12 matches found
CVE-2026-87282
CVE-2026-87282 affects the Core component of Oracle VM VirtualBox version 7.2.16 . The vulnerability allows a high-privileged local attacker to cause a complete denial of service (hang or frequent crash) of VirtualBox. Due to a scope change , the attack may significantly impact additional product...
EUVD-2026-79924
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...
CVE-2026-87272
Oracle VM VirtualBox 7.2.16 (component: Core ) is affected by a local privilege escalation vulnerability (CVE-2026-87272). A low-privileged attacker with logon access to the host can exploit this with low complexity and no user interaction to achieve full confidentiality, integrity, and availabil...
CVE-2026-87269
CVE-2026-87269 affects Oracle VM VirtualBox 7.2.16 (component: Core ), applying to Windows hosts only . An easily exploitable vulnerability allows a low-privileged local attacker with logon to the host to achieve full takeover of VirtualBox, impacting confidentiality, integrity, and availability ...
Code injection
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php part of the installation process allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled...
CVE-2020-11579
An issue was discovered in Chadha PHPKB 9.0 Enterprise Edition. installer/test-connection.php part of the installation process allows a remote unauthenticated attacker to disclose local files on hosts running PHP before 7.2.16, or on hosts where the MySQL ALLOW LOCAL DATA INFILE option is enabled...
php: Invalid read in exif_process_SOFn()
An issue was discovered in the EXIF component in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. There is an Invalid Read in exifprocessSOFn...
Fedora 29 : php (2019-f187a4df7a)
PHP version 7.2.16 07 Mar 2019 Core: - Fixed bug php77589 Core dump using parseinistring with numeric sections. Laruence - Fixed bug php77630 rename across the device may allow unwanted access during processing. Stas EXIF: - Fixed bug php77509 Uninitialized read in exifprocessIFDinTIFF. Stas -...
Fedora 28 : php (2019-efa799fd16)
PHP version 7.2.16 07 Mar 2019 Core: - Fixed bug php77589 Core dump using parseinistring with numeric sections. Laruence - Fixed bug php77630 rename across the device may allow unwanted access during processing. Stas EXIF: - Fixed bug php77509 Uninitialized read in exifprocessIFDinTIFF. Stas -...
CVE-2019-9637
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...
UBUNTU-CVE-2019-9637
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...
