Category
Virtualization
937 known vulnerabilities.
937 results · Feed
-
Medium 4.4
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Unscored —
PCI devices with RMRRs not deassigned correctly Certain PCI devices in a system might be assigned Reserved Memory Regio…
-
Unscored —
The vCenter Server contains a denial-of-service vulnerability in the Analytics service. Successful exploitation of this…
-
Unscored —
The vCenter Server contains a denial-of-service vulnerability in VAPI (vCenter API) service. A malicious actor with net…
-
Unscored —
The vCenter Server contains an arbitrary file deletion vulnerability in a VMware vSphere Life-cycle Manager plug-in. A …
-
Medium 5.3
Rhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A mal…
KEV Jan 10, 2022 -
Unscored —
The vCenter Server contains a reflected cross-site scripting vulnerability due to a lack of input sanitization. An atta…
-
Unscored —
The vCenter Server contains an authenticated code execution vulnerability in VAMI (Virtual Appliance Management Infrast…
-
Unscored —
The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance mana…
-
Unscored —
The vCenter Server contains an information disclosure vulnerability due to an unauthenticated appliance management API.…
-
Unscored —
vCenter Server contains an unauthenticated API endpoint vulnerability in vCenter Server Content Library. A malicious ac…
-
Unscored —
The vCenter Server contains a denial-of-service vulnerability in VPXD service. A malicious actor with network access to…
-
Unscored —
The vCenter Server contains multiple denial-of-service vulnerabilities in VAPI (vCenter API) service. A malicious actor…
-
Unscored —
The vCenter Server contains an information disclosure vulnerability in VAPI (vCenter API) service. A malicious actor wi…
-
Unscored —
The vCenter Server contains a local information disclosure vulnerability in the Analytics service. An authenticated use…
-
Unscored —CVE-2021-22006 Public exploit
The vCenter Server contains a reverse proxy bypass vulnerability due to the way the endpoints handle the URI. A malicio…
-
Critical 9.8
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with net…
KEV Nov 3, 2021 -
Unscored —
The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in v…
-
Unscored —CVE-2021-22015 Public exploit
The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files an…
-
Unscored —
The vCenter Server contains a denial-of-service vulnerability due to improper XML entity parsing. A malicious actor wit…
-
Unscored —
The vCenter Server contains a local privilege escalation vulnerability due to the way it handles session tokens. A mali…
-
Unscored —
VMware ESXi (6.7 before ESXi670-202006401-SG and 6.5 before ESXi650-202005401-SG), Workstation (15.x before 15.5.5), an…
-
Unscored —
Another race in XENMAPSPACE_grant_table handling Guests are permitted access to certain Xen-owned pages of memory. The …
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
IOMMU page mapping issues on x86 T[his CNA information record relates to multiple CVEs; the text explains which aspects…
-
Unscored —
grant table v2 status pages may remain accessible after de-allocation Guest get permitted access to certain Xen-owned p…
-
Unscored —
long running loops in grant table handling In order to properly monitor resource use, Xen maintains information on the …
-
Unscored —
inadequate grant-v2 status frames array bounds check The v2 grant table interface separates grant attributes from grant…
-
Unscored —
xen/arm: No memory limit for dom0less domUs The dom0less feature allows an administrator to create multiple unprivilege…
-
Unscored —
An out-of-bounds write flaw was found in the UAS (USB Attached SCSI) device emulation of QEMU in versions prior to 6.2.…
-
Unscored —
A flaw was found in the USB redirector device emulation of QEMU in versions prior to 6.1.0-rc2. It occurs when dropping…
-
High 7.0
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
High 7.3
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Medium 6.0
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
High 8.2
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
Unscored —
OpenSLP as used in ESXi has a denial-of-service vulnerability due a heap out-of-bounds read issue. A malicious actor wi…
-
Unscored —CVE-2021-21994 Public exploit
SFCB (Small Footprint CIM Broker) as used in ESXi has an authentication bypass vulnerability. A malicious actor with ne…
-
Unscored —
xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary…
-
Unscored —
inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operat…