8421 matches found
CVE-2025-30712
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle V...
PT-2025-16453 Ā· Oracle Ā· Virtualbox
Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox version 7.1.6 Description: The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized...
Oracle VM VirtualBox å®å Øę¼ę“
Oracle VM VirtualBox is a virtual machine management software from Oracle Corporation USA. A security vulnerability exists in Oracle VM VirtualBox version 7.1.6, which originates from an elevated-privilege attacker that can be exploited via the login infrastructure and could lead to unauthorized...
PT-2025-16459 Ā· Oracle Ā· Virtualbox
Name of the Vulnerable Software and Affected Versions: Oracle VM VirtualBox version 7.1.6 Description: The issue allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in unauthorized...
CVE-2025-0127
A command injection vulnerability in Palo Alto Networks PAN-OSĀ® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deploye...
CVE-2025-0119 Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM
A command injection vulnerability in the Palo Alto Networks Cortex XDRĀ® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM...
CVE-2025-0119
CVE-2025-0119 affects the Palo Alto Networks Cortex XDR Broker VM. An authenticated user can trigger command injection to execute arbitrary OS commands with root privileges on the host running Broker VM. The advisory notes a medium (CVSS 4.0 v) score (6.3 base) with local attack vector, minimal p...
CVE-2025-0119 Cortex XDR Broker VM: Authenticated Command Injection Vulnerability in Broker VM
A command injection vulnerability in the Palo Alto Networks Cortex XDRĀ® Broker VM allows an authenticated user to execute arbitrary OS commands with root privileges on the host operating system running Broker VM...
CVE-2025-0127
A command injection vulnerability in Palo Alto Networks PAN-OSĀ® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deploye...
CVE-2025-0127 PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series
A command injection vulnerability in Palo Alto Networks PAN-OSĀ® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deploye...
CVE-2025-0127 PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series
A command injection vulnerability in Palo Alto Networks PAN-OSĀ® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deploye...
PAN-OS: Authenticated Admin Command Injection Vulnerability in PAN-OS VM-Series
A command injection vulnerability in Palo Alto Networks PAN-OSĀ® software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as a root user. This issue is only applicable to PAN-OS VM-Series. This issue does not affect firewalls that are already deploye...
Palo Alto Networks PAN-OS 10.1.x < 10.1.14-h13 / 10.2.x < 10.2.9 / 11.0.x < 11.0.4 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.14-h13 or 10.2.x prior to 10.2.9 or 11.0.x prior to 11.0.4. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated...
Security update for xen
This update for xen fixes the following issues: CVE-2025-1713: Fixed potential deadlock with VT-d and legacy PCI device pass-through bsc1238043 Other fixes: Xen channels and domU console bsc1219354 Fixed attempting to start guest vm's libxl fills disk with errors bsc1237692 Xen call trace and API...
CVE-2025-21431 Time-of-check Time-of-use (TOCTOU) Race Condition in Automotive OS Platform
Information disclosure may be there when a guest VM is connected...
PT-2025-18395
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.14.0-rc3 Description A vulnerability in the Linux kernel has been resolved, specifically in the KVM Kernel-based Virtual Machine module. The issue arises when the vCPU is in L2 with INIT and a TRIPLE FAULT...
CVE-2025-21977
In the Linux kernel, the following vulnerability has been resolved: fbdev: hypervfb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs Gen 2 Hyper-V VMs boot via EFI and have a standard EFI framebuffer device. When the kdump kernel runs in such a VM, loading the efifb driver may hang because of...
CVE-2025-21953
In the Linux kernel, the following vulnerability has been resolved: net: mana: cleanup mana struct after debugfsremove When on a MANA VM hibernation is triggered, as part of hibernatesnapshot, managdsuspend and managdresume are called. If during this managdresume, a failure occurs with HWC...
UBUNTU-CVE-2025-21953
In the Linux kernel, the following vulnerability has been resolved: net: mana: cleanup mana struct after debugfsremove When on a MANA VM hibernation is triggered, as part of hibernatesnapshot, managdsuspend and managdresume are called. If during this managdresume, a failure occurs with HWC...
CVE-2025-21953
CVE-2025-21953 describes a Linux kernel issue in the mana subsystem (MANA VM) triggered during hibernation. If mana_gd_resume() fails while creating HWC, mana_port_debugfs is not reinitialized and may point to an older, cleaned-up dentry. Later in the hibernate path, during power_down(), mana_gd_...