CVE-2018-3155

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2018-3293

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3214

CVE-2018-3214 affects Oracle Java SE components (Sound, JRockit, JSSE, JNDI, Networking) across Java SE 6u201/7u191/8u182, Java SE Embedded 8u181, and JRockit R28.3.19. Descriptions indicate unauthenticated network access could lead to partial DOS, data exposure or data modification depending on ...

CVE-2018-3294

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

CVE-2018-3241

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable vulnerability allows...

CVE-2018-3162

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-2971

Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite subcomponent: REST Services. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3131

Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the infrastructure where Oracle...

CVE-2018-3264

CVE-2018-3264 affects the Solaris kernel component in Oracle Sun Systems Products Suite, specifically Solaris 11.3. The vulnerability allows a low-privilege attacker with local access to compromise Solaris, enabling unauthorized updates/inserts/deletes to data and partial denial of service (parti...

CVE-2018-3294

CVE-2018-3294 affects Oracle VM VirtualBox Core (VirtualBox) prior to version 5.2.20. The vulnerability allows a low-privilege attacker who has network access via VRDP to take over VirtualBox, with the attack reportedly requiring user interaction and potentially impacting other products. The Open...

CVE-2018-3236

CVE-2018-3236 affects Oracle E-Business Suite User Management (Reports) and is confirmed in connected sources as Vulnerability in Oracle User Management component. Affected are E-Business Suite versions 12.1.3, 12.2.3–12.2.7. The flaw permits a high-privilege attacker who can reach the applicatio...

CVE-2018-2909

CVE-2018-2909 affects Oracle VM VirtualBox 5.2.x before 5.2.20 in the Core subcomponent. The vulnerability enables takeover of VirtualBox and is exploitable only after user interaction from a logged-on user, with a local attack vector. Public documentation consistently links this CVE to the affec...

CVE-2018-3292

CVE-2018-3292 affects the Oracle VM VirtualBox core. A vulnerability exists in VirtualBox prior to version 5.2.20 that can lead to takeover of VirtualBox. Exploitation details in the public advisories indicate an easily exploitable issue with local/ logon access and requires user interaction (per...

CVE-2018-3295

CVE-2018-3295 affects Oracle VM VirtualBox core (VirtualBox component under Oracle Virtualization). A vulnerability in the core could allow takeover of Oracle VM VirtualBox on affected products prior to 5.2.20. Exploitation details in sources indicate the issue can be triggered by an attacker wit...

CVE-2018-3296

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3200

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-3277

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-3282

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Storage Engines. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network acce...

CVE-2018-3166

The CVE-2018-3166 vulnerability affects Oracle Hospitality Applications’ Hospitality Cruise Fleet Management component (Emergency Response System) version 9.0. It allows a low-privilege, network-accessible attacker over HTTP to modify or delete data, with an impact on data integrity (CVSSv3.0: 6....

CVE-2018-3230

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...