Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

virtual machine vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2002-0866
Java Database Connectivity (JDBC) classes in Microsoft Virtual Machine (VM) up to and including 5.0.3805 allow remote malicious users to load and execute DLLs (dynamic link libraries) via a Java applet that calls the constructor for com.ms.jdbc.odbc.JdbcOdbc with the desired DLL ...
Microsoft Virtual Machine 3300Microsoft Virtual Machine 3802Microsoft Virtual Machine 3100Microsoft Virtual Machine 3188Microsoft Virtual Machine 3200Microsoft Virtual Machine 2000Microsoft Virtual Machine 3000Microsoft Virtual Machine 3805
5
CVSSv2
CVE-2002-0867
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote malicious users to cause a denial of service (crash) in Internet Explorer via invalid handle data in a Java applet, aka "Handle Validation Flaw."
Microsoft Virtual Machine 3200Microsoft Virtual Machine 3300Microsoft Virtual Machine 3100Microsoft Virtual Machine 3188Microsoft Virtual Machine 2000Microsoft Virtual Machine 3000Microsoft Virtual Machine 3802Microsoft Virtual Machine 3805
7.5
CVSSv2
CVE-2002-0865
A certain class that supports XML (Extensible Markup Language) in Microsoft Virtual Machine (VM) 5.0.3805 and previous versions, probably com.ms.osp.ospmrshl, exposes certain unsafe methods, which allows remote malicious users to execute unsafe code via a Java applet, aka "I...
Microsoft Virtual Machine 3300Microsoft Virtual Machine 3802Microsoft Virtual Machine 3188Microsoft Virtual Machine 3200Microsoft Virtual Machine 3000Microsoft Virtual Machine 3100Microsoft Virtual Machine 2000Microsoft Virtual Machine 3805
7.5
CVSSv2
CVE-2019-3570
Call to the scrypt_enc() function in HHVM can lead to heap corruption by using specifically crafted parameters (N, r and p). This happens if the parameters are configurable by an attacker for instance by providing the output of scrypt_enc() in a context where Hack/PHP code would ...
Facebook Hiphop Virtual Machine 4.4.0Facebook Hiphop Virtual Machine 4.5.0Facebook Hiphop Virtual Machine 4.6.0Facebook Hiphop Virtual Machine 4.7.0Facebook Hiphop Virtual Machine 4.1.0Facebook Hiphop Virtual Machine 4.3.0Facebook Hiphop Virtual Machine 4.8.0Facebook Hiphop Virtual Machine 4.2.0Facebook Hiphop Virtual Machine
5
CVSSv2
CVE-2014-1439
The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual Machine for PHP (HHVM) prior to 2.4.0 and 2.3.x prior to 2.3.3 does not properly disable a certain libxml handler, which allows remote malicious users to conduct XML External Entity (XXE)...
Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.0.1Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.0.0Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.3.0Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.2.0Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.1.0Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.0.2Hiphop Virtual Machine For Php Project Hiphop Virtual Machine For PhpHiphop Virtual Machine For Php Project Hiphop Virtual Machine For Php 2.3.1
4.9
CVSSv2
CVE-2020-14743
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Procedure privilege with network access via multip...
Oracle Java Virtual Machine 11.2.0.4Oracle Java Virtual Machine 12.1.0.2Oracle Java Virtual Machine 12.2.0.1Oracle Java Virtual Machine 18cOracle Java Virtual Machine 19c
4.6
CVSSv2
CVE-2021-35619
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to co...
Oracle Java Virtual Machine 12.1.0.2Oracle Java Virtual Machine 12.2.0.1Oracle Java Virtual Machine 19cOracle Java Virtual Machine 21c
4
CVSSv2
CVE-2021-2438
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromis...
Oracle Java Virtual Machine 12.1.0.2Oracle Java Virtual Machine 12.2.0.1Oracle Java Virtual Machine 19c
6.8
CVSSv2
CVE-2018-16765
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in FunctionValidationContext::else_.
Webassembly Virtual Machine Project Webassembly Virtual Machine
6.8
CVSSv2
CVE-2018-16768
In WAVM through 2018-07-26, a crafted file sent to the WebAssembly Virtual Machine may cause a denial of service (application crash) or possibly have unspecified other impact because of an unspecified "heap-buffer-overflow" condition in IR::FunctionValidationContext::en...
Webassembly Virtual Machine Project Webassembly Virtual Machine
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907hardcodedinjectCVE-2024-20359CVE-2024-2467CVE-2024-4077CVE-2024-22391cameraCVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook