Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08376)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Server: Connection component of...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-08377)

Oracle MySQL is an open source relational database management system from Oracle. The database system is characterized by high performance, low cost, good reliability, etc. MySQL Server is one of the server components. An unspecified vulnerability exists in the Server: Locking component of Oracle...

UBUNTU-CVE-2018-2755

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Replication. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure wher...

CVE-2017-17217

The CVE-2017-17217 issue affects Huawei MGCP on DP300, RP200, TE/V series devices (e.g., DP300 V500R002C00; V600R006C00; TE30/TE40/TE50/TE60 V100R001C10/V500R002C00/V600R006C00) with an out-of-bounds write due to insufficient validation of crafted packets. An unauthenticated remote attacker can s...

CVE-2017-17220

SCCPX module in Huawei DP300 V500R002C00; RP200 V500R002C00; V600R006C00; TE30 V100R001C10; V500R002C00; V600R006C00; TE40 V500R002C00; V600R006C00; TE50 V500R002C00; V600R006C00; TE60 V100R001C10; V500R002C00; V600R006C00 has an invalid memory access vulnerabilities. An unauthenticated, remote...

Security Advisory - Two Vulnerabilities in MGCP Protocol of Some Huawei Products

There is an out-of-bounds read vulnerability in Media Gateway Control Protocol MGCP of some Huawei products. An unauthenticated, remote attacker crafts malformed packets with specific parameter to the affected products. Due to insufficient validation of packets, successful exploitation may cause...

CVE-2018-2667

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2018-2668

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

CVE-2018-2599

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JNDI. Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151; JRockit: R28.3.16. Difficult to exploit vulnerability allows unauthenticated attacker...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Design/Logic Flaw

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Partition. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.19 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocol...

CVE-2018-2686

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBo...

Unspecified Vulnerability in Oracle Sun Systems Products Suite (CNVD-2018-02523)

Oracle Sun Systems Products Suite is a Sun Systems product package. An unspecified vulnerability exists in the Kernel subcomponent of the Solaris component of Oracle Sun Systems Products Suite. An attacker could exploit this vulnerability to affect availability...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02163)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the InnoDB component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect integrity and availability...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-02391)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02154)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Server: DML component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect availability...

Unspecified Vulnerability in Oracle FLEXCUBE Universal Banking (CNVD-2018-02392)

Oracle FLEXCUBE Universal Banking is a real-time, online, comprehensive global core banking solution covering retail, corporate and investment banking. An unspecified vulnerability exists in the Infrastructure component of Oracle FLEXCUBE Universal Banking. An attacker could exploit this...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02157)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect availability...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2018-02158)

Oracle MySQL is a small relational database management system. An unspecified vulnerability exists in the Server: Optimizer component of Oracle MySQL Server. An attacker could exploit this vulnerability to affect availability...