CVE Vulnerability Catalog

The go-getter library up to versions 1.8.8 and 2.2.3 is vulnerable to a privilege escalation issue in its archive decompression handling that may allow a crafted archive to cause extracted files to be created with elevated permission bits. Where extraction is performed by a privileged user, this may allow a local actor to obtain the privileges of the extracting process.

Bacularis 4.7.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in director tags. The vulnerability allows injection of malicious code that is stored and executed in other users' browsers.

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting (XSS) in the client address field. The vulnerability allows injection of malicious code that is stored and executed in other users' browsers.

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Affected supported versions are 4.0.0-4.5.4. An unauthenticated attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DOS) of Helidon.

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The affected supported version is Oracle GraalVM 25.0.4.1. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM, potentially resulting in takeover.

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The affected supported version is Oracle GraalVM 25.0.4.1. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM, potentially resulting in takeover.

Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The affected supported version is Oracle GraalVM 25.0.4.1. A difficult-to-exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle GraalVM, potentially resulting in takeover.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.16. An easily exploitable flaw allows a high-privileged attacker with local logon to cause a partial denial of service of Oracle VM VirtualBox, with possible impact on additional products (scope change).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in Oracle VM VirtualBox (component: Core) affecting version 7.2.16. An easily exploitable flaw allows a high-privileged attacker with local logon to gain unauthorized read access to a subset of Oracle VM VirtualBox accessible data, with possible impact on additional products (scope change).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is 7.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox as well as unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16. An unauthenticated attacker with network access via RDP can cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox.

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16. A difficult-to-exploit vulnerability allows a low-privileged attacker with logon to the infrastructure where VirtualBox executes to compromise it, requiring human interaction and potentially impacting additional products (scope change), leading to takeover.

Vulnerability in Oracle VM VirtualBox (Core component) version 7.2.16. A high-privileged attacker with local access can exploit this flaw, potentially leading to unauthorized data read access and partial denial of service. The attack may impact additional products (scope change).

Vulnerability in Oracle VM VirtualBox (Core component) version 7.2.16. A low-privileged attacker with local access, under difficult exploitation conditions and requiring user interaction, can cause a hang or frequent crashes (complete DoS).

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The affected supported version is 7.2.16. An unauthenticated attacker with logon to the infrastructure where VirtualBox executes can exploit a vulnerability requiring human interaction, potentially leading to takeover of Oracle VM VirtualBox and impacting additional products (scope change).