Xinlei Ying

Researcher fromAnt Security Light-Year Lab
#22385of 60,403
13.7Total CVSS
Vulnerabilities · 2
Medium
1
High
1
PT-2020-4702
2020-10-20
5.5
CVE-2020-14892
Oracle
Virtualbox
The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox, which can be exploited to cause a denial of service. A low-privileged attacker with login access to the infrastructure where Oracle VM VirtualBox is running can compromise the system, resulting in the ability to cause a hang or frequently repeatable crash of Oracle VM VirtualBox.
PT-2019-5378
2019-12-26
8.2
CVE-2020-2905
Oracle
Virtualbox
The issue is related to insufficient input validation in the Core component of Oracle VM VirtualBox. This allows a high-privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks can result in the takeover of Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products.