Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
virtualization vulnerabilities and exploits
(subscribe to this query)
1.9
CVSSv2
CVE-2016-5709
SolarWinds Virtualization Manager 6.3.1 and previous versions uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute force attack.
Solarwinds Virtualization Manager
3.6
CVSSv2
CVE-2011-3571
Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Con...
Oracle Virtualization 3.2
4.3
CVSSv2
CVE-2012-1685
Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.6 allows remote malicious users to affect integrity via unknown vectors related to Core.
Oracle Virtualization 4.6
5
CVSSv2
CVE-2013-3834
Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5 allows remote malicious users to affect availability via unknown vectors related to ttaauxserv.
Oracle Virtualization 5.0
3.3
CVSSv2
CVE-2016-2206
The management console in Symantec Workspace Streaming (SWS) 7.5.x prior to 7.5 SP1 HF9 and 7.6.0 prior to 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x prior to 7.5 SP1 HF9 and 7.6.0 prior to 7.6 HF5 allows remote authenticated users to read arbitrary files by modify...
Symantec Workspace Streaming 7.5.0
Symantec Workspace Virtualization 7.6.0
Symantec Workspace Virtualization 7.5.0
Symantec Workspace Streaming 7.6.0
6.1
CVSSv2
CVE-2016-2205
Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming (SWS) 7.5.x prior to 7.5 SP1 HF9 and 7.6.0 prior to 7.6 HF5 and Symantec Workspace Virtualization (SWV) 7.5.x prior to 7.5 SP1 HF9 and 7.6.0 prior t...
Symantec Workspace Virtualization 7.5.0
Symantec Workspace Streaming 7.5.0
Symantec Workspace Virtualization 7.6.0
Symantec Workspace Streaming 7.6.0
7.2
CVSSv2
CVE-2013-2152
Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.
Redhat Enterprise Virtualization 3.2
2.1
CVSSv2
CVE-2010-2223
Virtual Desktop Server Manager (VDSM) in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) prior to 5.5-2.2 does not properly perform VM post-zeroing after the removal of a virtual machine's data, which allows guest OS users to obtain sensitive inf...
Redhat Enterprise Virtualization Hypervisor
8.5
CVSSv2
CVE-2014-2625
Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote malicious users to read arbitrary files via crafted input, aka ZDI-CAN-2023.
Hp Network Virtualization 8.6
9.4
CVSSv2
CVE-2014-2626
Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 (aka Shunra Network Virtualization) allows remote malicious users to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024.
Hp Network Virtualization 8.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryption
CVE-2024-4331
CVE-2024-26925
arbitrary code
CVE-2006-4304
CVE-2024-25458
CVE-2024-27077
reflected XSS
CVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
10
NEXT »