Sun Virtualbox vulnerabilities
153 known vulnerabilities affecting sun/virtualbox.
Total CVEs
153
CISA KEV
0
Public exploits
15
Exploited in wild
0
Severity breakdown
HIGH70MEDIUM54LOW29
Vulnerabilities
Page 8 of 8
CVE-2014-6595P4LOWCVSS 3.2≥ 0, < 4.3.10-dfsg-1ubuntu22015-01-21
CVE-2014-6595 [LOW] CVE-2014-6595: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2015-0427.
osv
CVE-2015-0427P4LOWCVSS 3.2≥ 0, < 4.3.10-dfsg-1ubuntu22015-01-21
CVE-2015-0427 [LOW] CVE-2015-0427: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595.
osv
CVE-2014-6588P4LOWCVSS 3.2≥ 0, < 4.3.10-dfsg-1ubuntu22015-01-21
CVE-2014-6588 [LOW] CVE-2014-6588: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6589, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427.
osv
CVE-2020-2909P4LOWCVSS 2.8≥ 0, < 6.1.16-dfsg-6~ubuntu1.20.04.12020-04-15
CVE-2020-2909 [LOW] CVE-2020-2909: Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core)
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful atta
osv
CVE-2019-2850P4LOWCVSS 2.8≥ 0, < 6.1.16-dfsg-6~ubuntu1.20.04.12019-07-23
CVE-2019-2850 [LOW] CVE-2019-2850: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.2.32 and prior to 6.0.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks re
osv
CVE-2014-0404P4LOWCVSS 2.4≥ 0, < 4.3.10-dfsg-12014-01-15
CVE-2014-0404 [LOW] CVE-2014-0404: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0406.
osv
CVE-2014-0406P4LOWCVSS 2.4≥ 0, < 4.3.10-dfsg-12014-01-15
CVE-2014-0406 [LOW] CVE-2014-0406: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect integrity and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0404.
osv
CVE-2015-4813P4LOWCVSS 2.1≥ 0, < 4.3.34-dfsg-1+deb8u1ubuntu1.14.04.12015-10-21
CVE-2015-4813 [LOW] CVE-2015-4813: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.0.34, 4.1.42, 4.2.34, 4.3.32, and 5.0.8, when using a Windows guest, allows local users to affect availability via unknown vectors related to Core.
osv
CVE-2009-3940P4LOWCVSS 2.1≤ 3.0.8v2.0.8+7 more2009-11-16
CVE-2009-3940 [LOW] CVE-2009-3940: Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.
Unspecified vulnerability in Guest Additions in Sun xVM VirtualBox 1.6.x and 2.0.x before 2.0.12, 2.1.x, and 2.2.x, and Sun VirtualBox before 3.0.10, allows guest OS users to cause a denial of service (memory consumption) on the guest OS via unknown vectors.
nvd
CVE-2014-2488P4LOWCVSS 1.0≥ 0, < 4.3.34-dfsg-1+deb8u1ubuntu1.14.04.12014-07-17
CVE-2014-2488 [LOW] CVE-2014-2488: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core.
osv
CVE-2013-0420P4LOWCVSS 2.4≥ 0, < 4.3.10-dfsg-12013-01-17
CVE-2013-0420 [LOW] CVE-2013-0420: Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4
Unspecified vulnerability in the VirtualBox component in Oracle Virtualization 4.0, 4.1, and 4.2 allows local users to affect integrity and availability via unknown vectors related to Core. NOTE: The previous information was obtained from the January 2013 Oracle CPU. Oracle has not commented on claims from another vendor that this issue is related to an incorrect comparison in the
osv
CVE-2017-3513P4LOWCVSS 2.5≥ 0, < 5.1.38-dfsg-0ubuntu1.16.04.12017-04-24
CVE-2017-3513 [LOW] CVE-2017-3513: Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.0.38 and Prior to 5.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerab
osv
CVE-2016-0592P4LOWCVSS 2.1≥ 0, < 4.3.36-dfsg-1+deb8u1ubuntu1.14.04.12016-01-21
CVE-2016-0592 [LOW] CVE-2016-0592: Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4
Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.36 and before 5.0.14 allows local users to affect availability via unknown vectors related to Core.
osv
← Previous8 / 8