CVE-2018-2599

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Partition. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocol...

Design/Logic Flaw

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Design/Logic Flaw

Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications subcomponent: Worklist. Supported versions that are affected are 7.x, 8.0.x and 8.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus...

CVE-2018-2629

CVE-2018-2629 corresponds to a GSS context use-after-free vulnerability in the OpenJDK JGSS component (Oracle Java SE/JRockit/JRE). Affected products/versions include Oracle Java SE (client/server), Java SE Embedded, and JRockit with affected releases such as Java SE 6u171, 7u161, 8u152, 9.0.1; J...

CVE-2018-2597

Vulnerability in the Oracle Hospitality Cruise Dining Room Management component of Oracle Hospitality Applications subcomponent: SilverWhere. The supported version that is affected is 8.0.78. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi...

CVE-2018-2686

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2654

Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products subcomponent: Company Dir / Org Chart Viewer. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Unspecified Vulnerability in Oracle Sun Systems Products Suite (CNVD-2018-02526)

Oracle Sun Systems Products Suite is a Sun Systems product package. An unspecified vulnerability exists in the User Interface subcomponent of the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite. An attacker could exploit this vulnerability to compromise...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02163)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the InnoDB component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect integrity and availability...

Unspecified Vulnerability in Oracle Banking Payments (CNVD-2018-02394)

Oracle Banking Payments is a complete payment processing solution. An unspecified vulnerability exists in the Payments Core component of Oracle Banking Payments. An attacker could exploit this vulnerability to compromise integrity and availability...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-02390)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Security Management System component of Oracle FLEXCUBE Universal Banking. An attacker could exploit...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-02392)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Unspecified Vulnerability in Oracle Argus Safety (CNVD-2018-02386)

Oracle Argus Safety is a complete pharmacovigilance software system designed to address the pharmaceutical industry's toughest regulatory challenges. An unspecified vulnerability exists in the Case Selection component of Oracle Argus Safety. An attacker could exploit the vulnerability to compromi...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02156)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Server: Replication component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect integrity and availability...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-02391)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

UBUNTU-CVE-2018-2637

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JMX. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker wi...

PT-2017-4207

Name of the Vulnerable Software and Affected Versions glibc version 2.5 Description The issue is related to a buffer overflow that can be triggered through the LD LIBRARY PATH environment variable. This allows an attacker to access confidential data, compromise its integrity, and cause a denial o...

JBOSSAS 5.x/6.x 反序列化命令执行漏洞（CVE-2017-12149）

CVE-2017-12149 It was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization. This allows an attacker to execute arbitrary code via crafted serialized data. Find out more about CVE-2017-12149 from the MITRE CV...

CVE-2017-10423

Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications subcomponent: Security. Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...