CVE-2018-2999

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-3080

CVE-2018-3080 : Oracle MySQL Server (DDL subcomponent) is affected in 8.0.11 and earlier. The vulnerability, described as a server-side issue in the DDL path, can be exploited by a highly privileged attacker with network access via multiple protocols to trigger a hang or crash of MySQL Server, re...

CVE-2018-3026

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications subcomponent: Payments Core. Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via...

CVE-2018-3063

CVE-2018-3063 is a MySQL/MariaDB Server vulnerability in the Privileges subcomponent. Affected products include MySQL/MariaDB Server versions up to 5.5.60 and earlier. The vulnerability is exploitable by a high-privileged attacker with network access via multiple protocols and can lead to a hang ...

CVE-2018-2948

CVE-2018-2948 affects Oracle JD Edwards EnterpriseOne Tools (Web Runtime) 9.2. An unauthenticated, network-accessible HTTP vulnerability allows data modification and reads via JD Edwards EnterpriseOne Tools, with user interaction required and impact on related products. Root cause and exact explo...

CVE-2018-3002

CVE-2018-3002 affects Oracle Hospitality Cruise Fleet Management System (Fleet Management System Suite) within Oracle Hospitality Applications, with affected version 9.x. The root cause is an access-control issue that lets an unauthenticated attacker with logon access compromise the Fleet Managem...

CVE-2018-3088

CVE-2018-3088 is a vulnerability in the Oracle VM VirtualBox Core component (part of Oracle Virtualization) affecting versions prior to 5.2.16. Public records in connected docs confirm the issue is addressed by upgrading VirtualBox to 5.2.16 (e.g., openSUSE/Mageia advisories) and describe the exp...

CVE-2018-3061

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-3097

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware subcomponent: Outside In Filters. The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

CVE-2018-3089

CVE-2018-3089 affects Oracle VM VirtualBox (Core) before version 5.2.16. The vulnerability allows an unauthenticated attacker with access to the infrastructure running VirtualBox to compromise the VM software, with exploits requiring user interaction. The CVSSv3 base score is 8.6 (HIGH) with Loca...

CVE-2018-2999

Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products subcomponent: Web Runtime. The supported version that is affected is 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOn...

CVE-2018-3087

CVE-2018-3087 affects Oracle VM VirtualBox (Core) and is fixed by upgrading to VirtualBox 5.2.16. The vulnerability is Local (attack vector: LOCAL), requires user interaction, and can lead to takeover of Oracle VM VirtualBox with High impact on confidentiality, integrity, and availability. Root c...

CVE-2018-3070

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Client mysqldump. Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols ...

CVE-2018-3000

Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications subcomponent: SPMS Suite. The supported version that is affected is 8.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructu...

CVE-2018-2979

CVE-2018-2979 affects Oracle FLEXCUBE Universal Banking (Infrastructure) across multiple supported versions (11.3.0, 11.4.0, 12.x up to 14.1.0). The vulnerability is a Denial of Service: a low-privileged attacker with network access via HTTP can cause a hang or frequent crash of the system. CVSS ...

CVE-2018-3078

CVE-2018-3078 affects Oracle MySQL Server (Server: DDL) with affected versions 8.0.11 and earlier. The vulnerability can be exploited by a high-privilege attacker who can access the server over multiple network protocols to cause the MySQL Server to hang or crash (complete DoS). If exploiting det...

CVE-2018-3086

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.16. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3040

CVE-2018-3040 affects Oracle Financial Services Applications – Banking Corporate Lending component (Core module). Affected versions include 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Several connected sources describe an access-control error vulnerability that can cause a denial of service (hang ...

CVE-2018-2991

CVE-2018-2991 affects Oracle E-Business Suite, specifically the Trade Management UI. Affected versions are 12.1.1–12.2.7. The vulnerability is exploitable over HTTP and does not require authentication, with a prerequisite of user interaction; successful exploitation can grant unauthorized access ...

CVE-2018-3036

CVE-2018-3036 affects Oracle Financial Services Applications’ Banking Corporate Lending component (Core). Affected versions: 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.1.0. The CNVD entry attributes the issue to an access-control error; NVD details describe unauthorized read, update, insert/delete, and p...