CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-3597
https://notcve.org/view.php?id=CVE-2016-3597
21 Jul 2016 — Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.26 allows local users to affect availability via vectors related to Core. Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox en versiones anteriores a 5.0.26 permite a usuarios locales afectar la disponibilidad relacionada con Core. • http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2016-0602 – Oracle Java 6/7/8 / VirtualBox DLL Hijacking
https://notcve.org/view.php?id=CVE-2016-0602
21 Jan 2016 — Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 5.0.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Windows Installer. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is an untrusted search path issue that allows local users to gain privileges via a Trojan horse dll in the "application directory." Vulnerabilidad no especi... • http://seclists.org/fulldisclosure/2016/Feb/54 •
CVSS: 5.3EPSS: 4%CPEs: 56EXPL: 1CVE-2015-3195 – OpenSSL: X509_ATTRIBUTE memory leak
https://notcve.org/view.php?id=CVE-2015-3195
03 Dec 2015 — The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application. La implementación ASN1_TFLG_COMBINE en crypto/asn1/tasn_dec.c en OpenSSL en versiones anteriores a 0.9.8zh, 1.0.0 en versiones anteriores a 1.0.0t, 1.... • https://github.com/Trinadh465/OpenSSL-1_0_1g_CVE-2015-3195 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 10.0EPSS: 97%CPEs: 33EXPL: 39CVE-2015-0235 – Exim ESMTP 4.80 - glibc gethostbyname Denial of Service
https://notcve.org/view.php?id=CVE-2015-0235
27 Jan 2015 — Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST." Desbordamiento de buffer basado en memoria dinámica en la función __nss_hostname_digits_dots en glibc 2.2, y otras versiones 2.x anteriores a 2.18, permite a atacantes dependientes de contexto ejecutar código arbitrario a través de vectores ... • https://packetstorm.news/files/id/181060 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0427 – Gentoo Linux Security Advisory 201612-27
https://notcve.org/view.php?id=CVE-2015-0427
21 Jan 2015 — Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2014-6595. Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox anterior a 4.3.20 permite a usuarios locales afectar la integridad y la disponibilida... • http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html •
CVSS: 2.1EPSS: 0%CPEs: 62EXPL: 0CVE-2015-0418 – Gentoo Linux Security Advisory 201612-27
https://notcve.org/view.php?id=CVE-2015-0418
21 Jan 2015 — Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0377. Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox anterior a 3.2.26, 4.0.28, 4.1.36, y 4.2.28 permite a usuarios locales afectar la disponibilidad a través de vectores relacionados con Cor... • http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html •
CVSS: 4.4EPSS: 0%CPEs: 62EXPL: 0CVE-2015-0377 – Gentoo Linux Security Advisory 201612-27
https://notcve.org/view.php?id=CVE-2015-0377
21 Jan 2015 — Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418. Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox anterior a 3.2.26, 4.0.28, 4.1.36, y 4.2.28 permite a usuarios locales afectar la disponibilidad a través de vectores desconocidos relacio... • http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2014-6595 – Gentoo Linux Security Advisory 201612-27
https://notcve.org/view.php?id=CVE-2014-6595
21 Jan 2015 — Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6589, CVE-2014-6590, and CVE-2015-0427. Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox anterior a 4.3.20 permite a usuarios locales afectar la integridad y disponibilidad a t... • http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2014-6589 – Gentoo Linux Security Advisory 201612-27
https://notcve.org/view.php?id=CVE-2014-6589
21 Jan 2015 — Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6588, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427. Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox anterior a 4.3.20 permite a usuarios locales afectar la integridad y disponibilidad a t... • http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html •
CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0CVE-2014-6588 – Gentoo Linux Security Advisory 201612-27
https://notcve.org/view.php?id=CVE-2014-6588
21 Jan 2015 — Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 4.3.20 allows local users to affect integrity and availability via vectors related to VMSVGA virtual graphics device, a different vulnerability than CVE-2014-6589, CVE-2014-6590, CVE-2014-6595, and CVE-2015-0427. Vulnerabilidad no especificada en el componente Oracle VM VirtualBox en Oracle Virtualization VirtualBox anterior a 4.3.20 permite a usuarios locales afectar la integridad y disponibilidad a t... • http://lists.opensuse.org/opensuse-updates/2015-02/msg00030.html •