injection vulnerability. An authenticated actor may be able to send malicious traffic to VMware Cloud Director which may lead to arbitrary remote code execution. This vulnerability can be exploited through the HTML5- and Flex-based UIs, the API Explorer interface and API access.
Problem types: description: Code Injection Vulnerability
Affected products: vendor: n/a
product: VMware Cloud Director
Published: 2020-05-20T13:30:58.000Z
CVE-2020-3957 
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior) and VMware Horizon Client for Mac (5.x and prior) contain a local privilege escalation vulnerability due to a Time-of-check Time-of-use (TOCTOU) issue in the service opener. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMRC and Horizon Client are installed.
Problem types: description: Local privilege escalation vulnerability
Affected products: vendor: VMware
product: VMware Fusion
vendor: VMware
product: VMware Remote Console for Mac
vendor: VMware
product: VMware Horizon Client for Mac
Published: 2020-05-29T19:37:58.000Z
CVE-2020-3958 
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.5.2) and VMware Fusion (11.x before 11.5.2) contain a denial-of-service vulnerability in the shader functionality. Successful exploitation of this issue may allow attackers with non-administrative access to a virtual machine to crash the virtual machine's vmx process leading to a denial of service condition.
Problem types: description: Denial-of-service vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: VMware Workstation
vendor: VMware
product: VMware Fusion
Published: 2020-05-29T19:42:41.000Z
CVE-2020-3959 
VMware ESXi (6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), VMware Workstation (15.x before 15.1.0) and VMware Fusion (11.x before 11.1.0) contain a memory leak vulnerability in the VMCI module. A malicious actor with local non-administrative access to a virtual machine may be able to crash the virtual machine's vmx process leading to a partial denial of service.
Problem types: description: Denial-of-service vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: VMware Workstation
vendor: VMware
product: VMware Fusion
Published: 2020-05-29T19:49:35.000Z
CVE-2020-3960 
VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in NVMe functionality. A malicious actor with local non-administrative access to a virtual machine with a virtual NVMe controller present may be able to read privileged information contained in physical memory.
Problem types: description: Out-of-bounds read vulnerability
Affected products: vendor: n/a
product: VMware ESXi, Workstation, and Fusion
Published: 2021-09-15T12:14:02.000Z
CVE-2020-3961 
VMware Horizon Client for Windows (prior to 5.4.3) contains a privilege escalation vulnerability due to folder permission configuration and unsafe loading of libraries. A local user on the system where the software is installed may exploit this issue to run commands as any user.
Problem types: description: Privilege escalation vulnerability
Affected products: vendor: n/a
product: VMware Horizon Client for Windows
Published: 2020-06-15T15:18:29.000Z
CVE-2020-3962 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a use-after-free vulnerability in the SVGA device. A malicious actor with local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine.
Problem types: description: Use-after-free vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-24T16:01:53.000Z
CVE-2020-3963 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a use-after-free vulnerability in PVNVRAM. A malicious actor with local access to a virtual machine may be able to read privileged information contained in physical memory.
Problem types: description: Use-after-free vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-25T14:50:52.000Z
CVE-2020-3964 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the EHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in the hypervisor's memory. Additional conditions beyond the attacker's control need to be present for exploitation to be possible.
Problem types: description: Information Leak
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-25T14:51:48.000Z
CVE-2020-3965 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain an information leak in the XHCI USB controller. A malicious actor with local access to a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.
Problem types: description: Information Leak
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-25T14:54:46.000Z
CVE-2020-3966 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.2), and Fusion (11.x before 11.5.2) contain a heap-overflow due to a race condition issue in the USB 2.0 controller (EHCI). A malicious actor with local access to a virtual machine may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
Problem types: description: Heap-overflow due to race condition.
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-25T14:45:34.000Z
CVE-2020-3967 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain a heap-overflow vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local access to a virtual machine may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
Problem types: description: Heap-overflow vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-25T14:39:21.000Z
CVE-2020-3968 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds write vulnerability in the USB 3.0 controller (xHCI). A malicious actor with local administrative privileges on a virtual machine may be able to exploit this issue to crash the virtual machine's vmx process leading to a denial of service condition or execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
Problem types: description: Out-of-bounds write vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-25T14:43:59.000Z
CVE-2020-3969 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an off-by-one heap-overflow vulnerability in the SVGA device. A malicious actor with local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to execute code on the hypervisor from a virtual machine. Additional conditions beyond the attacker's control must be present for exploitation to be possible.
Problem types: description: Heap-overflow vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-24T16:00:46.000Z
CVE-2020-3970 
VMware ESXi (7.0 before ESXi_7.0.0-1.20.16321839, 6.7 before ESXi670-202004101-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), and Fusion (11.x before 11.5.5) contain an out-of-bounds read vulnerability in the Shader functionality. A malicious actor with non-administrative local access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to crash the virtual machine's vmx process leading to a partial denial of service condition.
Problem types: description: Out-of-bounds read vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-25T14:37:44.000Z
CVE-2020-3971 
VMware ESXi (6.7 before ESXi670-201904101-SG and 6.5 before ESXi650-201907101-SG), Workstation (15.x before 15.0.2), and Fusion (11.x before 11.0.2) contain a heap overflow vulnerability in the vmxnet3 virtual network adapter. A malicious actor with local access to a virtual machine with a vmxnet3 network adapter present may be able to read privileged information contained in physical memory.
Problem types: description: Heap overflow vulnerability
Affected products: vendor: VMware
product: VMware ESXi
vendor: VMware
product: Workstation
vendor: VMware
product: Fusion
Published: 2020-06-25T14:55:33.000Z
CVE-2020-3972 
VMware Tools for macOS (11.x.x and prior before 11.1.1) contains a denial-of-service vulnerability in the Host-Guest File System (HGFS) implementation. Successful exploitation of this issue may allow attackers with non-admin privileges on guest macOS virtual machines to create a denial-of-service condition on their own VMs.
Problem types: description: Denial-of-service vulnerability
Affected products: vendor: n/a
product: VMware Tools for macOS
Published: 2020-06-19T17:29:36.000Z
CVE-2020-3973 
The VeloCloud Orchestrator does not apply correct input validation which allows for blind SQL-injection. A malicious actor with tenant access to Velocloud Orchestrator could enter specially crafted SQL queries and obtain data to which they are not privileged.
Problem types: description: Blind SQL-injection
Affected products: vendor: n/a
product: VMware SD-WAN by VeloCloud
Published: 2020-07-08T13:46:28.000Z
CVE-2020-3974 
VMware Fusion (11.x before 11.5.5), VMware Remote Console for Mac (11.x and prior before 11.2.0 ) and Horizon Client for Mac (5.x and prior before 5.4.3) contain a privilege escalation vulnerability due to improper XPC Client validation. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to root on the system where Fusion, VMware Remote Console for Mac or Horizon Client for Mac is installed.
Problem types: description: Privilege escalation vulnerability
Affected products: vendor: n/a
product: VMware Fusion, VMware Remote Console for Mac and Horizon Client for Mac
Published: 2020-07-10T13:14:45.000Z
CVE-2020-3975 
VMware App Volumes 2.x prior to 2.18.6 and VMware App Volumes 4 prior to 2006 contain a Stored Cross-Site Scripting (XSS) vulnerability. A malicious actor with access to create and edit applications or create storage groups, may be able to inject malicious script which will be executed by a victim's browser when viewing.
Problem types: description: Stored Cross-Site Scripting (XSS) vulnerability
Affected products: vendor: n/a
product: VMware App Volumes
Published: 2020-08-21T17:54:24.000Z
CVE-2020-3976 
VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 5.3.
Problem types: description: Partial denial of service
Affected products: vendor: n/a
product: ESXi, vCenter Server, and Cloud Foundation
Published: 2020-08-21T12:37:34.000Z
CVE-2020-3977 
VMware Horizon DaaS (7.x and 8.x before 8.0.1 Update 1) contains a broken authentication vulnerability due to a flaw in the way it handled the first factor authentication. Successful exploitation of this issue may allow an attacker to bypass two-factor authentication process. In order to exploit this issue, an attacker must have a legitimate account on Horizon DaaS.
Problem types: description: Broken authentication vulnerability
Affected products: vendor: n/a
product: VMware Horizon DaaS
Published: 2020-09-22T13:45:14.000Z
CVE-2020-3979 
InstallBuilder for Qt Windows (versions prior to 20.7.0) installers look for plugins at a predictable location at initialization time, writable by non-admin users. While those plugins are not required, they are loaded if present, which could allow an attacker to plant a malicious library which could result in code execution with the security scope of the installer.
Problem types: description: Uncontrolled Search Path Element
Affected products: vendor: n/a
product: VMware InstallBuilder
Published: 2020-09-18T17:37:00.000Z
CVE-2020-3980 
VMware Fusion (11.x) contains a privilege escalation vulnerability due to the way it allows configuring the system wide path. An attacker with normal user privileges may exploit this issue to trick an admin user into executing malicious code on the system where Fusion is installed.
Problem types: description: Privilege escalation vulnerability
Affected products: vendor: n/a
product: VMware Fusion
Published: 2020-09-16T16:13:40.000Z
CVE-2020-3981 
VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds read vulnerability due to a time-of-check time-of-use issue in ACPI device. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
Problem types: description: Out-of-bounds read vulnerability
Affected products: vendor: n/a
product: VMware ESXi, Workstation, Fusion
Published: 2020-10-20T16:08:56.000Z
CVE-2020-3982 
VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202008101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x), Fusion (11.x before 11.5.6) contain an out-of-bounds write vulnerability due to a time-of-check time-of-use issue in ACPI device. A malicious actor with administrative access to a virtual machine may be able to exploit this vulnerability to crash the virtual machine's vmx process or corrupt hypervisor's memory heap.
Problem types: description: Out-of-bounds write vulnerability
Affected products: vendor: n/a
product: VMware ESXi, Workstation, Fusion
Published: 2020-10-20T16:09:04.000Z
CVE-2020-3984 
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 does not apply correct input validation which allows for SQL-injection. An authenticated SD-WAN Orchestrator user may exploit a vulnerable API call using specially crafted SQL queries which may lead to unauthorized data access.
Problem types: description: SQL Injection
Affected products: vendor: n/a
product: VMware SD-WAN Orchestrator
Published: 2020-11-24T15:34:49.000Z
CVE-2020-3985 
The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3 and 3.4.x prior to 3.4.4 allows an access to set arbitrary authorization levels leading to a privilege escalation issue. An authenticated SD-WAN Orchestrator user may exploit an application weakness and call a vulnerable API to elevate their privileges.
Problem types: description: Information Disclosure
Affected products: vendor: n/a
product: VMware SD-WAN Orchestrator
Published: 2020-11-24T15:35:00.000Z
CVE-2020-3986 
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMF Parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Problem types: description: Multiple out-of-bounds read issues via Cortado ThinPrint
Affected products: vendor: n/a
product: VMware Workstation and Horizon Client for Windows
Published: 2020-09-16T16:13:54.000Z
CVE-2020-3987 
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (EMR STRETCHDIBITS parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Problem types: description: Multiple out-of-bounds read issues via Cortado ThinPrint
Affected products: vendor: n/a
product: VMware Workstation and Horizon Client for Windows
Published: 2020-09-16T16:14:01.000Z
CVE-2020-3988 
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an out-of-bounds read vulnerability in Cortado ThinPrint component (JPEG2000 parser). A malicious actor with normal access to a virtual machine may be able to exploit these issues to create a partial denial-of-service condition or to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed.
