Category
Virtualization
937 known vulnerabilities.
937 results · Feed
-
Medium 5.4
Privilege Escalation Vulnerability in Hitachi Storage Plug-in for VMware vCenter
Incorrect Privilege Assignment vulnerability in Hitachi Hitachi Storage Plug-in for VMware vCenter allows remote authenticated users to cause privilege escalation.This issue affects Hitachi Storage Plug-in for VMware vCenter: from 04.8.0 before 04.9.0.
-
High 7.8
A DMA reentrancy issue was found in the Tulip device emulation in QEMU. When Tulip reads or writes to the rx/tx descrip…
-
Unscored —
A NULL pointer dereference issue was found in KVM when releasing a vCPU with dirty ring support enabled. This flaw allo…
-
Unscored —
A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly rela…
-
Unscored —
A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset (ahci_reset_port) while…
-
Unscored —
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs whi…
-
Unscored —CVE-2021-3929 Public exploit
A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation in QEMU. This CVE is similar to CVE-202…
-
Unscored —
A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest coul…
-
Unscored —
An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer…
-
Unscored —
insufficient TLB flush for x86 PV guests in shadow mode For migration as well as to work around kernels unaware of L1TF…
-
High 8.2
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Medium 4.4
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Unscored —
The vCenter Server contains a server-side request forgery (SSRF) vulnerability. A malicious actor with network access t…
-
Unscored —
Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspe…
-
Unscored —
Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspe…
-
Unscored —
Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspe…
-
Unscored —
Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspe…
-
Unscored —
x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular …
-
Unscored —
x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text ex…
-
Unscored —
A stack overflow vulnerability was found in the Intel HD Audio device (intel-hda) of QEMU. A malicious guest could use …
-
Unscored —
A DMA reentrancy issue was found in the USB EHCI controller emulation of QEMU. EHCI does not verify if the Buffer Point…
-
Unscored —
A flaw was found in the QXL display device emulation in QEMU. An integer overflow in the cursor_alloc() function can le…
-
Unscored —
A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header…
-
High 7.8
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Low 3.8
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Low 3.8
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Medium 6.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Medium 6.7
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Unscored —
Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_…
-
Unscored —
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the te…
-
Unscored —
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the te…
-
Unscored —
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the te…
-
Unscored —
race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bit…
-
Unscored —
IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the te…
-
Unscored —
It was discovered that the update for the virt:rhel module in the RHSA-2020:4676 (https://access.redhat.com/errata/RHSA…
-
Medium 6.5
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious ac…
KEV Jul 17, 2024 -
Medium 6.5
Missing permission checks in Jenkins Proxmox Plugin
Jenkins Proxmox Plugin 0.7.0 and earlier does not perform a permission check in several HTTP endpoints, allowing attackers with Overall/Read permission to connect to an attacker-specified host using attacker-specified username and password (perform a connecti…
-
Medium 6.5
CSRF vulnerability in Proxmox Plugin
A cross-site request forgery (CSRF) vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-specified host using attacker-specified username and password (perform a connection test), disable SSL/TLS validation for …
-
Medium 4.8
SSL/TLS certificate validation globally disabled by Jenkins Proxmox Plugin
Jenkins Proxmox Plugin 0.6.0 and earlier disables SSL/TLS certificate validation globally for the Jenkins controller JVM when configured to ignore SSL/TLS issues.