[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2018-3290":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T02:55:30.529Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":18,"aliases":19,"duplicate_of":9,"upstream":20,"downstream":21,"duplicates":28,"related":29,"reserved_at":9,"published_at":32,"modified_at":33,"state":34,"summary":35,"references_raw":44,"kevs":70,"epss":71,"epss_history":74,"metrics":339,"affected":350},"CVE-2018-3290","Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":9,"likelihood_of_exploit":9,"capec":17},"NVD-CWE-NOINFO","Insufficient Information","NVD uses this CWE ID when there is insufficient information to assign a specific CWE.","placeholder","NVD-Reserved",[],[],[],[],[22,24,26],{"_key":23},"UBUNTU-CVE-2018-3290",{"_key":25},"OPENSUSE-SU-2019:1814-1",{"_key":27},"MGASA-2018-0437",[],[30,31],{"_key":25},{"_key":27},"2018-10-17T01:00:00.000Z","2024-10-02T19:19:58.672Z","Modified",{"cisa_kev":36,"cisa_ransomware":36,"cisa_vendor":9,"epss_severity":37,"epss_score":38,"severity":39,"severity_score":40,"severity_version":41,"severity_source":42,"severity_vector":43,"severity_status":34},false,"low",0.0045,"high",8.6,"v3.0","nvd","CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",[45,53,60,65],{"url":46,"sources":47,"tags":49},"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html",[48,42],"cve.org",[50,51,52],"X Refsource CONFIRM","Patch","Vendor Advisory",{"url":54,"sources":55,"tags":56},"http://www.securitytracker.com/id/1041887",[48,42],[57,58,59],"VDB Entry","X Refsource SECTRACK","Third Party Advisory",{"url":61,"sources":62,"tags":63},"http://www.securityfocus.com/bid/105619",[48,42],[57,64,59],"X Refsource BID",{"url":66,"sources":67,"tags":68},"http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00056.html",[48,42],[52,69],"X Refsource SUSE",[],{"date":72,"score":38,"percentile":73},"2026-06-04",0.63964,[75,78,81,84,87,90,93,96,99,102,105,108,110,113,115,119,122,125,128,131,134,137,140,143,146,148,151,154,157,160,163,166,169,171,174,177,179,182,185,188,191,194,197,200,203,206,209,212,215,218,221,224,227,230,233,236,239,242,245,248,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,299,302,305,308,311,314,317,319,322,324,327,330,333,336],{"date":76,"score":38,"percentile":77},"2025-11-04",0.62818,{"date":79,"score":38,"percentile":80},"2025-11-05",0.62802,{"date":82,"score":38,"percentile":83},"2025-11-06",0.6281,{"date":85,"score":38,"percentile":86},"2025-11-07",0.62826,{"date":88,"score":38,"percentile":89},"2025-11-08",0.62829,{"date":91,"score":38,"percentile":92},"2025-11-09",0.62824,{"date":94,"score":38,"percentile":95},"2025-11-10",0.62805,{"date":97,"score":38,"percentile":98},"2025-11-11",0.62817,{"date":100,"score":38,"percentile":101},"2025-11-12",0.6284,{"date":103,"score":38,"percentile":104},"2025-11-13",0.62846,{"date":106,"score":38,"percentile":107},"2025-11-14",0.62856,{"date":109,"score":38,"percentile":104},"2025-11-15",{"date":111,"score":38,"percentile":112},"2025-11-16",0.62837,{"date":114,"score":38,"percentile":112},"2025-11-17",{"date":116,"score":117,"percentile":118},"2025-11-18",0.00232,0.42204,{"date":120,"score":117,"percentile":121},"2025-11-19",0.4222,{"date":123,"score":117,"percentile":124},"2025-11-20",0.42228,{"date":126,"score":38,"percentile":127},"2025-11-21",0.62848,{"date":129,"score":38,"percentile":130},"2025-11-22",0.62857,{"date":132,"score":38,"percentile":133},"2025-11-23",0.62835,{"date":135,"score":38,"percentile":136},"2025-11-24",0.6283,{"date":138,"score":38,"percentile":139},"2025-11-25",0.62834,{"date":141,"score":38,"percentile":142},"2025-11-26",0.62838,{"date":144,"score":38,"percentile":145},"2025-11-27",0.62844,{"date":147,"score":38,"percentile":86},"2025-11-28",{"date":149,"score":38,"percentile":150},"2025-11-29",0.628,{"date":152,"score":38,"percentile":153},"2025-11-30",0.62792,{"date":155,"score":38,"percentile":156},"2025-12-01",0.62961,{"date":158,"score":38,"percentile":159},"2025-12-02",0.62979,{"date":161,"score":38,"percentile":162},"2025-12-03",0.62984,{"date":164,"score":38,"percentile":165},"2025-12-04",0.62808,{"date":167,"score":38,"percentile":168},"2025-12-05",0.62821,{"date":170,"score":38,"percentile":92},"2025-12-06",{"date":172,"score":38,"percentile":173},"2025-12-07",0.62816,{"date":175,"score":38,"percentile":176},"2025-12-08",0.62823,{"date":178,"score":38,"percentile":107},"2025