CVE-2018-3078

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-2984

Summary (CVE-2018-2984) : The vulnerability affects the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications, specifically the Gangway Activity Web App, in version 9.x. The issue allows a low-privileged attacker who can reach the system over HTTP to compr...

CVE-2018-2948

CVE-2018-2948 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) 9.2. An unauthenticated, network-accessible HTTP vulnerability allows data modification and reads via JD Edwards EnterpriseOne Tools, with user interaction required and impact on related products. Root cause and exact explo...

CVE-2018-3088

CVE-2018-3088 is a vulnerability in the Oracle VM VirtualBox Core component (part of Oracle Virtualization) affecting versions prior to 5.2.16. Public records in connected docs confirm the issue is addressed by upgrading VirtualBox to 5.2.16 (e.g., openSUSE/Mageia advisories) and describe the exp...

CVE-2018-3015

CVE-2018-3015 affects Oracle FLEXCUBE Universal Banking (Infrastructure subcomponent). Affected versions: 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0, and 14.1.0. The vulnerability allows a low-privileged attacker with network access via HTTP to compromise Oracl...

CVE-2018-2981

Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable...

CVE-2018-3002

CVE-2018-3002 affects Oracle Hospitality Cruise Fleet Management System (Fleet Management System Suite) within Oracle Hospitality Applications, with affected version 9.x. The root cause is an access-control issue that lets an unauthenticated attacker with logon access compromise the Fleet Managem...

CVE-2018-3080

CVE-2018-3080 : Oracle MySQL Server (DDL subcomponent) is affected in 8.0.11 and earlier. The vulnerability, described as a server-side issue in the DDL path, can be exploited by a highly privileged attacker with network access via multiple protocols to trigger a hang or crash of MySQL Server, re...

CVE-2018-2970

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: PIA Search Functionality. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-3041

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications subcomponent: Infrastructure. Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker wi...

CVE-2018-2939

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Core RDBMS...

CVE-2018-2991

CVE-2018-2991 affects Oracle E-Business Suite, specifically the Trade Management UI. Affected versions are 12.1.1–12.2.7. The vulnerability is exploitable over HTTP and does not require authentication, with a prerequisite of user interaction; successful exploitation can grant unauthorized access ...

CVE-2018-3000

CVE-2018-3000 affects Oracle Hospitality’s Cruise Shipboard Property Management System (SPMS Suite) within Oracle Hospitality Applications. Affects the 8.x release; vulnerability allows an unauthenticated, locally logged-on attacker to compromise SPMS, risking unauthorized access to data. CVSS v3...

CVE-2018-2999

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-3040

CVE-2018-3040 affects Oracle Financial Services Applications – Banking Corporate Lending component (Core module). Affected versions include 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Several connected sources describe an access-control error vulnerability that can cause a denial of service (hang ...

CVE-2018-3036

CVE-2018-3036 affects Oracle Financial Services Applications’ Banking Corporate Lending component (Core). Affected versions: 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.1.0. The CNVD entry attributes the issue to an access-control error; NVD details describe unauthorized read, update, insert/delete, and p...

CVE-2018-3078

CVE-2018-3078 affects Oracle MySQL Server (Server: DDL) with affected versions 8.0.11 and earlier. The vulnerability can be exploited by a high-privilege attacker who can access the server over multiple network protocols to cause the MySQL Server to hang or crash (complete DoS). If exploiting det...

CVE-2018-3087

CVE-2018-3087 affects Oracle VM VirtualBox (Core) and is fixed by upgrading to VirtualBox 5.2.16. The vulnerability is Local (attack vector: LOCAL), requires user interaction, and can lead to takeover of Oracle VM VirtualBox with High impact on confidentiality, integrity, and availability. Root c...

CVE-2018-3056

CVE-2018-3056 affects Oracle MySQL Server: Security: Privileges. Affected versions are MySQL 5.7.22 and earlier and 8.0.11 and earlier. An attacker with network access via multiple protocols can cause unauthorized read access to a subset of MySQL data. Remediation identified in connected advisori...

CVE-2018-3053

The CVE-2018-3053 vulnerability affects Oracle Retail Customer Management and Segmentation Foundation (Oracle Retail Applications) subcomponent Internal Operations, with affected versions 16.x and 17.x. The issue appears to be an access-control weakness that an attacker with network access over H...