Lucene search
+L

5747 matches found

Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:0 a.m.37 views

Oracle VirtualBox e1000 Unintialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

6CVSS3.9AI score0.00553EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:0 a.m.47 views

Oracle VirtualBox e1000 Integer Underflow Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

7.5CVSS4.8AI score0.00547EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:0 a.m.44 views

Oracle VirtualBox PCnet Time-Of-Check Time-Of-Use Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handlin...

7.5CVSS3.3AI score0.00411EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:0 a.m.29 views

Oracle VirtualBox LsiLogicSCSI Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

7.5CVSS3.7AI score0.00547EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:0 a.m.36 views

Oracle VirtualBox BusLogicSCSI Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.3CVSS2.8AI score0.00538EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:0 a.m.36 views

Oracle VirtualBox LsiLogicSCSI Out-Of-Bounds Write Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

7.5CVSS3.7AI score0.00547EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:0 a.m.47 views

Oracle VirtualBox PCnet Out-Of-Bounds Access Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the handlin...

7.5CVSS3.2AI score0.00547EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2020/07/20 12:0 a.m.33 views

Oracle VirtualBox BusLogicSCSI Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

5.3CVSS2.8AI score0.00549EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2020/07/17 12:0 a.m.13 views

The vulnerability of the VMware ESXi hypervisor, related to the lack of protective measures for the website structure, allows attackers to execute a cross-site scripting attack.

The vulnerability of the VMware ESXi hypervisor is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack remotely...

9.3CVSS7.4AI score0.01309EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/17 12:0 a.m.12 views

The vulnerability of VMware ESXi, VMware Fusion, and VMware Workstations relates to the occurrence of operations outside the buffer boundaries in memory, which allows an attacker to trigger a system failure.

The vulnerability of VMware ESXi, VMware Fusion, and VMware Workstations lies in the fact that operations are executed outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

5.5CVSS6.3AI score0.00293EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2020/07/17 12:0 a.m.16 views

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows allows a attacker to execute arbitrary code.

The vulnerability of the RemoteFX vGPU component in the Microsoft Hyper-V hardware virtualization system’s operating system Windows exists due to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted...

8CVSS8.2AI score0.05532EPSS
SaveExploits0References4
Fedora
Fedora
added 2020/07/16 1:15 a.m.38 views

[SECURITY] Fedora 32 Update: xen-4.13.1-4.fc32

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

8.8CVSS2.1AI score0.00413EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2020/07/16 12:0 a.m.26 views

Fedora: Security Advisory for xen (FEDORA-2020-fbc13516af)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS7.6AI score0.00413EPSS
SaveExploits0References2
Citrix
Citrix
added 2020/07/15 12:0 a.m.12 views

How to Install and Configure License server VPX on Hypervisor

Note: Citrix Hypervisor formerly XenServer...

7.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/07/14 12:0 a.m.32 views

Debian: Security Advisory (DSA-4723-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.00527EPSS
SaveExploits1References4
Debian
Debian
added 2020/07/12 8:39 p.m.223 views

[SECURITY] [DSA 4723-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4723-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 12, 2020 https://www.debian.org/security/faq -...

8.8CVSS8.8AI score0.00527EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2020/07/10 12:0 a.m.41 views

Xen Insufficient Cache Write-Back (XSA-321)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service and potential privilege escalation due to an insufficient cache write-back under VT-d. A malicious guest may be able to retain read/write DMA access to frames returned...

8.8CVSS8AI score0.00367EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2020/07/09 12:0 a.m.14 views

The vulnerability of XHCI controllers in VMware ESXi, VMware Workstation, and VMware Fusion allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of XHCI controllers in VMware ESXi, VMware Workstation, and VMware Fusion lies in the lack of protection for service data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

5.5CVSS5.9AI score0.00587EPSS
SaveExploits2References4Affected Software3
CNVD
CNVD
added 2020/07/08 12:0 a.m.10 views

Xen Input Validation Error Vulnerability (CNVD-2020-51520)

Xen is an open source virtual machine monitor product from the University of Cambridge, UK. The product enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen...

6.5CVSS8.9AI score0.00413EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/07/08 12:0 a.m.12 views

Xen Input Validation Error Vulnerability (CNVD-2021-17751)

Xen is an open source virtual machine monitor product. It enables different and incompatible operating systems to run on the same computer and supports runtime migration to ensure uptime and avoid downtime. A security vulnerability exists in Xen 4.13.x and earlier versions. An attacker could...

6.5CVSS6.5AI score0.00398EPSS
SaveExploits0References1
Rows per page
Query Builder