CVE-2017-10202

Vulnerability in the OJVM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to...

CVE-2017-10053

CVE-2017-10053 is an OpenJDK/OpenJDK 2D JPEGImageReader vulnerability. The issue affects Java SE components (Java SE, Java SE Embedded, JRockit) with affected versions including Java 6u151, 7u141, 8u131 (and 8u131 for Java SE Embedded; JRockit R28.3.14). The vulnerability could allow an unauthent...

CVE-2017-10210

CVE-2017-10210 affects Oracle VM VirtualBox (Core) via the VMSVGA path. A concrete root cause described in connected material is an integer overflow in SVGA3D_CMD surface handling (vmsvga3dSurfaceDefine) that can cause memory corruption and a subsequent crash or crash-driven state. The adverse ef...

CVE-2017-10220

Vulnerability in the Hospitality Property Interfaces component of Oracle Hospitality Applications subcomponent: Parser. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Hospitality Property...

CVE-2017-10217

An Oracle Hospitality CVE-2017-10217 vulnerability affects Oracle Hospitality Guest Access (Base) in Oracle Hospitality Applications, specifically versions 4.2.0.0 and 4.2.1.0. The issue allows a low-privileged user with network access over HTTP to remotely modify certain Oracle Hospitality Guest...

CVE-2017-10147

CVE-2017-10147 affects Oracle WebLogic Server (Fusion Middleware Core Components). Affected installations include Oracle WebLogic Server versions 10.3.6.0, 12.1.3.0, 12.2.1.1 and 12.2.1.2. The issue allows an unauthenticated attacker with network access via the T3 protocol to compromise the WebLo...

CVE-2017-3645

CVE-2017-3645 affects Oracle MySQL Server, subcomponent Server: Optimizer. Affected versions are 5.7.18 and earlier. Vulnerability can be exploited remotely over multiple protocols by a high-privilege attacker to cause a hang or repeated crash (DOS). Remediation seen in connected docs indicates u...

CVE-2017-10079

CVE-2017-10079 affects Oracle Hospitality Applications’ Hospitality Suites Management component (Core) in version 3.7. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Suites Management, with attacks requiring human interaction. Potential impact incl...

CVE-2017-10236

CVE-2017-10236 affects Oracle VM VirtualBox Core prior to 5.1.24. The issue can enable a locally authenticated, high-privilege attacker to cause a hang/DoS and unauthorized read/write access to VirtualBox data, with CVSSv3.0 base score 7.3 (HIGH). Public sources reference Oracle’s patching; Magei...

CVE-2017-10248

Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products subcomponent: EPPCMHIERTOP. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...

CVE-2017-10108

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Serialization. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker...

CVE-2017-3643

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2017-10237

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-3641

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DML. Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocol...

CVE-2017-10042

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: IKE. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via IKE to compromise Solaris. Successful attacks of this...

CVE-2017-10189

Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications subcomponent: Leisure. The supported version that is affected is 8.10.x. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Hospitality Suite8 executes to...

CVE-2017-10078

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Scripting. The supported version that is affected is Java SE: 8u131. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this...

CVE-2017-10236

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.1.24. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2017-3643

CVE-2017-3643 affects Oracle MySQL Server (Server: DML). Affected: MySQL 5.7.18 and earlier. An attacker with high privileges over the network via multiple protocols can cause the MySQL Server to hang or crash (DoS). CVSS 3.0 base score 4.9 (Availability). No exploit details provided beyond vendo...

CVE-2017-10187

CVE-2017-10187 affects the Oracle VM VirtualBox core component (pre-5.1.24). The issue allows a high-privileges attacker with local access to compromise VirtualBox, potentially corrupting data and causing partial Denial of Service (I/L/A impacts as described). Several connected records corroborat...