[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fXYMCeJsXg2Ln9oAQTHugQSvhKhOo5y54IlgTE8lL6so":3,"g5a-ex:oracle\u002Fvm_server@*":123,"g5a-family:oracle\u002Fvm_server":125},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":39,"kevVulnerabilities":101,"seoMetadata":102,"meta":121},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"oracle","vm_server",6,38,0,"2023-09-20",[14,18,20,23,26,29],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"3.0",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"3.1",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"3.2",16,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"3.3",19,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"3.4",25,{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},"3.6","Vm Server by Oracle is a technology product with 6 tracked versions and 38 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},[40,48,56,63,69,75,80,87,92,96],{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":47},"CVE-2016-2776","buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.","2016-09-28",7.5,"v3.0","High",0.89482,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":17,"epssScore":55},"CVE-2015-8000","db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via a malformed class attribute.","2015-12-16",5,"v2","Medium",0.5469,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":61,"severity":54,"isKev":17,"epssScore":62},"CVE-2015-3195","The ASN1_TFLG_COMBINE implementation in crypto\u002Fasn1\u002Ftasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.","2015-12-06",5.3,"v3.1",0.38709,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":45,"severity":54,"isKev":17,"epssScore":68},"CVE-2016-3115","Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.","2016-03-22",6.4,0.3553,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":45,"severity":54,"isKev":17,"epssScore":74},"CVE-2016-5696","net\u002Fipv4\u002Ftcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.","2016-08-06",4.8,0.14507,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":79},"CVE-2016-4447","The xmlParseElementDecl function in parser.c in libxml2 before 2.9.4 allows context-dependent attackers to cause a denial of service (heap-based buffer underread and application crash) via a crafted file, involving xmlParseName.","2016-06-09",0.1398,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":61,"severity":85,"isKev":17,"epssScore":86},"CVE-2015-8668","Heap-based buffer overflow in the PackBitsPreEncode function in tif_packbits.c in bmp2tiff in libtiff 4.0.6 and earlier allows remote attackers to execute arbitrary code or cause a denial of service via a large width field in a BMP image.","2016-01-08",9.8,"Critical",0.13722,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":44,"cvssVersion":61,"severity":46,"isKev":17,"epssScore":91},"CVE-2016-7039","The IP stack in the Linux kernel through 4.8.2 allows remote attackers to cause a denial of service (stack consumption and panic) or possibly have unspecified other impact by triggering use of the GRO path for large crafted packets, as demonstrated by packets that contain only VLAN headers, a related issue to CVE-2016-8666.","2016-10-16",0.07613,{"cveId":93,"description":94,"publishedDate":78,"cvssScore":84,"cvssVersion":61,"severity":85,"isKev":17,"epssScore":95},"CVE-2016-4448","Format string vulnerability in libxml2 before 2.9.4 allows attackers to have unspecified impact via format string specifiers in unknown vectors.",0.07039,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":44,"cvssVersion":61,"severity":46,"isKev":17,"epssScore":100},"CVE-2016-3627","The xmlStringGetNodeList function in tree.c in libxml2 2.9.3 and earlier, when used in recovery mode, allows context-dependent attackers to cause a denial of service (infinite recursion, stack consumption, and application crash) via a crafted XML document.","2016-05-17",0.07025,[],{"title":103,"metaDescription":104,"keywords":105,"structuredData":106},"Vm Server by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Vm Server by Oracle covering 6 versions with 38 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Vm Server vulnerabilities, Vm Server security, Vm Server CVE, Oracle Vm Server, Vm Server threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":107,"@type":108,"name":109,"description":104,"url":110,"manufacturer":111,"applicationCategory":115,"softwareVersion":116,"mainEntity":117},"https:\u002F\u002Fschema.org","SoftwareApplication","Vm Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fvm_server",{"@type":112,"name":113,"url":114},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","6 versions tracked",{"@type":118,"name":119,"description":120,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Vm Server Security Vulnerabilities","Security vulnerabilities affecting Vm Server by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":122,"apiVersion":15},"2026-10-17T12:16:08.778Z",{"rows":124,"total":11,"capped":17,"failed":11},[],[]]