CVE-2018-2909

CVE-2018-2909 affects Oracle VM VirtualBox 5.2.x before 5.2.20 in the Core subcomponent. The vulnerability enables takeover of VirtualBox and is exploitable only after user interaction from a logged-on user, with a local attack vector. Public documentation consistently links this CVE to the affec...

CVE-2018-3296

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3295

CVE-2018-3295 affects Oracle VM VirtualBox core (VirtualBox component under Oracle Virtualization). A vulnerability in the core could allow takeover of Oracle VM VirtualBox on affected products prior to 5.2.20. Exploitation details in sources indicate the issue can be triggered by an attacker wit...

CVE-2018-3264

CVE-2018-3264 affects the Solaris kernel component in Oracle Sun Systems Products Suite, specifically Solaris 11.3. The vulnerability allows a low-privilege attacker with local access to compromise Solaris, enabling unauthorized updates/inserts/deletes to data and partial denial of service (parti...

CVE-2018-3285

CVE-2018-3285 is a vulnerability in the MySQL Server component of Oracle MySQL (Server: Windows). Affected versions are 8.0.12 and prior. It allows a high-privileged attacker with network access via multiple protocols to cause a hang or a frequently repeating crash (complete DOS) of MySQL Server....

CVE-2018-3269

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: SMB Server. The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via SMB to compromise Solaris. Successful attacks of this...

CVE-2018-3294

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows low privileged attacker with network access via VRDP to compromise Oracle VM VirtualBox. Successful...

CVE-2018-3288

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3226

CVE-2018-3226 affects Oracle Outside In Technology (Outside In Filters) used by Oracle Fusion Middleware. Connected documents confirm the affected package and versions: Oracle Outside In Technology 8.5.3 and 8.5.4. The vulnerability allows an unauthenticated attacker with network access via HTTP ...

CVE-2018-3241

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7 - 17.12 and 18.8. Easily exploitable vulnerability allows...

CVE-2018-3130

Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products subcomponent: Application Portal. The supported version that is affected is 9.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2018-3202

The CVE concerns Oracle PeopleSoft Products’ PeopleTools Performance Monitor in versions 8.55 and 8.56. A unauthenticated attacker with network access via HTTP could read a subset of data, per CVSS 3.0 base metrics (C:L, I:N, A:N). Connected sources confirm the affected component and versions; no...

CVE-2018-3140

CVE-2018-3140 affect: Oracle Hyperion Essbase Administration Services (EAS) Console, part of Hyperion Essbase Administration Services. The vulnerability is exploitable via HTTP without authentication on affected 11.1.2.4 deployments. Successful exploitation can lead to unauthorized update/insert/...

CVE-2018-3276

CVE-2018-3276 affects the Oracle MySQL Server component (subcomponent: Server: Memcached). Affected are MySQL versions 5.6.41 and prior, 5.7.23 and prior, and 8.0.12 and prior. The vulnerability allows a high-privilege attacker with network access via multiple protocols to compromise the MySQL Se...

CVE-2018-3218

CVE-2018-3218 concerns Oracle Outside In Technology (Outside In Filters) in Oracle Fusion Middleware. The documented affected product/version in the provided data is Rational DOORS Next Generation 6.0.6, with IBM remediation indicating a fixed patch: upgrade to Rational DOORS Next Generation 6.0....

CVE-2018-3133

CVE-2018-3133 concerns Oracle MySQL Server (subcomponent: Server: Parser). Affected are MySQL Server versions 5.5.61 and earlier, 5.6.41 and earlier, 5.7.23 and earlier, and 8.0.12 and earlier. An attacker with network access via multiple protocols and low privileges can trigger a hang or frequen...

CVE-2018-3242

CVE-2018-3242 affects Oracle E-Business Suite Marketing Administration (Marketing component). Affected are versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Marketing,...

CVE-2018-3129

The CVE-2018-3129 entry concerns Oracle PeopleSoft Enterprise PeopleTools Portal (PeopleTools component). Affected products/versions are PeopleSoft Portal, versions 8.55, 8.56 and 8.57. The vulnerability allows an unauthenticated, network-accessible attacker to exploit over HTTP, with user intera...

CVE-2018-3296

CVE-2018-3296 affects Oracle VM VirtualBox (Core) with vulnerabilities fixed in VirtualBox 5.2.20 and later. Affected: Oracle VM VirtualBox prior to 5.2.20. Impact: takeover of VirtualBox with HIGH confidentiality, integrity, and availability implications. Vector/conditions: unauthenticated attac...

CVE-2018-3192

CVE-2018-3192 affects Oracle PeopleSoft’s PeopleTools component (Query subcomponent) with affected versions 8.55 and 8.56. The vulnerability enables a high-privilege attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools, potentially taking over the affected system....