VS
Product
VM Server
On CISA KEVExploited in the wild
39
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 14Medium 12Low 3
Watch
Add VM Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-5477 In wildKEV | 7.5 | Jul 29 | ISC BIND Data Processing Errors Vulnerability Affected: 3.2 |
| CVE-2016-3710 | 8.8 | May 11 | The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by… Affected: 3.2; 3.3; 3.4 |
| CVE-2016-3960 | 8.8 | Apr 19 | Integer overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a denial of service (host crash) or possibly gain privileges by shadowing a superpage… Affected: 3.2; 3.3; 3.4 |
| CVE-2016-1950 | 8.8 | Mar 13 | Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozilla Firefox before 45.0 and Firefox ESR… Affected: 3.2 |
| CVE-2016-4480 | 8.4 | May 18 | The guest_walk_tables function in arch/x86/mm/guest_walk.c in Xen 4.6.x and earlier does not properly handle the Page Size (PS) page table entry bit at the L4 and L3 page table… Affected: 3.2; 3.3; 3.4 |
| CVE-2016-3991 | 7.8 | Sep 21 | Heap-based buffer overflow in the loadImage function in the tiffcrop tool in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write)… Affected: 3.3; 3.4 |
| CVE-2016-3990 | 7.8 | Sep 21 | Heap-based buffer overflow in the horizontalDifference8 function in tif_pixarlog.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (crash) or… Affected: 3.3; 3.4 |
| CVE-2016-3945 | 7.8 | Sep 21 | Multiple integer overflows in the (1) cvt_by_strip and (2) cvt_by_tile functions in the tiff2rgba tool in LibTIFF 4.0.6 and earlier, when -b mode is enabled, allow remote… Affected: 3.3; 3.4 |
| CVE-2016-3632 | 7.8 | Sep 21 | The _TIFFVGetField function in tif_dirinfo.c in LibTIFF 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds write) or execute arbitrary code via… Affected: 3.3; 3.4 |
| CVE-2016-7039 | 7.5 | Oct 16 | The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by… Affected: 3.4 |
| CVE-2016-2776 | 7.5 | Sep 28 | buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause… Affected: 3.2; 3.3; 3.4 |
| CVE-2016-4447 | 7.5 | Jun 9 | The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application… Affected: 3.3; 3.4 |
| CVE-2016-3627 | 7.5 | May 17 | The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite… Affected: 3.3; 3.4 |
| CVE-2016-2117 | 7.5 | May 2 | The atl2_probe function in drivers/net/ethernet/atheros/atlx/atl2.c in the Linux kernel through 4.5.2 incorrectly enables scatter/gather I/O, which allows remote attackers to… Affected: 3.3; 3.4 |
Showing 14