GCVE - cpe:2.3:a:oracle:vm_virtualbox:4.0.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:vm_virtualbox:4.0.4:*:*:*:*:*:*:*

part: a version: 4.0.4 update: *

Vendor	Oracle (`3509f9eb-d8a0-57da-b153-b8021021b133`)
Product	Vm Virtualbox (`617ced06-12d2-56cc-b9bf-e83c9bd34a51`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/mirror/vbox`	purl2cpe	2026-06-01 10:18:14.881047
`pkg:oracle/vm/virtualbox-downloads`	purl2cpe	2026-06-01 10:18:14.881048
`pkg:virtualbox/vbox`	purl2cpe	2026-06-01 10:18:14.881050

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-0418`	vulnerable	2026-06-08 05:06:21.506179	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0377. Published: 2015-01-21T19:00:00.000Z Updated: 2024-08-06T04:10:10.257Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201612-27 http://www.securityfocus.com/bid/72194 http://secunia.com/advisories/62694 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html https://exchange.xforce.ibmcloud.com/vulnerabilities/100182	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-0377`	vulnerable	2026-06-08 05:06:21.381281	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.26, 4.0.28, 4.1.36, and 4.2.28 allows local users to affect availability via unknown vectors related to Core, a different vulnerability than CVE-2015-0418. Published: 2015-01-21T18:00:00.000Z Updated: 2024-08-06T04:10:09.548Z Open on db.gcve.eu Reference links https://security.gentoo.org/glsa/201612-27 http://secunia.com/advisories/62694 http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html http://www.c7zero.info/stuff/csw2017_ExploringYourSystemDeeper_updated.pdf http://www.securityfocus.com/bid/72219	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-4261`	vulnerable	2026-06-08 05:05:44.493755	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.14 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-2487. Published: 2014-07-17T10:00:00.000Z Updated: 2024-08-06T11:12:34.040Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://www.securityfocus.com/archive/1/534161/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/94612 http://www.securityfocus.com/bid/68588 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2489`	vulnerable	2026-06-08 05:05:28.899890	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core. Published: 2014-07-17T02:36:00.000Z Updated: 2024-08-06T10:14:26.604Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://www.securityfocus.com/archive/1/534161/100/0/threaded http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://seclists.org/fulldisclosure/2014/Dec/23	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2488`	vulnerable	2026-06-08 05:05:28.897792	Details available Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox before 3.2.24, 4.0.26, 4.1.34, 4.2.26, and 4.3.12 allows local users to affect confidentiality via unknown vectors related to Core. Published: 2014-07-17T02:36:00.000Z Updated: 2024-08-06T10:14:26.578Z Open on db.gcve.eu Reference links http://www.vmware.com/security/advisories/VMSA-2014-0012.html http://www.securityfocus.com/archive/1/534161/100/0/threaded http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://seclists.org/fulldisclosure/2014/Dec/23	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2486`	vulnerable	2026-06-08 05:05:28.895790	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-2477`	vulnerable	2026-06-08 05:05:28.857419	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0407`	vulnerable	2026-06-08 05:05:12.780070	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0406`	vulnerable	2026-06-08 05:05:12.778637	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0405`	vulnerable	2026-06-08 05:05:12.776984	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-0404`	vulnerable	2026-06-08 05:05:12.758341	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5892`	vulnerable	2026-06-08 05:04:54.628140	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3792`	vulnerable	2026-06-08 05:04:32.894166	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.