116 matches found
openSUSE: Security Advisory for virtualbox (openSUSE-SU-2021:0723-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
openSUSE: Security Advisory for virtualbox (openSUSE-SU-2021:0630-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Security update for virtualbox (important)
openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2021:0630-1 Rating: important References: 1181197 1181198 1183125 1183329 1184542 Cross-References: CVE-2021-2074 CVE-2021-2129 CVE-2021-2264 CVSS scores: CVE-2021-2074 NVD : 8.2...
CVE-2021-2264
CVE-2021-2264 affects Oracle VM VirtualBox (Core) prior to 6.1.20. The vulnerability, with CVSS v3.1 base score 8.4 (AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N), can allow a low-privilege, locally authenticated attacker to compromise VirtualBox and potentially access or modify data. Public sources consi...
Oracle VM VirtualBox (April 2021 CPU)
The version of Virtualbox installed on the remote host is prior to 6.1.20. It is, therefore, affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory: - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that ...
KLA12160 Multiple vulnerabilities in Oracle VirtualBox
Multiple vulnerabilities were found in Oracle VirtualBox. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. A security bypass vulnerability in Core component can...
SUSE: Security Advisory (SUSE-SU-2017:2264-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2020-2264
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...
CVE-2020-2264
Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...
CVE-2020-2264
Summary: CVE-2020-2264 affects Jenkins Custom Job Icon Plugin (versions 0.2 and earlier). The vulnerability is a stored XSS caused by failing to escape job descriptions in tooltips. Exploitation requires attacker to have Job/Configure permission. Impact: stored XSS that can execute client-side co...
CVE-2019-2264
CVE-2019-2264 describes a null pointer dereference for the channel context when opening the glink channel in Qualcomm Snapdragon families (Snapdragon Auto/Consumer IoT/Mobile/Voice & Music/Wearables) across listed chips (MDM9607, MDM9640, MSM8909W, QCS405, QCS605, SD 425/427/430/435/439/429/450/6...
CVE-2018-2264
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
CVE-2016-2264
CVE-2016-2264 is rejected/not used; this candidate does not represent an active vulnerability entry.
Gentoo Security Advisory GLSA 201401-15
Gentoo Linux Local Security Checks GLSA 201401-15 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
CVE-2015-0978
Multiple untrusted search path vulnerabilities in 1 EQATEC.Analytics.Monitor.Win32vc100.dll and 2 EQATEC.Analytics.Monitor.Win32vc100-x64.dll in Elipse E3 4.5.232 through 4.6.161 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory. NOTE: this may overlap...
CVE-2014-2624
Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264...
Design/Logic Flaw
Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264...
CVE-2014-2624
HP NNMi on Windows/Linux (versions 9.0x/9.1x/9.2x) is affected by CVE-2014-2624, a remote-code-execution vulnerability due to memory corruption in ovopi.dll and the PMD service. The root cause involves unsafe handling of user-controlled data (strcpy/strcat) when processing stack_option UDP packet...