OracleVM 3.4 : Unbreakable / etc (OVMSA-2019-0018) (MDSUM/RIDL) (MFBDS/RIDL/ZombieLoad) (MLPDS/RIDL) (MSBDS/Fallout)

The remote OracleVM system is missing necessary patches to address critical security updates : - x86/mds: Add empty commit for CVE-2019-11091 Konrad Rzeszutek Wilk Orabug: 29721935 CVE-2019-11091 - x86/microcode: Add loader version file in debugfs Boris Ostrovsky Orabug: 29754165 - x86/microcode:...

CVE-2019-9791

creationtimestamp| type| source ---|---|--- 2019-03-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46613 2019-03-31 06:29:47+00:00| seen| https://t.me/informationsecuritychannel/26012...

CVE-2019-6974

creationtimestamp| type| source ---|---|--- 2019-02-15 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46388...

CVE-2019-0672

creationtimestamp| type| source ---|---|--- 2019-02-13 14:35:53+00:00| seen| MISP/5c642a56-2440-4af0-8bfd-6e4a0a021402...

CVE-2018-8567

creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:01+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402...

CVE-2018-17382

creationtimestamp| type| source ---|---|--- 2018-09-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45469...

CVE-2018-1756

creationtimestamp| type| source ---|---|--- 2018-09-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45392...

CVE-2018-0708

creationtimestamp| type| source ---|---|--- 2018-07-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45015 2024-10-10 11:12:45+00:00| seen| https://t.me/CyberSecurityTechnologies/156...

CVE-2025-25034

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/sugarcrmrestunserializeexec.rb 2025-06-20 21:52:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls2zk7zhpo2q...

CVE-2015-10135

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpwpshopecommercefileupload.rb 2025-07-19 12:41:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lucybj5lzl2b...

CVE-2013-10052

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/zpanelzsudo.rb 2025-08-04 21:56:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvm6r6zzva2s 2025-10-23...

CVE-2018-7286

creationtimestamp| type| source ---|---|--- 2018-02-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44181...

CVE-2018-6227

creationtimestamp| type| source ---|---|--- 2018-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44166...

CVE-2018-1201

creationtimestamp| type| source ---|---|--- 2018-02-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44039...

Unbreakable Enterprise kernel security update

2.6.39-400.298.2 - x86: Use PREDCMD MSR when ibpb is enabled Konrad Rzeszutek Wilk Orabug: 27369777 CVE-2017-5715 CVE-2017-5753 - x86/spec: Dont print the Missing arguments for option spectrev2 Konrad Rzeszutek Wilk Orabug: 27369777 CVE-2017-5715 CVE-2017-5753 - x86: Move ENABLEIBRS in the...

CVE-2018-0752

creationtimestamp| type| source ---|---|--- 2018-01-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43516...

CVE-2017-2055

...

CVE-2017-11839

creationtimestamp| type| source ---|---|--- 2017-11-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43180...

CVE-2017-13798

creationtimestamp| type| source ---|---|--- 2017-11-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43175...

CVE-2017-14491

creationtimestamp| type| source ---|---|--- 2017-10-02 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42941 2020-10-14 14:43:01+00:00| seen| https://t.me/icscert/348...