ByteOS

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-5.5||MEDIUM

EPSS-0.08% / 23.49%

||

7 Day CHG~0.00%

Published-13 Dec, 2016 | 16:00

Updated-12 Apr, 2025 | 10:46

The C software implementation of AES Encryption and Decryption in wolfSSL (formerly CyaSSL) before 3.9.10 makes it easier for local users to discover AES keys by leveraging cache-bank timing differences.

Vendor-wolfssl n/a Debian GNU/Linux Oracle Corporation MariaDB Foundation

Product-debian_linux mariadb mysql wolfssl n/a

CVE-2016-5611

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.3||MEDIUM

EPSS-0.05% / 14.24%

||

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Oracle VM VirtualBox component before 5.0.28 and 5.1.x before 5.1.8 in Oracle Virtualization allows local users to affect confidentiality via vectors related to Core.

Product-vm_virtualbox n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-5505

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.80%

||

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the RDBMS Programmable Interface component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors.

Product-database_server n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-5517

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.06% / 19.09%

||

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Oracle Applications DBA component in Oracle E-Business Suite 12.1.3 allows local users to affect confidentiality via vectors related to AD Utilities.

Product-applications_dba n/a

CWE ID-CWE-284

Improper Access Control

CVE-2016-5499

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.05% / 15.81%

||

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5498.

Product-database_server n/a

CVE-2016-5498

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.05% / 13.97%

||

7 Day CHG~0.00%

Published-25 Oct, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and 12.1.0.2 allows local users to affect confidentiality via unknown vectors, a different vulnerability than CVE-2016-5499.

Product-database_server n/a

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2016-0454

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.16% / 36.66%

||

7 Day CHG~0.00%

Published-21 Jan, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Oracle Mobile Application Servlet component in Oracle E-Business Suite 12.1 and 12.2 allows local users to affect confidentiality via vectors related to MWA Server Manager.

Product-e-business_suite n/a

CVE-2016-0446

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.16% / 36.66%

||

7 Day CHG~0.00%

Published-21 Jan, 2016 | 02:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control 11.1.0.1, 11.2.0.4, 12.1.0.4, and 12.1.0.5 allows local users to affect confidentiality via unknown vectors related to Agent Next Gen.

Product-enterprise_manager_grid_control n/a

CVE-2021-2283

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.1||HIGH

EPSS-0.18% / 39.85%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:46

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2280

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.1||HIGH

EPSS-0.15% / 36.14%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:47

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2306

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.07% / 20.13%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:54

Updated-26 Sep, 2024 | 14:10

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2282

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.1||HIGH

EPSS-0.15% / 36.14%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:47

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2353

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-4.4||MEDIUM

EPSS-0.19% / 40.43%

||

7 Day CHG~0.00%

Published-20 Jul, 2021 | 22:43

Updated-26 Sep, 2024 | 14:03

Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Loging). Supported versions that are affected are 21.5 and Prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Siebel Core - Server Framework executes to compromise Siebel Core - Server Framework. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N).

Product-siebel_core_-_server_framework Siebel Core - Server Framework

CVE-2021-2266

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.07% / 21.89%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:47

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2321

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.16% / 36.60%

||

7 Day CHG~0.00%

Published-28 Apr, 2021 | 21:00

Updated-26 Sep, 2024 | 14:08

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-2287

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.1||HIGH

EPSS-0.18% / 39.85%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:12

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2285

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-7.1||HIGH

EPSS-0.18% / 39.85%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 14:12

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N).

CVE-2022-22478

Matching Score-8

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.Apple Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.2||MEDIUM

EPSS-0.05% / 16.74%

||

7 Day CHG~0.00%

Published-30 Jun, 2022 | 16:25

Updated-16 Sep, 2024 | 20:32

IBM Spectrum Protect Client 8.1.0.0 through 8.1.14.0 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 225886.

Product-solaris linux_kernel hp-ux windows spectrum_protect_client macos aix Spectrum Protect Client

CWE ID-CWE-312

Cleartext Storage of Sensitive Information

CVE-2022-21295

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.8||LOW

EPSS-0.05% / 14.72%

||

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:23

Updated-24 Sep, 2024 | 20:26

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).

CVE-2014-9584

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-2.1||LOW

EPSS-0.13% / 32.58%

||

7 Day CHG~0.00%

Published-09 Jan, 2015 | 21:00

Updated-12 Apr, 2025 | 10:46

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sensitive information from kernel memory via a crafted iso9660 image.

Vendor-n/a Linux Kernel Organization, Inc openSUSE SUSE Red Hat, Inc.Debian GNU/Linux Oracle Corporation Canonical Ltd.

CWE ID-CWE-20

Improper Input Validation

CVE-2021-21781

Matching Score-8

Assigner-Talos

Product-communications_cloud_native_core_binding_support_function communications_cloud_native_core_policy linux_kernel communications_cloud_native_core_network_exposure_function Linux Kernel

Matching Score-8

Assigner-Talos

CVSS Score-4||MEDIUM

EPSS-0.02% / 3.24%

||

7 Day CHG~0.00%

Published-18 Aug, 2021 | 14:37

Updated-03 Aug, 2024 | 18:23

An information disclosure vulnerability exists in the ARM SIGPAGE functionality of Linux Kernel v5.4.66 and v5.4.54. The latest version (5.11-rc4) seems to still be vulnerable. A userland application can read the contents of the sigpage, which can leak kernel memory contents. An attacker can read a process’s memory at a specific offset to trigger this vulnerability. This was fixed in kernel releases: 4.14.222 4.19.177 5.4.99 5.10.17 5.11

Vendor-n/a Linux Kernel Organization, Inc Oracle Corporation

CWE ID-CWE-908

Use of Uninitialized Resource

CVE-2015-2574

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.16% / 37.22%

||

7 Day CHG~0.00%

Published-16 Apr, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality via unknown vectors related to Text Utilities.

Product-solaris n/a

CVE-2015-2579

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.17% / 38.34%

||

7 Day CHG~0.00%

Published-16 Apr, 2015 | 16:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in the Oracle Health Sciences Argus Safety component in Oracle Health Sciences Applications 8.0 allows local users to affect confidentiality via vectors related to BIP Installer.

Product-health_sciences_applications n/a

CVE-2022-21394

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 31.58%

||

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:26

Updated-24 Sep, 2024 | 20:15

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2022-21268

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.07% / 21.07%

||

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:22

Updated-24 Sep, 2024 | 20:29

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Product-communications_billing_and_revenue_management Communications Billing and Revenue Management

CVE-2022-21461

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.10% / 28.73%

||

7 Day CHG~0.00%

Published-19 Apr, 2022 | 20:37

Updated-24 Sep, 2024 | 20:09

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Solaris accessible data. CVSS 3.1 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Product-solaris Solaris Operating System

CVE-2021-2119

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-3.80% / 87.82%

||

7 Day CHG~0.00%

Published-20 Jan, 2021 | 14:50

Updated-26 Sep, 2024 | 18:14

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2022-21487

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.8||LOW

EPSS-0.04% / 13.66%

||

7 Day CHG~0.00%

Published-19 Apr, 2022 | 20:38

Updated-24 Sep, 2024 | 20:06

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.34. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).

CVE-2022-21267

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.3||LOW

EPSS-0.07% / 21.07%

||

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:22

Updated-24 Sep, 2024 | 20:29

Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Product-communications_billing_and_revenue_management Communications Billing and Revenue Management

CVE-2021-2128

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.17% / 37.79%

||

7 Day CHG~0.00%

Published-20 Jan, 2021 | 14:50

Updated-26 Sep, 2024 | 18:12

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-2123

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-3.2||LOW

EPSS-0.05% / 14.89%

||

7 Day CHG~0.00%

Published-20 Jan, 2021 | 14:50

Updated-26 Sep, 2024 | 18:13

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N).

