Showing 1 - 7 of 7

CVE-2021-2130

Status Candidate

Overview

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Related Files

Git LFS Clone Command Execution: Posted Aug 31, 2021; Authored by Shelby Pace, Matheus Tavares, Johannes Schindelin | Site metasploit.com; Git clients that support delay-capable clean / smudge filters and symbolic links on case-insensitive file systems are vulnerable to remote code execution while cloning a repository. Usage of clean / smudge filters through Git LFS and a case-insensitive file system changes the checkout order of repository files which enables the placement of a Git hook in the .git/hooks directory. By default, this Metasploit module writes a post-checkout script so that the payload will automatically be executed upon checkout of the repository.; tags | exploit, remote, code execution; advisories | CVE-2021-21300; SHA-256 | e98b3afb62859d7020a7dd7d9fa1db727066effb6fcaf6be5eb8fbff19874b9d; Download | Favorite | View

Lucee Administrator imgProcess.cfm Arbitrary File Write: Posted Aug 17, 2021; Authored by wvu, iamnoooob, rootxharsh | Site metasploit.com; This Metasploit module exploits an arbitrary file write in Lucee Administrator's imgProcess.cfm file to execute commands as the Tomcat user.; tags | exploit, arbitrary; advisories | CVE-2021-21307; SHA-256 | b2e56cd428c174bc04f6acc23c21f34ae6d9df79b2c9d12ca9619993ff6fa4b9; Download | Favorite | View

Gentoo Linux Security Advisory 202104-01: Posted May 3, 2021; Authored by Gentoo | Site security.gentoo.org; Gentoo Linux Security Advisory 202104-1 - A vulnerability has been found in Git that could allow a remote attacker to execute arbitrary code. Versions less than 2.26.3 are affected.; tags | advisory, remote, arbitrary; systems | linux, gentoo; advisories | CVE-2021-21300; SHA-256 | 501280a83ea3d468493a03bc6b8c2fd8cb7796e4399b355699ce16447e85a20b; Download | Favorite | View

Apple Security Advisory 2021-04-26-10: Posted Apr 28, 2021; Authored by Apple | Site apple.com; Apple Security Advisory 2021-04-26-10 - Xcode 12.5 addresses an arbitrary code execution vulnerability.; tags | advisory, arbitrary, code execution; systems | apple; advisories | CVE-2021-21300; SHA-256 | 39bca81a5aa62d2d72980d7d122769fc684d6c93ebeed0118673d5f8efea0142; Download | Favorite | View

Gentoo Linux Security Advisory 202103-02: Posted Mar 31, 2021; Authored by Gentoo | Site security.gentoo.org; Gentoo Linux Security Advisory 202103-2 - A vulnerability in Redis could lead to remote code execution. Versions less than 6.0.12 are affected.; tags | advisory, remote, code execution; systems | linux, gentoo; advisories | CVE-2021-21309; SHA-256 | 0c57e716e17c05df9d7c490ffeca4fca4f648e2031e8a4f6ab255a0d9a8ad43f; Download | Favorite | View

Ubuntu Security Notice USN-4761-1: Posted Mar 10, 2021; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 4761-1 - Matheus Tavares discovered that Git incorrectly handled delay-capable clean/smudge filters when being used on case-insensitive filesystems. A remote attacker could possibly use this issue to execute arbitrary code.; tags | advisory, remote, arbitrary; systems | linux, ubuntu; advisories | CVE-2021-21300; SHA-256 | 2862a5d57fdf9124f9b200582cb31794ad9fc9721ccbe477d6d00f636c34fc81; Download | Favorite | View