-12-09",{"date":180,"score":38,"percentile":181},"2025-12-10",0.629,{"date":183,"score":38,"percentile":184},"2025-12-11",0.62916,{"date":186,"score":38,"percentile":187},"2025-12-12",0.62941,{"date":189,"score":38,"percentile":190},"2025-12-13",0.62948,{"date":192,"score":38,"percentile":193},"2025-12-14",0.62946,{"date":195,"score":38,"percentile":196},"2025-12-15",0.62938,{"date":198,"score":38,"percentile":199},"2025-12-16",0.62954,{"date":201,"score":38,"percentile":202},"2025-12-17",0.62965,{"date":204,"score":38,"percentile":205},"2025-12-18",0.63002,{"date":207,"score":38,"percentile":208},"2025-12-19",0.63019,{"date":210,"score":38,"percentile":211},"2025-12-20",0.63021,{"date":213,"score":38,"percentile":214},"2025-12-21",0.63013,{"date":216,"score":38,"percentile":217},"2025-12-22",0.63003,{"date":219,"score":38,"percentile":220},"2025-12-23",0.63018,{"date":222,"score":38,"percentile":223},"2025-12-24",0.63025,{"date":225,"score":38,"percentile":226},"2025-12-25",0.63053,{"date":228,"score":38,"percentile":229},"2025-12-26",0.63052,{"date":231,"score":38,"percentile":232},"2025-12-27",0.63108,{"date":234,"score":38,"percentile":235},"2025-12-28",0.6303,{"date":237,"score":38,"percentile":238},"2025-12-29",0.63024,{"date":240,"score":38,"percentile":241},"2025-12-30",0.63039,{"date":243,"score":38,"percentile":244},"2025-12-31",0.6306,{"date":246,"score":38,"percentile":247},"2026-01-01",0.63247,{"date":249,"score":38,"percentile":250},"2026-01-02",0.6323,{"date":252,"score":38,"percentile":253},"2026-01-03",0.63229,{"date":255,"score":38,"percentile":256},"2026-01-04",0.63048,{"date":258,"score":38,"percentile":259},"2026-01-05",0.63047,{"date":261,"score":38,"percentile":262},"2026-01-06",0.63042,{"date":264,"score":38,"percentile":265},"2026-01-07",0.63063,{"date":267,"score":38,"percentile":268},"2026-01-08",0.63085,{"date":270,"score":38,"percentile":271},"2026-01-09",0.63087,{"date":273,"score":38,"percentile":274},"2026-01-10",0.63081,{"date":276,"score":38,"percentile":277},"2026-01-11",0.63069,{"date":279,"score":38,"percentile":280},"2026-01-12",0.63049,{"date":282,"score":38,"percentile":283},"2026-01-13",0.63045,{"date":285,"score":38,"percentile":286},"2026-01-14",0.63088,{"date":288,"score":38,"percentile":289},"2026-01-15",0.63106,{"date":291,"score":38,"percentile":292},"2026-01-16",0.63124,{"date":294,"score":38,"percentile":295},"2026-01-17",0.63115,{"date":297,"score":38,"percentile":298},"2026-01-18",0.63112,{"date":300,"score":38,"percentile":301},"2026-01-19",0.63099,{"date":303,"score":38,"percentile":304},"2026-01-20",0.63114,{"date":306,"score":38,"percentile":307},"2026-01-21",0.63116,{"date":309,"score":38,"percentile":310},"2026-01-22",0.6312,{"date":312,"score":38,"percentile":313},"2026-01-23",0.63154,{"date":315,"score":38,"percentile":316},"2026-01-24",0.63159,{"date":318,"score":38,"percentile":292},"2026-01-25",{"date":320,"score":38,"percentile":321},"2026-01-26",0.63113,{"date":323,"score":38,"percentile":292},"2026-01-27",{"date":325,"score":38,"percentile":326},"2026-01-28",0.63134,{"date":328,"score":38,"percentile":329},"2026-01-29",0.6313,{"date":331,"score":38,"percentile":332},"2026-01-30",0.63137,{"date":334,"score":38,"percentile":335},"2026-01-31",0.63141,{"date":337,"score":38,"percentile":338},"2026-02-01",0.63282,[340],{"source":42,"cvss_v2_0":341,"cvss_v3_0":346,"cvss_v3_1":9,"cvss_v4_0":9},{"baseScore":342,"baseSeverity":9,"vectorString":343,"impactScore":344,"exploitabilityScore":345},4.4,"AV:L/AC:M/Au:N/C:P/I:P/A:P",6.4,3.4,{"baseScore":40,"baseSeverity":347,"vectorString":43,"impactScore":348,"exploitabilityScore":349},"HIGH",10,4.6,[351,364],{"ecosystem":9,"name":352,"vendor":353,"product":354,"cpe_part":355,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":356},"VM VirtualBox","oracle corporation","vm virtualbox","a",[357],{"version":358,"is_range":359,"range_type":48,"version_start":360,"version_start_type":361,"version_end":362,"version_end_type":363,"fixed_in":9},">= unspecified, \u003C 5.2.20",true,"unspecified","including","5.2.20","excluding",{"ecosystem":9,"name":354,"vendor":365,"product":366,"cpe_part":355,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":367},"oracle","vm_virtualbox",[368],{"version":369,"is_range":359,"range_type":370,"version_start":9,"version_start_type":9,"version_end":362,"version_end_type":363,"fixed_in":9},"lt5.2.20","cpe"]