CVE-2021-2120

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.16% / 36.59%

||

7 Day CHG~0.00%

Published-20 Jan, 2021 | 14:50

Updated-26 Sep, 2024 | 18:14

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

CVE-2021-20191

Matching Score-8

Assigner-Red Hat, Inc.

Product-cisco_nx-os_collection virtualization google_cloud_platform_ansible_collection community_general_collection ansible docker_community_collection community_network_collection ansible_tower ansible

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-5.5||MEDIUM

EPSS-0.04% / 11.15%

||

7 Day CHG~0.00%

Published-26 May, 2021 | 00:00

Updated-03 Aug, 2024 | 17:30

A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage of this information to steal those credentials. The highest threat from this vulnerability is to data confidentiality. Versions before ansible 2.9.18 are affected.

Vendor-n/a Oracle Corporation Red Hat, Inc.

CWE ID-CWE-532

Insertion of Sensitive Information into Log File

CVE-2021-2042

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.3||LOW

EPSS-0.10% / 28.02%

||

7 Day CHG~0.00%

Published-20 Jan, 2021 | 14:50

Updated-26 Sep, 2024 | 18:36

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Vendor-NetApp, Inc.Oracle Corporation

Product-oncommand_insight mysql oncommand_workflow_automation snapcenter MySQL Server

CVE-2016-5452

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.10% / 26.49%

||

7 Day CHG~0.00%

Published-21 Jul, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality via vectors related to Verified Boot.

