CVE-2014-2477: Undefined Security Weakness

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2486...

CVE-2014-4261: Undefined Security Weakness

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than...

PT-2014-4733

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 3.2.24 Oracle VM VirtualBox versions prior to 4.0.26 Oracle VM VirtualBox versions prior to 4.1.34 Oracle VM VirtualBox versions prior to 4.2.26 Oracle VM VirtualBox versions prior to 4.3.12 Description T...

PT-2014-4725

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 3.2.24 Oracle VM VirtualBox versions prior to 4.0.26 Oracle VM VirtualBox versions prior to 4.1.34 Oracle VM VirtualBox versions prior to 4.2.26 Oracle VM VirtualBox versions prior to 4.3.12 Description T...

PT-2014-4732

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 3.2.24 Oracle VM VirtualBox versions prior to 4.0.26 Oracle VM VirtualBox versions prior to 4.1.34 Oracle VM VirtualBox versions prior to 4.2.26 Oracle VM VirtualBox versions prior to 4.3.12 Description T...

PT-2014-4731

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 3.2.24 Oracle VM VirtualBox versions prior to 4.0.26 Oracle VM VirtualBox versions prior to 4.1.34 Oracle VM VirtualBox versions prior to 4.2.26 Oracle VM VirtualBox versions prior to 4.3.14 Description T...

PT-2014-4730

Name of the Vulnerable Software and Affected Versions Oracle VM VirtualBox versions prior to 3.2.24 Oracle VM VirtualBox versions prior to 4.0.26 Oracle VM VirtualBox versions prior to 4.1.34 Oracle VM VirtualBox versions prior to 4.2.26 Oracle VM VirtualBox versions prior to 4.3.12 Description T...

Oracle VM VirtualBox < 3.2.24 / 4.0.26 / 4.1.34 / 4.2.26 / 4.3.14 Multiple Unspecified Vulnerabilities

The remote host contains a version of Oracle VM VirtualBox that is prior to 3.2.24, 4.0.26, 4.1.34, 4.2.26 or 4.3.14. It is, therefore, affected by the following vulnerabilities : - An unspecified flaw relating to the Core subcomponent that may allow a local attacker to gain elevated privileges...

CVE-2014-0184

Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file...

Default credentials

Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file...

CVE-2014-0184

Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file...

PT-2014-3523 · Red Hat · Red Hat Cloudforms

Name of the Vulnerable Software and Affected Versions: Red Hat CloudForms versions prior to 5.2.4.2 Description: The issue allows local users to obtain sensitive information, specifically the root password, by reading the evm.log file when deploying a VM. This occurs because the root password is...

CVE-2014-4565: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in vcc.js.php in the Verification Code for Comments plugin 2.1.0 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 vp, 2 vs, 3 l, 4 vu, or 5 vm parameter...

PT-2014-5980

Name of the Vulnerable Software and Affected Versions Verification Code for Comments plugin versions 2.1.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the vp, vs, l, vu, or vm parameters in the vcc.js.php file. This can lead to cross-site...

VM Turbo Operations Manager 4.5x - Directory Traversal

No description provided by source...

Oracle VM VirtualBox 4.1 - Local Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/55471/info Oracle VM VirtualBox is prone to a local denial-of-service vulnerability. Attackers can exploit this issue to cause denial-of-service conditions. / This software is provided by the copyright owner as is and any...

GroundWork monarch_scan.cgi OS Command Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Oracle VM Server Virtual Server Agent Command Injection

No description provided by source. $Id: oraclevmagentutl.rb 10821 2010-10-25 20:58:49Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms o...

vm watermark for gallery 0.4.1 - Remote File Inclusion Vulnerability

No description provided by source. vm watermark mod 0.4.1 Remote file include Download script : http://gallery.menalto.com/files/vm-watermarkmod-0.4.1.zip Thanks to str0ke Exploit : http://www.site.com/path/watermark.php?GALLERYBASEDIR=shell.txt? Discovered by : ThE TiGeR...

CFME: root password is written to evm.log when entered during VM provisioning

Red Hat CloudForms 3.0 Management Engine CFME before 5.2.4.2 logs the root password when deploying a VM, which allows local users to obtain sensitive information by reading the evm.log file...