VI
Product
Virtualization
On CISA KEVExploited in the wild
127
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 14High 53Medium 44Low 1
Watch
Add Virtualization to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-7169 In wildKEV | 9.8 | Sep 25 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 3.4 |
| CVE-2014-6271 In wildKEV | 9.8 | Sep 24 | GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability Affected: 3.4 |
| CVE-2019-10126 | 9.8 | Jun 14 | A flaw was found in the Linux kernel Affected: 4.0 |
| CVE-2019-3888 | 9.8 | Jun 12 | A vulnerability was found in Undertow web server before 2.0.21 Affected: 4.0 |
| CVE-2019-10160 | 9.8 | Jun 7 | A security regression of CVE-2019-9636 was discovered in python since commit d537ab0ff9767ef024f26246899728f0116b1ec3 affecting versions 2.7, 3.5, 3.6, 3.7 and from v3.8.0a4… Affected: 4.0 |
| CVE-2019-9636 | 9.8 | Mar 8 | Python 2.7.x through 2.7.16 and 3.x through 3.7.2 is affected by: Improper Handling of Unicode Encoding (with an incorrect netloc) during NFKC normalization Affected: 4.0 |
| CVE-2018-17963 | 9.8 | Oct 9 | qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other… Affected: 4.0 |
| CVE-2017-7481 | 9.8 | Jul 19 | Ansible before versions 2.3.1.0 and 2.4.0.0 fails to properly mark lookup-plugin results as unsafe Affected: 4.1 |
| CVE-2018-8088 | 9.8 | Mar 20 | org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data Affected: 4.0 |
| CVE-2018-7750 | 9.8 | Mar 13 | transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and… Affected: 4.1 |
| CVE-2017-7525 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by… Affected: 4.0 |
| CVE-2017-9214 | 9.8 | May 23 | In Open vSwitch (OvS) 2.7.0, while parsing an OFPT_QUEUE_GET_CONFIG_REPLY type OFP 1.0 message, there is a buffer over-read that is caused by an unsigned integer underflow in the… Affected: 4.1; 4.0 |
| CVE-2019-14859 | 9.1 | Jan 2 | A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding Affected: 4.0 |
| CVE-2015-7512 | 9.0 | Jan 8 | Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash)… Affected: 3.0 |
Showing 14