Product-solaris n/a

CVE-2022-0002

Matching Score-8

Assigner-Intel Corporation

Product-celeron_g5900t atom_c3950 xeon_gold_5215 core_i3-10100 core_i5-11400 core_i9-7900x celeron_j4125 core_i7-10510y xeon_d1700 core_i7-12650h xeon_platinum_8260y atom_x5-z8500 core_i9-7920x xeon_platinum_8352v celeron_n4120 xeon_w-11865mre core_i9-9960x core_i5-11600k core_i9-10900te xeon_e-2374g xeon_gold_5218t xeon_platinum_8358 xeon_platinum_8353h xeon_e-2378 core_i5-11260h core_i7-7820x xeon_platinum_8360y core_i3-1115g4e core_i5-10600t xeon_gold_5218n pentium_gold_g6605 core_i7-7800x xeon_w-3275m atom_x5-a3940 xeon_gold_6336y xeon_gold_6250l core_i5-9400h xeon_gold_6209u core_i9-9920x pentium_gold_g6505t xeon_e-2278ge xeon_platinum_8253 celeron_g5925 xeon_silver_4214y pentium_gold_g6505 atom_c3758 xeon_w-10855m xeon_gold_6252n core_i9-11900kf xeon_gold_6230t xeon_silver_4210r xeon_w-1270 core_i3-l13g4 atom_c3558rc pentium_gold_g6400 atom_c3308 xeon_w-3235 pentium_gold_g6500t core_i9-10900t xeon_platinum_8280 core_i5-8200y core_i7-10700te core_i9-10900k pentium_j6425 atom_x6425re xeon_gold_5220r xeon_w-11155mre xeon_gold_6252 core_i3-10105 celeron_j3455e core_i5-11400t celeron_n4020 xeon_d2700 core_i7-11700k core_i5-11400f core_i7-12700kf core_i5-10400t xeon_w-11955m xeon_w-1290e xeon_gold_6246 xeon_silver_4214r core_i7-1185g7 core_i7-9700kf core_i9-10940x celeron_6600he core_i9-9800x core_i9-10900x core_i5-12400f xeon_platinum_9221 xeon_gold_6230r celeron_n3350e xeon_platinum_8360hl celeron_j4105 puma_7 core_i7-10700kf atom_x5-z8550 xeon_silver_4310t celeron_g5905 core_i7-1065g7 core_i9-11900k xeon_w-11555mre core_i9-12900hk xeon_silver_4208 core_i5-12450h atom_x5-z8330 xeon_gold_5318h pentium_gold_g7400t core_i5-10600kf core_i3-1000g1 celeron_g6900 atom_x5-a3930 xeon_w-2225 xeon_silver_4314 core_i3-1005g1 core_i9-10850h celeron_j3355e pentium_n6415 celeron_n4504 xeon_gold_5215l core_i3-1220p core_i5-12400t core_i5-9400f core_i7-12700t xeon_platinum_8352s core_i9-12900 atom_c3538 core_i7-10700 xeon_gold_6238 atom_x6413e celeron_j6413 core_i5-11600kf core_i5-12500 core_i5-8365u atom_x5-a3960 xeon_platinum_8376h atom_c3508 xeon_w-2245 core_i5-1145gre xeon_w-3265m xeon_gold_6240l celeron_j3355 xeon_gold_6248 core_i5-1135g7 core_i7-12700 xeon_w-1270p core_i3-1115g4 xeon_gold_6258r core_i5-9600kf xeon_platinum_8256 communications_cloud_native_core_binding_support_function xeon_platinum_9282 core_i5-10400 xeon_w-1250p pentium_gold_g7400 core_i3-1120g4 core_i5-1155g7 xeon_w-11865mld core_i7-9700k core_i5-11400h xeon_gold_6338n core_i9-11900h celeron_j3455 xeon_gold_6328hl core_i7-12700f core_i7-1185g7e core_i3-1110g4 core_i3-12100f core_i3-12100t core_i7-10810u core_i3-10300t xeon_gold_6330 xeon_bronze_3206r xeon_gold_6346 xeon_w-3275 core_i5-1130g7 xeon_gold_6240 core_i7-10700e xeon_gold_5220 core_i7-1260p celeron_g5305u core_i9-11900 core_i5-9600k core_i5-8265u core_i3-10100te atom_p5921b core_i7-10700t core_i9-9900kf celeron_g5205u xeon_e-2388g communications_cloud_native_core_network_exposure_function core_i7-11390h xeon_platinum_8268 core_i5-1145g7 celeron_g5905t core_i5-9300h core_i7-10750h core_i9-10850k xeon_gold_6240r xeon_gold_6330h pentium_gold_g6405 xeon_silver_4209t core_i7-7640x xeon_gold_6338 xeon_gold_5315y core_i9-12900f xeon_e-2278g xeon_silver_4215r xeon_gold_6212u core_i9-10900e pentium_gold_g6400t celeron_g6900t pentium_silver_n6005 core_i9-11980hk atom_p5931b xeon_platinum_8380 core_i9-11900f xeon_w-3265 xeon_silver_4215 xeon_platinum_8368 xeon_gold_6230n core_i5-10500te core_i9-10920x core_i5-11500 core_i9-11950h atom_c3750 core_i7-11700 core_i5-10500t core_i5-10600 core_i7-1195g7 core_i9-10885h celeron_n4500 xeon_gold_6338t core_i5-10310y xeon_platinum_8352m xeon_e-2386g core_i7-1165g7 core_i3-12300 xeon_gold_6208u celeron_6305 core_i7-11850he atom_c3338 xeon_w-1290te pentium_gold_g6405u core_i5-1145g7e xeon_gold_6242 atom_x7-e3950 