CVE-2016-5545

CVE-2016-5545 affects Oracle VM VirtualBox GUI. Affected: VirtualBox before 5.0.32 and before 5.1.14 (and related components). Attack vector: network access via HTTP; unauthenticated, with required user interaction. Impact: unauthorized update/insert/delete and read access to VirtualBox data; par...

CVE-2016-5545

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2017-3332

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: VirtualBox SVGA Emulation. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the...

CVE-2016-5545

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

CVE-2017-3290

CVE-2017-3290 affects Oracle VM VirtualBox Shared Folder subcomponent. Affected versions are VirtualBox prior to 5.0.32 and prior to 5.1.14. An attacker with high privileges and local access can exploit this to cause unauthorized data access or modification and to trigger a hang/crash (partial or...

CVE-2017-3316

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2017-3316

CVE-2017-3316 affects the GUI subcomponent of Oracle VM VirtualBox. A high-privileged attacker with network access via multiple protocols can compromise VirtualBox; successful attacks may lead to takeover. Affected versions include VirtualBox < 5.0.32 and

CVE-2017-3290: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Shared Folder. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure wher...

CVE-2017-3316: Improper Input Validation

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

PT-2017-15720

Name of the Vulnerable Software and Affected Versions Oracle VM Server for Sparc versions 3.2 and 3.4 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM Server for Sparc executes to compromise Oracle VM Server for Sparc. Successful attacks...

CVE-2017-3332: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: VirtualBox SVGA Emulation. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows low privileged attacker with logon to the...

PT-2017-15754

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.32 Oracle VM VirtualBox versions prior to 5.1.14 Description The issue allows a high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

CVE-2016-5545: Undefined Security Weakness

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: GUI. Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

Oracle VM VirtualBox < 5.0.32 / < 5.1.14 - Local Privilege Escalation

== Overview === System affected: VirtualBox Software-Version: prior to 5.0.32, prior to 5.1.14 User-Interaction: Required Impact: A Man-In-The-Middle could infiltrate an Extension-Pack-Update to gain a root-shell === Detailed description === In my research about update mechanism of open-source...

CVE-2017-3242: Improper Input Validation

Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...

PT-2017-15788

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.32 Oracle VM VirtualBox versions prior to 5.1.14 Description The issue allows a low-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM...

PT-2017-15776

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.32 Oracle VM VirtualBox versions prior to 5.1.14 Description The issue allows a high privileged attacker with network access via multiple protocols to compromise Oracle VM VirtualBox. Successful attac...

PT-2017-1151

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 5.0.32 Oracle VM VirtualBox versions prior to 5.1.14 Description The issue is related to the GUI component of Oracle VM VirtualBox and is caused by security configuration errors. It allows an...

Oracle VM Server for Sparc Denial of Service Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Oracle VM Server for SPARC formerly known as Sun Logical Domains is a SPARC virtual machine hypervisor used to run multiple simultaneous OS instances on a single SPARC T-Series server. VM Server for SPARC...

Oracle VM VirtualBox Local Vulnerability (CNVD-2017-00973)

Oracle VM VirtualBox is an open source virtual machine software from Oracle USA. A local security vulnerability exists in Oracle VM VirtualBox versions prior to 5.0.32 and prior to 5.1.14. An attacker could exploit this vulnerability to affect the integrity and availability of data...