Category
Virtualization
937 known vulnerabilities.
937 results · Feed
-
Medium 6.5
Password stored in plain text by Jenkins Proxmox Plugin
Jenkins Proxmox Plugin 0.5.0 and earlier stores the Proxmox Datacenter password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system.
-
Unscored —
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest drive…
-
Unscored —
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVR…
-
Unscored —
A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address…
-
Unscored —
An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx…
-
Unscored —
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virt…
-
Unscored —
A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-374…
-
Unscored —CVE-2021-3656 Public exploit
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VM…
-
Unscored —
An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_b…
-
Unscored —
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0. The issue o…
-
Unscored —
An integer overflow was found in the QEMU implementation of VMWare's paravirtual RDMA device in versions prior to 6.1.0…
-
Unscored —
A stack-buffer-overflow was found in QEMU in the NVME component. The flaw lies in nvme_changed_nslist() where a malicio…
-
Unscored —
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT command…
-
Unscored —
ESXi contains a slow HTTP POST denial-of-service vulnerability in rhttpproxy. A malicious actor with network access to …
-
Unscored —
VMware ESXi contains a TOCTOU (Time-of-check Time-of-use) vulnerability that exists in the way temporary files are hand…
-
Unscored —
VMware ESXi contains an unauthorized access vulnerability due to VMX having access to settingsd authorization tickets. …
-
Unscored —
VMware ESXi, Workstation, and Fusion contain a double-fetch vulnerability in the UHCI USB controller. A malicious actor…
-
Unscored —
VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious act…
-
Unscored —
A NULL pointer dereference issue was found in the block mirror layer of QEMU in versions prior to 6.2.0. The `self` poi…
-
Unscored —
Insufficient cleanup of passed-through device IRQs The management of IRQs associated with physical devices exposed to x…
-
Unscored —
A PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappin…
-
Unscored —
arm: guest_physmap_remove_page not removing the p2m mappings The functions to remove one or more entries from a guest p…
-
Medium 6.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Low 3.8
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Unscored —
VMware ESXi (7.0, 6.7 before ESXi670-202111101-SG and 6.5 before ESXi650-202110101-SG), VMware Workstation (16.2.0) and…
-
Unscored —
grant table v2 status pages may remain accessible after de-allocation (take two) Guest get permitted access to certain …
-
Unscored —
The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client…
-
Unscored —CVE-2021-21980 Public exploit
The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability. A malicious actor with …
-
Unscored —
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text exp…
-
Unscored —
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspect…
-
Unscored —
issues with partially successful P2M updates on x86 T[his CNA information record relates to multiple CVEs; the text exp…
-
Unscored —
guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be a…
-
Unscored —
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspect…
-
Unscored —
PoD operations on misaligned GFNs T[his CNA information record relates to multiple CVEs; the text explains which aspect…
-
Unscored —
certain VT-d IOMMUs may not work in shared page table mode For efficiency reasons, address translation control structur…
-
Unscored —CVE-2021-22048 EPSS 10%
The vCenter Server contains a privilege escalation vulnerability in the IWA (Integrated Windows Authentication) authent…
-
Medium 6.7
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Medium 4.4
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Medium 5.5
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
High 7.8
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…