Known vulnerabilities in Oracle VM VirtualBox - page 11

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*
Total vulnerabilities: 273
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle VM VirtualBox Oracle VM VirtualBox is affected by 273 known vulnerabilities: 9 high, 10 medium, 254 low Critical High Medium Low

Vulnerabilities (273)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28585 - Improper input validation
CVE-2020-2682
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU28586 - Improper input validation
CVE-2020-2698
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU28587 - Improper input validation
CVE-2020-2701
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU28588 - Improper input validation
CVE-2020-2702
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU28589 - Improper input validation
CVE-2020-2726
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU28590 - Improper input validation
CVE-2020-2681
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU28591 - Improper input validation
CVE-2020-2689
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU28592 - Improper input validation
CVE-2020-2690
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU28584 - Improper input validation
CVE-2020-2674
CWE-20 Low
No
No
5.2.36, 6.0.16, 6.1.2 04.06.2020 SB20200114159
#VU109985 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2864
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109986 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2865
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109987 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2863
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109988 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2848
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109989 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2877
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109990 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2873
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109991 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2874
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109992 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2875
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109993 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2876
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU109994 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-2850
CWE-79 Low
No
No
5.2.32, 6.0.10 16.07.2019 SB20190716144
#VU17908 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1543
CWE-327 Low
No
No
5.2.32, 6.0.10 06.03.2019 SB2019030602
SB2019040410
SB2019061209
and 13 more


Showing elements 201 - 220 out of 273