Category
Virtualization
937 known vulnerabilities.
937 results · Feed
-
Medium 5.5
The vCenter Server contains an information disclosure vulnerability due to the logging of credentials in plaintext. A m…
-
Medium 5.3CVE-2022-31698 EPSS 48%
The vCenter Server contains a denial-of-service vulnerability in the content library service. A malicious actor with ne…
-
Medium 6.5
An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxl_phys2virt() function does not…
-
Medium 6.5
An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of…
-
High 8.6
An off-by-one read/write issue was found in the SDHCI device of QEMU. It occurs when reading/writing the Buffer Data Po…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
Xenstore: Guests can crash xenstored Due to a bug in the fix of XSA-115 a malicious guest can cause xenstored to use a …
-
Unscored —
Oxenstored 32->31 bit integer truncation issues Integers in Ocaml are 63 or 31 bits of signed precision. The Ocaml Xenb…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
Xenstore: Guests can create orphaned Xenstore nodes By creating multiple nodes inside a transaction resulting in an err…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVE…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Medium 5.5
Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple…
-
Unscored —
Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
High 7.1
x86: unintended memory sharing between guests On Intel systems that support the "virtualize APIC accesses" feature, a g…
-
Unscored —
Xenstore: Guests can cause Xenstore to not free temporary memory When working on a request of a guest, xenstored might …
-
Unscored —
Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. Whe…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVE…
-
Unscored —
Xenstore: Guests can crash xenstored via exhausting the stack Xenstored is using recursion for some Xenstore operations…
-
Medium 6.5
Xenstore: guests can let run xenstored out of memory T[his CNA information record relates to multiple CVEs; the text ex…
-
High 7.3
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 8.8
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 8.1CVE-2022-39425 Public exploit
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Medium 6.0
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 8.1
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 8.1
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 7.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Medium 4.4
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
High 7.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Medium 6.0
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Medium 6.5
An integer underflow issue was found in the QEMU VNC server while processing ClientCutText messages in the extended for…
-
Unscored —
Arm: unbounded memory consumption for 2nd-level page tables Certain actions require e.g. removing pages from a guest's …
-
Unscored —
P2M pool freeing may take excessively long The P2M pool backing second level address translation for guests may be of s…
-
Unscored —
lock order inversion in transitive grant copy handling As part of XSA-226 a missing cleanup call was inserted on an err…
-
Unscored —CVE-2022-31680 EPSS 31%
The vCenter Server contains an unsafe deserialisation vulnerability in the PSC (Platform services controller). A malici…
-
Unscored —
VMware ESXi contains a null-pointer deference vulnerability. A malicious actor with privileges within the VMX process o…