core_i7-10700k core_i3-12300t xeon_e-2336 core_i5-1030g7 celeron_j4025 core_i9-10980hk xeon_platinum_8360h xeon_e-2286m core_i9-9880h xeon_w-11155mle xeon_silver_4210t core_i7-11370h xeon_gold_5320t celeron_n4100 xeon_w-1300 core_i5-11500h core_i5-1035g4 core_i5-l16g7 core_i9-12900k core_i5-11600t xeon_gold_6342 core_i7-1280p core_i7-8500y core_i5-10200h core_i9-9900k pentium_silver_n5030 xeon_platinum_8276 pentium_silver_j5040 xeon_silver_4316 atom_c3558r core_i9-7960x xeon_gold_5220t celeron_n4000 core_i5-10400f core_i5-12600kf celeron_n6211 xeon_w-1370 core_i7-1160g7 atom_c3808 xeon_gold_6244 xeon_gold_6242r xeon_gold_6330n xeon_w-2275 xeon_w-10855 xeon_w-2265 xeon_gold_6226r core_i5-12600t core_i9-12900kf xeon_bronze_3204 core_i9-9820x celeron_j4005 xeon_gold_5218b xeon_platinum_8354h pentium_silver_n5000 xeon_gold_6348h xeon_gold_6328h core_i7-9750hf core_i7-1180g7 core_i5-12400 xeon_e-2288g xeon_w-1370p xeon_gold_6254 core_i3-10320 xeon_gold_5218r xeon_gold_6334 core_i5-1035g7 xeon_gold_6326 core_i3-10105f celeron_n3350 xeon_gold_5320 xeon_w-2235 xeon_gold_6240y celeron_g5900 atom_p5962b xeon_w-11855m atom_x5-e3940 xeon_gold_6238l xeon_w-1390 core_i7-10875h xeon_w-3225 core_i3-1115gre core_i5-11600 xeon_gold_6348 core_i7-11700f core_i3-11100he core_i5-10400h atom_x6212re pentium_gold_7505 xeon_gold_6246r celeron_n5105 core_i7-12700k core_i7-8665u xeon_gold_6354 core_i7-1270p core_i3-10305t xeon_w-10885m core_i9-9940x xeon_gold_6312u xeon_gold_5320h core_i9-9900x core_i5-10600k core_i9-7940x core_i5-10110y xeon_gold_5222 core_i7-10850h core_i5-12600h xeon_platinum_8380hl xeon_gold_6256 xeon_gold_6248r xeon_silver_4214 core_i7-12700h atom_c3958 atom_x6425e atom_c3338r xeon_gold_5318n xeon_platinum_9222 core_i3-10105t core_i5-11300h xeon_gold_5220s xeon_platinum_8260 core_i3-1000g4 pentium_silver_n6000 xeon_platinum_8280l xeon_silver_4309y core_i9-10900kf core_m3-8100y xeon_platinum_8356h atom_p5942b core_i3-10100t atom_c3858 pentium_gold_g6600 atom_x7-z8700 xeon_gold_6314u core_i9-9980hk xeon_w-11555mle core_i5-12500h core_i7-11700t pentium_j4205 xeon_w-1390t atom_x5-a3950 xeon_silver_4216 xeon_platinum_9242 core_i5-1140g7 core_i7-11700kf core_i7-10610u xeon_platinum_8362 xeon_platinum_8276l xeon_w-2223 core_i7-7740x core_i7-11375h atom_x7-z8750 atom_c3850 core_i5-11500t xeon_gold_6238t atom_c3955 core_i9-11900t core_i5-8210y xeon_platinum_8368q atom_x6427fe core_i7-1060g7 core_i5-9400 xeon_gold_5318y core_i7-1185gre xeon_silver_4310 core_i3-10325 xeon_e-2356g atom_c3558 xeon_gold_6250 celeron_6305e xeon_platinum_8260l celeron_n5100 atom_c3436l xeon_platinum_8380h xeon_platinum_8270 xeon_w-1290t xeon_w-3245m xeon_gold_6226 core_i5-11320h core_i5-12600 xeon_e-2334 xeon_gold_5318s core_i7-9850h atom_c3708 xeon_w-1350 xeon_e-2314 core_i3-10305 core_i5-1035g1 core_i7-11850h xeon_w-1290 xeon_w-1390p xeon_silver_4210 core_i3-10110u core_i5-10505 atom_x5-z8350 xeon_gold_6234 atom_c3336 core_i3-12100 xeon_w-2255 xeon_gold_6262v core_i7-10710u xeon_w-1350p core_i5-10210y core_i9-10900 xeon_w-1250 core_i5-10300h xeon_platinum_8358p pentium_n4200 core_i9-12900h atom_x5-e3930 xeon_gold_5218 atom_x6211e pentium_gold_g6500 core_i7-11800h celeron_5305u pentium_n4200e xeon_gold_6238r core_i3-10300 core_i9-10900f core_i3-1125g4 celeron_g5920 xeon_e-2278gel core_i7-8565u core_i5-1030g4 celeron_n3450 xeon_e-2378g core_i5-12600k communications_cloud_native_core_policy atom_c3830 core_i5-1240p core_i7-10870h xeon_platinum_8352y core_i3-10100f core_i7-10510u xeon_w-1290p xeon_w-3223 xeon_gold_5317 core_i7-12800h core_i5-12500t core_i5-8310y core_i9-12900t atom_x5-z8300 xeon_gold_5217 xeon_e-2324g xeon_w-3245 xeon_platinum_8376hl atom_x6200fe xeon_gold_6210u xeon_gold_6222v core_i5-1250p core_i7-10700f core_i5-10210u xeon_w-2295 atom_c3758r core_i5-10500 xeon_platinum_8351n xeon_gold_6230 pentium_silver_j5005 pentium_gold_g6405t Intel(R) Processors

