Known vulnerabilities in Oracle VM VirtualBox - page 11

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
Total vulnerabilities: 263
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle VM VirtualBox Oracle VM VirtualBox is affected by 263 known vulnerabilities: 9 high, 10 medium, 244 low Critical High Medium Low

Vulnerabilities (263)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121878 - Out-of-bounds read
CVE-2019-2446
CWE-125 Low
No
No
5.2.24, 6.0.2 24.12.2024 SB2019011521
#VU121879 - Out-of-bounds read
CVE-2019-2448
CWE-125 Low
No
No
5.2.24, 6.0.2 24.12.2024 SB2019011521
#VU121880 - Out-of-bounds read
CVE-2019-2501
CWE-125 Low
No
No
5.2.24, 6.0.2 24.12.2024 SB2019011521
#VU121881 - Out-of-bounds read
CVE-2019-2504
CWE-125 Low
No
No
5.2.24, 6.0.2 24.12.2024 SB2019011521
#VU121882 - Out-of-bounds read
CVE-2019-2505
CWE-125 Low
No
No
5.2.24, 6.0.2 24.12.2024 SB2019011521
#VU121883 - Out-of-bounds read
CVE-2019-2506
CWE-125 Low
No
No
5.2.24, 6.0.2 24.12.2024 SB2019011521
#VU121884 - Out-of-bounds read
CVE-2019-2553
CWE-125 Low
No
No
5.2.24, 6.0.2 24.12.2024 SB2019011521
#VU109982 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2859
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109983 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2867
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109984 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2866
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109985 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2864
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109986 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2865
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109987 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2863
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109988 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2848
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2877
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109990 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2873
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2874
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109992 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2875
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109993 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2876
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU17908 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1543
CWE-327 Low
No
No
5.2.32, 6.0.10 06.03.2019 SB2019030602
SB2019040410
SB2019061209
and 13 more


Showing elements 201 - 220 out of 263