Lucene search

K
OracleVm Virtualbox5.0.0

31 matches found

CVE
CVE
added 2018/10/29 1:29 p.m.526 views

CVE-2018-0735

The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).

5.9CVSS5.7AI score0.06784EPSS
CVE
CVE
added 2015/11/16 11:59 a.m.234 views

CVE-2015-8104

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB (aka Debug) exceptions, related to svm.c.

10CVSS5.3AI score0.00346EPSS
CVE
CVE
added 2015/12/06 8:59 p.m.191 views

CVE-2015-3195

The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by...

5.3CVSS6.3AI score0.02942EPSS
CVE
CVE
added 2019/07/23 11:15 p.m.190 views

CVE-2019-2866

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

8.2CVSS8.2AI score0.00067EPSS
CVE
CVE
added 2019/07/23 11:15 p.m.185 views

CVE-2019-2859

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

8.8CVSS8.5AI score0.00061EPSS
CVE
CVE
added 2019/07/23 11:15 p.m.174 views

CVE-2019-2863

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

6.5CVSS6.7AI score0.00048EPSS
CVE
CVE
added 2015/11/16 11:59 a.m.158 views

CVE-2015-5307

The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #AC (aka Alignment Check) exceptions, related to svm.c and vmx.c.

4.9CVSS6.1AI score0.00169EPSS
CVE
CVE
added 2015/12/06 8:59 p.m.146 views

CVE-2015-3196

ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes the PSK identity hint to an incorrect data structure, which allows remote servers to cause a denial of service (race condition and double free) via a crafted Ser...

4.3CVSS6.2AI score0.0568EPSS
CVE
CVE
added 2019/07/23 11:15 p.m.139 views

CVE-2019-2848

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

6.5CVSS6.9AI score0.0006EPSS
CVE
CVE
added 2019/07/23 11:15 p.m.138 views

CVE-2019-2867

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

8.2CVSS8.2AI score0.00084EPSS
CVE
CVE
added 2019/07/23 11:15 p.m.133 views

CVE-2019-2864

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Virtua...

7.5CVSS7.8AI score0.00067EPSS
CVE
CVE
added 2019/07/23 11:15 p.m.133 views

CVE-2019-2865

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Virtua...

7.5CVSS7.8AI score0.00067EPSS
CVE
CVE
added 2019/07/23 11:15 p.m.123 views

CVE-2019-2850

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

2.8CVSS3.9AI score0.00166EPSS
CVE
CVE
added 2016/01/21 3:0 a.m.111 views

CVE-2016-0495

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and 5.0.14 allows remote attackers to affect availability via unknown vectors related to Core.

4.3CVSS4.8AI score0.01001EPSS
CVE
CVE
added 2015/10/21 9:59 p.m.110 views

CVE-2015-4813

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core.

2.1CVSS5.3AI score0.00056EPSS
CVE
CVE
added 2016/01/21 3:2 a.m.109 views

CVE-2016-0592

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors related to Core.

2.1CVSS6.3AI score0.00091EPSS
CVE
CVE
added 2016/10/25 2:31 p.m.106 views

CVE-2016-5610

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core.

6.8CVSS6.1AI score0.00066EPSS
CVE
CVE
added 2017/04/24 7:59 p.m.105 views

CVE-2017-3558

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM Virtua...

8.5CVSS8AI score0.00157EPSS
CVE
CVE
added 2017/04/24 7:59 p.m.104 views

CVE-2017-3576

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Virtual...

8.8CVSS8.5AI score0.00221EPSS
CVE
CVE
added 2017/04/24 7:59 p.m.100 views

CVE-2017-3561

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Virtual...

8.8CVSS8.5AI score0.00221EPSS
CVE
CVE
added 2017/04/24 7:59 p.m.100 views

CVE-2017-3575

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Virtua...

7.9CVSS7.7AI score0.00525EPSS
CVE
CVE
added 2017/04/24 7:59 p.m.98 views

CVE-2017-3563

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Virtual...

8.8CVSS8.5AI score0.00212EPSS
CVE
CVE
added 2016/10/25 2:29 p.m.97 views

CVE-2016-5501

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality, integrity, and availability via vectors related to Core, a different vulnerability than CVE-2016-5538.

7.8CVSS6.1AI score0.00138EPSS
CVE
CVE
added 2015/10/21 11:59 p.m.96 views

CVE-2015-4896

Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when a VM has the Remote Display feature (RDP) enabled, allows remote attackers to affect availability via unknown vectors related to Core.

5CVSS5.8AI score0.01662EPSS
CVE
CVE
added 2016/10/25 2:31 p.m.96 views

CVE-2016-5611

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.

4.3CVSS4.5AI score0.00103EPSS
CVE
CVE
added 2017/01/27 10:59 p.m.95 views

CVE-2016-5545

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: GUI). Supported versions that are affected are VirtualBox prior to 5.0.32 and prior to 5.1.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

6.8CVSS6AI score0.00571EPSS
CVE
CVE
added 2017/04/24 7:59 p.m.95 views

CVE-2017-3587

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Shared Folder). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle V...

8.4CVSS8.2AI score0.00265EPSS
CVE
CVE
added 2017/04/24 7:59 p.m.94 views

CVE-2017-3513

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM Virtua...

2.5CVSS3.6AI score0.00066EPSS
CVE
CVE
added 2016/10/25 2:31 p.m.93 views

CVE-2016-5613

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5608.

4.3CVSS4.9AI score0.00147EPSS
CVE
CVE
added 2016/10/25 2:31 p.m.92 views

CVE-2016-5608

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect availability via vectors related to Core, a different vulnerability than CVE-2016-5613.

5.5CVSS4.8AI score0.00147EPSS
CVE
CVE
added 2017/04/24 7:59 p.m.91 views

CVE-2017-3559

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Virtual...

7.9CVSS7.6AI score0.00063EPSS