Matching Score-8

Assigner-Intel Corporation

CVSS Score-6.5||MEDIUM

EPSS-0.66% / 70.59%

||

7 Day CHG+0.02%

Published-11 Mar, 2022 | 17:54

Updated-05 May, 2025 | 17:17

Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

Vendor-n/a Oracle Corporation Intel Corporation

CVE-2014-6551

Matching Score-8

Assigner-Oracle

Product-solaris mariadb mysql linux_enterprise_desktop linux_enterprise_workstation_extension linux_enterprise_server linux_enterprise_software_development_kit n/a

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.15% / 35.13%

||

7 Day CHG~0.00%

Published-15 Oct, 2014 | 22:03

Updated-12 Apr, 2025 | 10:46

Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality via vectors related to CLIENT:MYSQLADMIN.

Vendor-n/a SUSE Oracle Corporation MariaDB Foundation

CVE-2020-8908

Matching Score-8

Assigner-Google LLC

Product-guava peoplesoft_enterprise_peopletools communications_cloud_native_core_network_slice_selection_function weblogic_server communications_pricing_design_center quarkus primavera_unifier nosql_database communications_cloud_native_core_network_repository_function active_iq_unified_manager commerce_guided_search retail_customer_management_and_segmentation_foundation data_integrator Guava

Matching Score-8

Assigner-Google LLC

CVSS Score-3.3||LOW

EPSS-0.07% / 21.88%

||

7 Day CHG~0.00%

Published-10 Dec, 2020 | 22:10

Updated-04 Aug, 2024 | 10:12

Temp directory permission issue in Guava

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.

Vendor-quarkus NetApp, Inc.Google LLC Oracle Corporation

CWE ID-CWE-378

Creation of Temporary File With Insecure Permissions

CWE ID-CWE-732

Incorrect Permission Assignment for Critical Resource

CVE-2008-2623

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-2.1||LOW

EPSS-0.18% / 39.53%

||

7 Day CHG~0.00%

Published-14 Jan, 2009 | 02:00

Updated-07 Aug, 2024 | 09:05

Unspecified vulnerability in the Oracle JDeveloper component in Oracle Application Server 10.1.2.3 allows local users to affect confidentiality via unknown vectors.

Product-jdeveloper n/a

CVE-2011-3522

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-2.1||LOW

EPSS-0.08% / 23.31%

||

7 Day CHG~0.00%

Published-18 Oct, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI.

