8616 matches found
UBUNTU-CVE-2017-3290
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wher...
Buffer overflow
Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...
CVE-2017-3290
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wher...
Buffer overflow
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2016-5545
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...
CVE-2017-3316
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2017-3290
CVE-2017-3290 affects Oracle VM VirtualBox Shared Folder subcomponent. Affected versions are VirtualBox prior to 5.0.32 and prior to 5.1.14. An attacker with high privileges and local access can exploit this to cause unauthorized data access or modification and to trigger a hang/crash (partial or...
CVE-2017-3316
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2017-3316
CVE-2017-3316 affects the GUI subcomponent of Oracle VM VirtualBox. A high-privileged attacker with network access via multiple protocols can compromise VirtualBox; successful attacks may lead to takeover. Affected versions include VirtualBox < 5.0.32 and
CVE-2017-3332
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: VirtualBox SVGA Emulation. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the...
CVE-2017-3242
Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...
CVE-2017-3242
CVE-2017-3242 affects Oracle VM Server for Sparc (LDOM Manager subcomponent). Affected: 3.2 and 3.4. Vulnerability allows a low-privileged user with logon to the infrastructure to compromise the server; successful attacks require user interaction and may cause a hang or frequent crashes (partial/...
CVE-2016-5545
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...
CVE-2016-5545
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...
CVE-2017-3332
CVE-2017-3332 affects Oracle VM VirtualBox SVGA Emulation in VirtualBox prior to 5.0.32 and prior to 5.1.14. A low-privilege, local attacker can compromise VirtualBox data or cause a hang/crash (DOS). CVSSv3 base score 8.4 (HIGH) with integrity and availability impact. Remediations cited in conne...
CVE-2017-3316
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...
CVE-2016-5545
CVE-2016-5545 affects Oracle VM VirtualBox GUI. Affected: VirtualBox before 5.0.32 and before 5.1.14 (and related components). Attack vector: network access via HTTP; unauthenticated, with required user interaction. Impact: unauthorized update/insert/delete and read access to VirtualBox data; par...
CVE-2016-5545
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...
CVE-2017-3332
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: VirtualBox SVGA Emulation. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the...
Oracle VM VirtualBox < 5.0.32 / < 5.1.14 - Local Privilege Escalation
== Overview === System affected: VirtualBox Software-Version: prior to 5.0.32, prior to 5.1.14 User-Interaction: Required Impact: A Man-In-The-Middle could infiltrate an Extension-Pack-Update to gain a root-shell === Detailed description === In my research about update mechanism of open-source...