CVE-2018-3285

CVE-2018-3285 is a vulnerability in the MySQL Server component of Oracle MySQL (Server: Windows). Affected versions are 8.0.12 and prior. It allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeating crash (complete DOS) of MySQL Server....

CVE-2018-3295

CVE-2018-3295 affects Oracle VM VirtualBox core (VirtualBox component under Oracle Virtualization). A vulnerability in the core could allow takeover of Oracle VM VirtualBox on affected products prior to 5.2.20. Exploitation details in sources indicate the issue can be triggered by an attacker wit...

CVE-2018-3294

CVE-2018-3294 affects Oracle VM VirtualBox Core (VirtualBox) prior to version 5.2.20. The vulnerability allows a low-privilege attacker who has network access via VRDP to take over VirtualBox, with the attack reportedly requiring user interaction and potentially impacting other products. The Open...

CVE-2018-3292

CVE-2018-3292 affects the Oracle VM VirtualBox core. A vulnerability exists in VirtualBox prior to version 5.2.20 that can lead to takeover of VirtualBox. Exploitation details in the public advisories indicate an easily exploitable issue with local/ logon access and requires user interaction (per...

CVE-2018-3296

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3133

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 5.5.61 and prior, 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3200

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-3277

Disclaimer: This data contains information about vulnerable...

CVE-2018-3156

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-3162

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-3251

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-3264

CVE-2018-3264 affects the Solaris kernel component in Oracle Sun Systems Products Suite, specifically Solaris 11.3. The vulnerability allows a low-privilege attacker with local access to compromise Solaris, enabling unauthorized updates/inserts/deletes to data and partial denial of service (parti...

CVE-2018-2909

CVE-2018-2909 affects Oracle VM VirtualBox 5.2.x before 5.2.20 in the Core subcomponent. The vulnerability enables takeover of VirtualBox and is exploitable only after user interaction from a logged-on user, with a local attack vector. Public documentation consistently links this CVE to the affec...

CVE-2018-3155

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL...

CVE-2018-3236

CVE-2018-3236 affects Oracle E-Business Suite User Management (Reports) and is confirmed in connected sources as Vulnerability in Oracle User Management component. Affected are E-Business Suite versions 12.1.3, 12.2.3–12.2.7. The flaw permits a high-privilege attacker who can reach the applicatio...

CVE-2018-3238

Oracle Fusion Middleware WebCenter Sites 11.1.1.8.0 is affected by a cross-site scripting vulnerability in the WebCenter Sites component (subcomponent: Advanced UI). The vulnerability, described as easily exploitable, could allow a high-privileged attacker with network access over HTTP to execute...

CVE-2018-3202

The CVE concerns Oracle PeopleSoft Products’ PeopleTools Performance Monitor in versions 8.55 and 8.56. A unauthenticated attacker with network access via HTTP could read a subset of data, per CVSS 3.0 base metrics (C:L, I:N, A:N). Connected sources confirm the affected component and versions; no...

CVE-2018-3218

CVE-2018-3218 concerns Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware. The documented affected product/version in the provided data is Rational DOORS Next Generation 6.0.6, with IBM remediation indicating a fixed patch: upgrade to Rational DOORS Next Generation 6.0....

CVE-2018-3192

CVE-2018-3192 affects Oracle PeopleSoft’s PeopleTools component (Query subcomponent) with affected versions 8.55 and 8.56. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, potentially taking over the affected system....

CVE-2018-3130

Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products subcomponent: Application Portal. The supported version that is affected is 9.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...