CVE-2018-3001

CVE-2018-3001 affects Oracle Hospitality Applications’ Hospitality Cruise Shipboard Property Management System (SPMS Suite), with the SPMS component in the 8.x line. The connected CNVD entry characterizes the flaw as an access control error that could let an attacker gain unauthorized access to d...

CVE-2018-2926

CVE-2018-2926 affects Oracle Solaris 11.3 (NVIDIA-GFX Kernel driver). A low-privileged, network-based attacker (ISCSI) can cause a hang or crash (DoS) and unauthorized read/update/delete of Solaris data. The NVIDIA-GFX subcomponent is the root cause; CVSS 3.0 base score is 7.6. Patch remediation ...

CVE-2018-2923

The CVE-2018-2923 issue affects Oracle Sun ZFS Storage Appliance Kit (AK) within the Sun Systems Products Suite, Core Services, with fixes available for versions prior to 8.7.20. A high-privilege attacker with local access could read a subset of AK data ( confidentiality impact ). The CVSSv3 scor...

CVE-2018-2927

CVE-2018-2927 affects the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems), with exploitation possible on versions prior to 8.7.18. The vulnerability allows a low-privileged, network-accessible attacker (via HTTP) to gain ...

CVE-2018-3009

CVE-2018-3009 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware; the IBM and CVE records indicate the affected product area is Outside In Technology version 8.5.3. The vulnerability is described as unauthenticated remote access via HTTP with network access...

CVE-2018-3064

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.40 and prior, 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-3026

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-2946

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-2984

Summary (CVE-2018-2984) : The vulnerability affects the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications, specifically the Gangway Activity Web App, in version 9.x. The issue allows a low-privileged attacker who can reach the system over HTTP to compr...

CVE-2018-3080

CVE-2018-3080 : Oracle MySQL Server (DDL subcomponent) is affected in 8.0.11 and earlier. The vulnerability, described as a server-side issue in the DDL path, can be exploited by a highly privileged attacker with network access via multiple protocols to trigger a hang or crash of MySQL Server, re...

CVE-2018-3097

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3073

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-2948

CVE-2018-2948 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) 9.2. An unauthenticated, network-accessible HTTP vulnerability allows data modification and reads via JD Edwards EnterpriseOne Tools, with user interaction required and impact on related products. Root cause and exact explo...

CVE-2018-3065

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.22 and prior and 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2018-2999

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-3061

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-3085

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3015

CVE-2018-3015 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, and 14.1.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracl...

CVE-2018-3063

CVE-2018-3063 is a MySQL/MariaDB Server vulnerability in the Privileges subcomponent. Affected products include MySQL/MariaDB Server versions up to 5.5.60 and earlier. The vulnerability is exploitable by a high-privileged attacker with network access via multiple protocols and can lead to a hang ...

CVE-2018-3088

CVE-2018-3088 is a vulnerability in the Oracle VM VirtualBox Core component (part of Oracle Virtualization) affecting versions prior to 5.2.16. Public records in connected docs confirm the issue is addressed by upgrading VirtualBox to 5.2.16 (e.g., openSUSE/Mageia advisories) and describe the exp...