VH
Product
Virtualization Host
On CISA KEVExploited in the wild
84
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 49Medium 30Low 0
Watch
Add Virtualization Host to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-3888 | 9.8 | Jun 12 | A vulnerability was found in Undertow web server before 2.0.21 Affected: 4.0 |
| CVE-2018-11236 | 9.8 | May 18 | stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer… Affected: 4.0 |
| CVE-2018-8088 | 9.8 | Mar 20 | org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data Affected: 4.0 |
| CVE-2017-7525 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by… Affected: 4.0 |
| CVE-2018-6485 | 9.8 | Feb 1 | An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to… Affected: 4.0 |
Showing 5