CVE-2018-3264

CVE-2018-3264 affects the Solaris kernel component in Oracle Sun Systems Products Suite, specifically Solaris 11.3. The vulnerability allows a low-privilege attacker with local access to compromise Solaris, enabling unauthorized updates/inserts/deletes to data and partial denial of service (parti...

CVE-2018-3299

Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Text. Successful attacks...

CVE-2018-3251

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.41 and prior, 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-3203

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-3286

CVE-2018-3286 affects Oracle MySQL Server (Server: Security: Privileges). Affected: MySQL 8.0.12 and earlier. Description from multiple sources: vulnerability allows a low-privileged, network-accessing attacker to modify data in MySQL Server through various protocols, with impact described as una...

CVE-2018-3137

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-3236

CVE-2018-3236 affects Oracle E-Business Suite User Management (Reports) and is confirmed in connected sources as Vulnerability in Oracle User Management component. Affected are E-Business Suite versions 12.1.3, 12.2.3–12.2.7. The flaw permits a high-privilege attacker who can reach the applicatio...

CVE-2018-3258

Removed by vendor...

CVE-2018-3296

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3296

CVE-2018-3296 affects Oracle VM VirtualBox (Core) with vulnerabilities fixed in VirtualBox 5.2.20 and later. Affected: Oracle VM VirtualBox prior to 5.2.20. Impact: takeover of VirtualBox with HIGH confidentiality, integrity, and availability implications. Vector/conditions: unauthenticated attac...

CVE-2018-3140

CVE-2018-3140 affect: Oracle Hyperion Essbase Administration Services (EAS) Console, part of Hyperion Essbase Administration Services. The vulnerability is exploitable via HTTP without authentication on affected 11.1.2.4 deployments. Successful exploitation can lead to unauthorized update/insert/...

CVE-2018-3297

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3288

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-2909

CVE-2018-2909 affects Oracle VM VirtualBox 5.2.x before 5.2.20 in the Core subcomponent. The vulnerability enables takeover of VirtualBox and is exploitable only after user interaction from a logged-on user, with a local attack vector. Public documentation consistently links this CVE to the affec...

CVE-2018-2909

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...

CVE-2018-3295

CVE-2018-3295 affects Oracle VM VirtualBox core (VirtualBox component under Oracle Virtualization). A vulnerability in the core could allow takeover of Oracle VM VirtualBox on affected products prior to 5.2.20. Exploitation details in sources indicate the issue can be triggered by an attacker wit...

CVE-2018-3145

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Parser. Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2018-3210

CVE-2018-3210 affects Oracle GlassFish Server 3.1.2 (Oracle Fusion Middleware), specifically the Java Server Faces subcomponent. An unauthenticated attacker with network access via HTTP can read a subset of data from the server. Public records in the provided documents confirm CVSSv3.0 base score...

CVE-2018-3290

CVE-2018-3290 affects the Oracle VM VirtualBox core component; affected in Oracle Virtualization before version 5.2.20. The vulnerability is described as easily exploitable with an unauthenticated attacker who has logon to the infrastructure where VirtualBox runs and requires user interaction, po...

CVE-2018-3193

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Activity Guide. Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSo...