Denial of Service

Every one of the 44 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with network access to port 443 on vCenter Server may exploit this…CVE-2022-31698Vmware · CVSS 5.3 · 48% likely

   CWE-400

2. n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of serv…CVE-2022-22950Vmware · 37% likely

   CWE-770

3. vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 an…CVE-2009-0177Vmware · 8.6% likely

   CWE-399

4. Spring Security versions 5.5.x prior to 5.5.1, 5.4.x prior to 5.4.7, 5.3.x prior to 5.3.10 and 5.2.x prior to 5.2.11 are susceptible to a Denial-of-Service (DoS) attack via the in…CVE-2021-22119Vmware · 6.0% likely

   CWE-400

5. VMware ESXi 4.0 and 4.1 and ESX 4.0 and 4.1 allow remote attackers to cause a denial of service (socket exhaustion) via unspecified network traffic.CVE-2011-1785Vmware · 3.4% likely

   CWE-399

6. In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack…CVE-2022-22971Vmware · 3.2% likely

   CWE-770

7. ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to ESXi may exploit this issue to create a denial-of-service co…CVE-2021-22050Vmware · 2.3% likely

   CWE-770

8. Information disclosure vulnerabilityCVE-2024-22255Vmware · CVSS 7.1 · 2.3% likely

   CWE-770

9. VMware ESXi and vCenter Server contain a partial denial of service vulnerability in their respective authentication services. VMware has evaluated the severity of this issue to be…CVE-2020-3976Vmware · 2.1% likely

   CWE-400

10. Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6, VMware Player 1.0.x before 1.0.6, VMware ACE 1.0.x before 1.0.5, VMware Server 1.0.x before…CVE-2008-1364Vmware · 2.0% likely

    CWE-399

11. Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, wh…CVE-2011-0355Vmware · 2.0% likely

    CWE-399

12. In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data bindi…CVE-2022-22970Vmware · 2.0% likely

    CWE-770

13. Virtual Machine Communication Interface (VMCI) in VMware Workstation 6.0.x before 6.0.3, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 allows attackers to ca…CVE-2008-1340Vmware · 1.7% likely

    CWE-399

14. The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to create…CVE-2021-22010Vmware · 1.7% likely

    CWE-400

15. VMware Workstation (14.x before 14.1.1, 12.x) and Fusion (10.x before 10.1.1 and 8.x) contain a denial-of-service vulnerability which can be triggered by opening a large number of…CVE-2018-6957VMware · 1.6% likely

    CWE-772

16. In Spring Cloud Function versions prior to 3.2.6, it is possible for a user who directly interacts with framework provided lookup functionality to cause a denial-of-service condit…CVE-2022-22979Vmware · 1.4% likely

    CWE-770

17. RabbitMQ all versions prior to 3.8.16 are prone to a denial of service vulnerability due to improper input validation in AMQP 1.0 client connection endpoint. A malicious user can…CVE-2021-22116Vmware · 1.4% likely

    CWE-400

18. VMware Workstation (15.x before 15.5.1) and Fusion (11.x before 11.5.1) contain an information disclosure vulnerability in vmnetdhcp. Successful exploitation of this issue may all…CVE-2019-5540VMware · 1.2% likely

    CWE-401

19. The implementation of the OSPF protocol in VMware NSX-V Edge 6.2.x prior to 6.2.8 and NSX-V Edge 6.3.x prior to 6.3.3 doesn't correctly handle the link-state advertisement (LSA).…CVE-2017-4920VMware · 1.1% likely

    CWE-400

20. In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-ser…CVE-2023-20863Vmware · CVSS 6.5 · 1.1% likely

    CWE-400

21. In VMware ESXi (6.7 before ESXi670-201908101-SG, 6.5 before ESXi650-202007101-SG), Workstation (15.x before 15.1.0), Fusion (11.x before 11.1.0), the VMCI host drivers used by VMw…CVE-2020-3995Vmware · 1.1% likely

    CWE-401

22. InstallBuilder AutoUpdate tool and regular installers enabling <checkForUpdates> built with versions earlier than 19.11 are vulnerable to Billion laughs attack (denial-of-service).CVE-2020-3946VMware · 1.0% likely

    CWE-776

23. In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafte…CVE-2023-20861Vmware · 1.0% likely

    CWE-400

24. VMware Workspace ONE UEM REST API contains a denial of service vulnerability. A malicious actor with access to /API/system/admins/session could cause an API denial of service due…CVE-2021-22029Vmware · 1.0% likely

    CWE-770

25. In Spring Boot versions 3.0.0 - 3.0.6, 2.7.0 - 2.7.11, 2.6.0 - 2.6.14, 2.5.0 - 2.5.14 and older unsupported versions, there is potential for a denial-of-service (DoS) attack if Sp…CVE-2023-20883Vmware · CVSS 7.5 · 0.9% likely

    CWE-400

26. TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before 7.1.1, and VMware Horizon Client 3.2.x before 3.2.1, 3.3.x…CVE-2015-2337Vmware · 0.7% likely

    CWE-399

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.