CVE-2018-2860

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualB...

CVE-2018-2830

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2837

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2754

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: ZVNET Driver. The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-2764

CVE-2018-2764 affects the Solaris kernel: vulnerable in Solaris on supported 10 and 11.3 systems, exploitable via network access to Solaris over NFS, leading to possible hang or complete denial of service. CVSS 3.0 base score 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The advisory context from th...

CVE-2018-2806

CVE-2018-2806 affects Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware, with affected version 8.5.3. The vulnerability is exploitable over a network (HTTP) by an unauthenticated attacker and may lead to unauthorized access to data and partial denial of service; exploi...

CVE-2018-2775

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-2796

CVE-2018-2796 causes unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency) in Oracle/OpenJDK Java SE. Affected: Java SE/Embedded and JRockit components with Java 7u171, 8u162 and 10, plus related JDK/JRE packages (e.g., OpenJDK builds) per the CVE references. I...

CVE-2018-2782

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-2748

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications subcomponent: Core module. Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2018-2849

CVE-2018-2849 affects Oracle Primavera P6 EPPM (Oracle Construction and Engineering Suite) Web Access subcomponent. Affected versions include 16.2 and 17.1–17.12. The vulnerability exists in Primavera P6 EPPM and can be exploited by a low-privileged attacker with network access via HTTP to gain u...

CVE-2018-2860

CVE-2018-2860 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.1.36 and prior to 5.2.10. The vulnerability allows a high-privilege attacker with local logon to compromise VirtualBox, with potential broader impact on other products and a takeover of VirtualBox. Public sources ...

CVE-2018-2762

CVE-2018-2762 affects Oracle MySQL Server, subcomponent Server: Connection, with affected MySQL versions up to 5.7.21. It enables a high-privilege user with logon in the MySQL server hosting environment to induce a denial of service (hang/crash). The issue is part of a broader set of MySQL CVEs i...

CVE-2018-2805

CVE-2018-2805 affects Oracle MySQL Server (GIS Extension) with vulnerable versions up to 5.6.39. The flaw allows a low-privilege, network-based attacker to cause a hang or repeated crashes (complete DOS) via multiple protocols. Connected advisories confirm broader MySQL-related fixes in Oracle My...

CVE-2018-2819

Removed by vendor...

CVE-2018-2819

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-2775

CVE-2018-2775 affects Oracle MySQL Server (subcomponent: Server: Optimizer). Affected are MySQL 5.7.21 and earlier. The vulnerability allows a network-based attacker with low privileges to cause a hang or a complete denial of service in MySQL Server. The issue is part of a broader set of MySQL CP...

CVE-2018-2830

CVE-2018-2830 affects Oracle VM VirtualBox (Oracle Virtualization, Core subcomponent). Affected versions are VirtualBox 5.1.x prior to 5.1.36 and 5.2.x prior to 5.2.10. The vulnerability allows a low-privileged attacker with logon to the infrastructure where VirtualBox executes to compromise Virt...

CVE-2018-2766

CVE-2018-2766 affects the MySQL Server component (InnoDB) and can lead to a complete DoS via network access. Affected versions per the initial data are MySQL 5.6.39 and earlier and 5.7.21 and earlier. Several connected advisories reference this CVE (e.g., Debian security notices, F5 advisory) but...

CVE-2018-2818

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via...