Input Validation and Logic

Every one of the 29 is a mark on the map. Named now: 1 to 26, most at risk first.

1. org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.CVE-2016-2173Vmware · 6.3% likely

   CWE-20

2. In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a fie…CVE-2022-22968Vmware · 5.7% likely

   CWE-178

3. The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.…CVE-2010-4297Vmware · 5.2% likely

   CWE-20

4. Serialized-object interfaces in VMware vRealize Orchestrator 6.x, vCenter Orchestrator 5.x, vRealize Operations 6.x, vCenter Operations 5.x, and vCenter Application Discovery Mana…CVE-2015-6934Vmware · 5.0% likely

   CWE-20

5. VMware Workstation 7.x before 7.1.6 and 8.x before 8.0.4, VMware Player 3.x before 3.1.6 and 4.x before 4.0.4, VMware Fusion 4.x before 4.1.3, VMware ESXi 3.5 through 5.0, and VMw…CVE-2012-3288Vmware · 3.8% likely

   CWE-20

6. VMware vSphere Client 4.0, 4.1, 5.0 before Update 3, and 5.1 before Update 2 does not properly validate updates to Client files, which allows remote attackers to trigger the downl…CVE-2014-1209Vmware · 3.8% likely

   CWE-20

7. vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a long heartbeat message.CVE-2015-1047Vmware · 3.3% likely

   CWE-20

8. An unspecified ISAPI extension in VMware Server before 1.0.7 build 108231 allows remote attackers to cause a denial of service (IIS crash) via a malformed request.CVE-2008-3697Vmware · 3.0% likely

   CWE-20

9. The vSphere API in VMware ESXi 4.1 and ESX 4.1 allows remote attackers to cause a denial of service (host daemon crash) via an invalid value in a (1) RetrieveProp or (2) RetrieveP…CVE-2012-5703Vmware · 2.4% likely

   CWE-20

10. WebAccess in VMware VirtualCenter 2.0.2 and 2.5, VMware Server 2.0, and VMware ESX 3.0.3 and 3.5 allows remote attackers to leverage proxy-server functionality to spoof the origin…CVE-2010-0686Vmware · 2.2% likely

    CWE-20

11. VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before 7.0.1 allow attackers to cause a denial of service against…CVE-2015-2341Vmware · 1.9% likely

    CWE-20

12. VMware vCenter Chargeback Manager (aka CBM) before 2.0.1 does not properly handle XML API requests, which allows remote attackers to read arbitrary files or cause a denial of serv…CVE-2012-1472Vmware · 1.8% likely

    CWE-20

13. VMware NSX 6.0 before 6.0.6, and vCloud Networking and Security (vCNS) 5.1 before 5.1.4.2 and 5.5 before 5.5.3, does not properly validate input, which allows attackers to obtain…CVE-2014-3796Vmware · 1.6% likely

    CWE-20

14. hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by modifying management traffic.CVE-2013-5970Vmware · 1.5% likely

    CWE-20

15. VMware AirWatch Console 9.x prior to 9.2.0 contains a vulnerability that could allow an authenticated AWC user to add malicious data to an enrolled device's log files. Successful…CVE-2017-4931VMware · 1.3% likely

    CWE-20

16. VMware Horizon DaaS before 7.0.0 contains a vulnerability that exists due to insufficient validation of data. An attacker may exploit this issue by tricking DaaS client users into…CVE-2017-4897VMware · 1.1% likely

    CWE-20

17. VMware ESXi 4.0 through 5.1, and ESX 4.0 and 4.1, does not properly implement the Network File Copy (NFC) protocol, which allows man-in-the-middle attackers to cause a denial of s…CVE-2013-1661Vmware · 1.1% likely

    CWE-20

18. hcmon.sys in VMware Workstation 6.5.1 and earlier, VMware Player 2.5.1 and earlier, VMware ACE 2.5.1 and earlier, and VMware Server 1.0.x before 1.0.9 build 156507 and 2.0.x befor…CVE-2008-3761Vmware · 1.0% likely

    CWE-20

19. The Virtual Machine Communication Interface (VMCI) implementation in vmci.sys in VMware Workstation 8.x before 8.0.5 and 9.x before 9.0.1 on Windows, VMware Fusion 4.1 before 4.1.…CVE-2013-1406Vmware · 1.0% likely

    CWE-20

20. VMWare VirtualCenter client 2.x before 2.0.1 Patch 1 (Build 33643) and 1.4.x before 1.4.1 Patch 1 (Build 33425), when server certificate verification is enabled, does not verify t…CVE-2006-5990Vmware · 0.9% likely

    CWE-20

21. The Host Guest File System (HGFS) in VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.5, and VMware Fusion 6.x before 6.0.5 and 7.x before 7.0.1 allows guest OS…CVE-2015-1043Vmware · 0.8% likely

    CWE-20

22. CVE-2024-38820: Spring Framework DataBinder Case Sensitive Match ExceptionCVE-2024-38820VMware · CVSS 3.1 · 0.6% likely

    CWE-178

23. Spring Security OAuth2 Authorization Server: Insufficient validation of Dynamic Client Registration metadataCVE-2026-59354VMware by Broadcom · CVSS 9.6 · 0.5% likely

    CWE-20

24. HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware ACE before 1.0.5 build 79846, VMware Server…CVE-2007-5671Vmware · 0.4% likely

    CWE-20

25. VMware ESXi (7.0 prior to ESXi70U1c-17325551), VMware Workstation (16.x prior to 16.0 and 15.x prior to 15.5.7), VMware Fusion (12.x prior to 12.0 and 11.x prior to 11.5.7) and VM…CVE-2020-3999Vmware · 0.4% likely

    CWE-20

26. Unspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5.x before 5.5.8 build 108000, VMware Workstation 6.0.x before 6.0.5 build 109488, V…CVE-2007-5438Vmware · 0.4% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.