Updated virtualbox packages fix security vulnerabilities

Oracle VM VirtualBox incorporate the OpenSSL software libraries to provide cryptographic capabilities. OpenSSL versions through 1.0.2m and 1.1.0g are susceptible to a vulnerability that could allow an attacker to recover encryption keys and access protected communications CVE-2017-3736. Systems...

openSUSE: Security Advisory for virtualbox (openSUSE-SU-2018:0187-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2018-2676

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2676

CVE-2018-2676 affects the Oracle VM VirtualBox Core component. Affected are VirtualBox versions prior to 5.1.32 and prior to 5.2.6. The vulnerability allows a high-privilege attacker who has logon to the infrastructure where VirtualBox runs to compromise the VirtualBox instance, with potential ta...

Oracle VirtualBox Security Updates (jan2018-3236628) - Linux

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Security Updates (jan2018-3236628) - Windows

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

Oracle VirtualBox Security Updates (jan2018-3236628) - Mac OS X

Oracle VirtualBox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:vmvirtualbox";...

CVE-2016-2676

This CVE-2016-2676 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-2676

...

Ubuntu 14.04 LTS : NBD vulnerabilities (USN-2676-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2676-1 advisory. It was discovered that NBD incorrectly handled IP address matching. A remote attacker could use this issue with an IP address that has a partial match an...

CVE-2015-2676

CVE-2015-2676 affects Asus RT-G32 routers (firmware 2.0.2.6 and 2.0.3.2). A CSRF flaw lets an attacker hijack admin authentication and force password changes via start_apply.htm. Affected component: web interface; root cause: CSRF enabling unauthorized admin actions. Impact: compromise of admin c...

KLA10495 Multiple vulnerabilities in Asus RT-G32 router

Multiple serious vulnerabilities have been found in Asus RT-G32. Malicious users can exploit these vulnerabilities to inject arbitrary code or hijack administrator authentication. Multiple XSS and CSRF vulnerabilities can be exploited remotely via vectors related to startapply.htm Original...

CVE-2012-2676

Multiple integer overflows in the 1 malloc and 2 calloc functions in Hoard before 3.9 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows on implementing code via a large size value, which causes less memory to be allocated than expected...

CVE-2012-2676

CVE-2012-2676 affects the Hoard memory allocator (pre-3.9) and concerns two integer overflow paths in the malloc and calloc implementations. When a large size value is requested, the overflow can cause the allocator to allocate less memory than expected, enabling context‑dependent attackers to pe...

CVE-2011-2676

The CVE-2011-2676 issue concerns the A-Form family of Movable Type plug-ins (A-Form bamboo <1.3.6 and 2.x <2.0.3; A-Form PC/PC-Mobile

CVE-2010-2676

Open Web Analytics (OWA) 1.2.3 is affected by multiple directory traversal flaws in index.php, exploitable via the owa_action and owa_do parameters. The underlying issue allows remote attackers to read arbitrary files, as described in CVE-2010-2676. Attack surface is network-exposed and does not ...

VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE

a. Java JRE Security Update JRE update to version 1.5.022, which addresses multiple security issues that existed in earlier releases of JRE. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the following names to the security issues fixed in JRE 1.5.018: CVE-2009-1093,...

CVE-2010-2676

creationtimestamp| type| source ---|---|--- 2010-03-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11903...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update

Updated java-1.6.0-ibm packages that fix several security issues are now available for Red Hat Network Satellite Server 5.3. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the IBM Java Runtim...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server Sun Java Runtime security update

Updated java-1.5.0-sun packages that correct several security issues are now available for Red Hat Network Satellite Server 5.1. This update has been rated as having low security impact by the Red Hat Security Response Team. This update corrects several security vulnerabilities in the Sun Java...