Problem types: description: Multiple out-of-bounds read issues via Cortado ThinPrint
Affected products: vendor: n/a
product: VMware Workstation and Horizon Client for Windows
Published: 2020-09-16T16:14:08.000Z
CVE-2020-3989 
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain a denial of service vulnerability due to an out-of-bounds write issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to create a partial denial-of-service condition on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
Problem types: description: Denial-of-service vulnerability via Cortado ThinPrint
Affected products: vendor: n/a
product: VMware Workstation and Horizon Client for Windows
Published: 2020-09-16T16:17:11.000Z
CVE-2020-3990 
VMware Workstation (15.x) and Horizon Client for Windows (5.x before 5.4.4) contain an information disclosure vulnerability due to an integer overflow issue in Cortado ThinPrint component. A malicious actor with normal access to a virtual machine may be able to exploit this issue to leak memory from TPView process running on the system where Workstation or Horizon Client for Windows is installed. Exploitation is only possible if virtual printing has been enabled. This feature is not enabled by default on Workstation but it is enabled by default on Horizon Client.
Problem types: description: Information disclosure vulnerability via Cortado ThinPrint
Affected products: vendor: n/a
product: VMware Workstation and Horizon Client for Windows
Published: 2020-09-16T16:17:17.000Z
CVE-2020-3991 
VMware Horizon Client for Windows (5.x before 5.5.0) contains a denial-of-service vulnerability due to a file system access control issue during install time. Successful exploitation of this issue may allow an attacker to overwrite certain admin privileged files through a symbolic link attack at install time. This will result into a denial-of-service condition on the machine where Horizon Client for Windows is installed.
Problem types: description: Denial-of-service vulnerability
Affected products: vendor: n/a
product: VMware Horizon Client for Windows
Published: 2020-10-16T13:15:22.000Z
CVE-2020-3992 
OpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a use-after-free issue. A malicious actor residing in the management network who has access to port 427 on an ESXi machine may be able to trigger a use-after-free in the OpenSLP service resulting in remote code execution.
Problem types: description: Remote code execution vulnerability
Affected products: vendor: n/a
product: VMware ESXi
Published: 2020-10-20T16:11:13.000Z
CVE-2020-3993 
VMware NSX-T (3.x before 3.0.2, 2.5.x before 2.5.2.2.0) contains a security vulnerability that exists in the way it allows a KVM host to download and install packages from NSX manager. A malicious actor with MITM positioning may be able to exploit this issue to compromise the transport node.
Problem types: description: MITM vulnerability
Affected products: vendor: n/a
product: VMware NSX-T
Published: 2020-10-20T16:11:19.000Z
CVE-2020-3994 
VMware vCenter Server (6.7 before 6.7u3, 6.6 before 6.5u3k) contains a session hijack vulnerability in the vCenter Server Appliance Management Interface update function due to a lack of certificate validation. A malicious actor with network positioning between vCenter Server and an update repository may be able to perform a session hijack when the vCenter Server Appliance Management Interface is used to download vCenter updates.
Problem types: description: Session hijack vulnerability
Affected products: vendor: n/a
product: vCenter Server
Published: 2020-10-20T16:14:24.000Z
CVE-2020-3995 
In VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x before 15.1.0), Fusion (11.x before 11.1.0), the VMCI host drivers used by VMware hypervisors contain a memory leak vulnerability. A malicious actor with access to a virtual machine may be able to trigger a memory leak issue resulting in memory resource exhaustion on the hypervisor if the attack is sustained for extended periods of time.
Problem types: description: Memory leak vulnerability
Affected products: vendor: n/a
product: VMware ESXi, Workstation, Fusion
Published: 2020-10-20T16:14:34.000Z
CVE-2020-3996 
Velero (prior to 1.4.3 and 1.5.2) in some instances doesn’t properly manage volume identifiers which may result in information leakage to unauthorized users.
Problem types: description: Information leakage due to incorrect volume assignment
Affected products: vendor: n/a
product: Velero
Published: 2020-10-22T20:18:07.000Z