CVE-2014-1738

Matching Score-8

Assigner-Chrome

Product-linux_enterprise_high_availability_extension linux_kernel enterprise_linux_eus linux_enterprise_real_time_extension linux_enterprise_desktop debian_linux linux linux_enterprise_server n/a

Matching Score-8

Assigner-Chrome

CVSS Score-2.1||LOW

EPSS-0.03% / 9.11%

||

7 Day CHG~0.00%

Published-11 May, 2014 | 21:00

Updated-12 Apr, 2025 | 10:46

The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device.

Vendor-n/a Linux Kernel Organization, Inc SUSE Red Hat, Inc.Debian GNU/Linux Oracle Corporation

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CVE-2020-4629

Matching Score-8

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-2.9||LOW

EPSS-0.04% / 12.52%

||

7 Day CHG~0.00%

Published-30 Sep, 2020 | 14:35

Updated-16 Sep, 2024 | 23:15

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a local user with specialized access to obtain sensitive information from a detailed technical error message. This information could be used in further attacks against the system. IBM X-Force ID: 185370.

Product-solaris linux_kernel websphere_application_server i hp-ux windows z\/os aix WebSphere Application Server

CWE ID-CWE-209

Generation of Error Message Containing Sensitive Information

CVE-2017-10169

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.28%

||

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications (subcomponent: Operation Security). The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality 9700 executes to compromise Oracle Hospitality 9700. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality 9700 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Product-hospitality_9700 Hospitality 9700

CVE-2017-10056

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-5.5||MEDIUM

EPSS-0.12% / 31.28%

||

7 Day CHG~0.00%

Published-08 Aug, 2017 | 15:00

Updated-20 Apr, 2025 | 01:37

Vulnerability in the Oracle Hospitality 9700 component of Oracle Hospitality Applications (subcomponent: Property Management Systems). The supported version that is affected is 4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Hospitality 9700 executes to compromise Oracle Hospitality 9700. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality 9700 accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Product-hospitality_9700 Hospitality 9700

CVE-2018-11055

Matching Score-8

Assigner-Dell

Product-timesten_in-memory_database communications_ip_service_activator core_rdbms communications_analytics bsafe goldengate_application_adapters real_user_experience_insight application_testing_suite jd_edwards_enterpriseone_tools retail_predictive_application_server enterprise_manager_ops_center security_service BSAFE Micro Edition Suite

Matching Score-8

Assigner-Dell

CVSS Score-4.4||MEDIUM

EPSS-0.09% / 25.04%

||

7 Day CHG~0.00%

Published-31 Aug, 2018 | 18:00

Updated-05 Aug, 2024 | 07:54

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing the memory internally and a malicious local user could gain access to the unauthorized data by doing heap inspection.

Vendor-Dell Inc.RSA Security LLC Oracle Corporation

CWE ID-CWE-404

Improper Resource Shutdown or Release

CVE-2020-2894

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.12% / 30.70%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-27 Sep, 2024 | 18:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 6.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Vendor-openSUSE Oracle Corporation

Product-vm_virtualbox leap VM VirtualBox

CVE-2020-2689

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.14% / 34.48%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:54

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2741

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6||MEDIUM

EPSS-0.15% / 35.62%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 13:29

Updated-30 Sep, 2024 | 15:43

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N).

Vendor-openSUSE Oracle Corporation

Product-vm_virtualbox leap VM VirtualBox

CWE ID-CWE-125

Out-of-bounds Read

CVE-2020-2692

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.12% / 31.59%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).

CVE-2020-2691

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-6.5||MEDIUM

EPSS-0.42% / 61.17%

||

7 Day CHG~0.00%

Published-15 Jan, 2020 | 16:34

Updated-30 Sep, 2024 | 15:53

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.36, prior to 6.0.16 and prior to 6.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).