CVE-2018-3296

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3293

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3289

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3288

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3289

CVE-2018-3289 affects Oracle VM VirtualBox (Core subcomponent) with the affected line item: Versions prior to 5.2.20 are vulnerable. The vulnerability allows an unauthenticated attacker with access to the infrastructure hosting VirtualBox to compromise the product; functional impact includes pote...

CVE-2018-3295

CVE-2018-3295 affects Oracle VM VirtualBox core (VirtualBox component under Oracle Virtualization). A vulnerability in the core could allow takeover of Oracle VM VirtualBox on affected products prior to 5.2.20. Exploitation details in sources indicate the issue can be triggered by an attacker wit...

CVE-2018-3291

CVE-2018-3291 affects Oracle VM VirtualBox (Core) with vulnerable versions prior to 5.2.20. The issue enables takeover of VirtualBox and, per sources, requires logon and human interaction (local attack surface). Patches exist in multiple distributions (e.g., OpenSUSE/Mageia advisories) upgrading ...

CVE-2018-3296

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-2909

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3290

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-2909

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3298

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3271

CVE-2018-3271 affects Oracle Solaris 11.3 in the Kernel Zones subcomponent. The vulnerability allows a high-privilege attacker who can log on to the Solaris-hosting infrastructure to cause a hang or frequent, complete DoS of Solaris (availability impact). The CVSS3.0 vector is LOCAL, with high at...

CVE-2018-3174

Removed by vendor...

CVE-2018-3293

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3296

CVE-2018-3296 affects Oracle VM VirtualBox (Core) with vulnerabilities fixed in VirtualBox 5.2.20 and later. Affected: Oracle VM VirtualBox prior to 5.2.20. Impact: takeover of VirtualBox with HIGH confidentiality, integrity, and availability implications. Vector/conditions: unauthenticated attac...

Moderate severity vulnerability that affects OPCFoundation.NetStandard.Opc.Ua

Failure to validate certificates in OPC Foundation UA Client Applications communicating without security allows attackers with control over a piece of network infrastructure to decrypt passwords...

Architectural paths for evolving the DNS

The Domain Name System DNS is one of the Internet's fundamental systems, providing the top-level hierarchy for naming Internet resources. One of its purposes is to act as a sort of phonebook, allowing names such as "www.example.com" to be resolved to resource information, such as server IP...

KLA11339 Multiple vulnerabilities in Oracle Virtual Box

Multiple serious vulnerabilities were found in Oracle VM Virtual Box. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. Vulnerability in the Oracle VM VirtualBox component of Oracle...

Cisco Prime Infrastructure TFTP Arbitrary File Upload and Command Execution Vulnerability (cisco-sa-20181003-pi-tftp)

The Cisco Prime Infrastructure application running on the remote host is affected by an arbitrary file upload flaw, which could lead to a remote code execution vulnerability. This is due to incorrect permissions for various system folders, which a file could be uploaded to via TFTP. The commands ...