CVE-2018-2564

CVE-2018-2564 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, version 11.1.1.9.0. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to compromise the system, with possible unauthorized creation, deletion or modification of data and re...

CVE-2018-2565

CVE-2018-2565 affects the MySQL Server component (InnoDB) of Oracle MySQL. Affected are MySQL 5.7.20 and earlier. The vulnerability is exploitable over the network via multiple protocols by a highly-privileged attacker and can cause a hang or a frequently repeatable crash (complete DOS) of MySQL ...

CVE-2018-2622

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-2694

CVE-2018-2694 describes a vulnerability in the core of the Oracle VM VirtualBox component. Affected are VirtualBox versions prior to 5.1.32 and prior to 5.2.6. The issue allows a low-privilege, logged-on attacker to compromise Oracle VM VirtualBox, with potential takeover of the VirtualBox enviro...

CVE-2018-2668

Disclaimer: This data contains information about vulnerable...

CVE-2018-2685

CVE-2018-2685 affects Oracle VM VirtualBox Core; vulnerable in VirtualBox 5.1.x before 5.1.32 and 5.2.x before 5.2.6. Exploitation is described as easily exploitable with local access and user interaction required, potentially allowing takeover of VirtualBox (and impacting other products). Remedi...

CVE-2018-2676

CVE-2018-2676 affects the Oracle VM VirtualBox Core component. Affected are VirtualBox versions prior to 5.1.32 and prior to 5.2.6. The vulnerability allows a high-privilege attacker who has logon to the infrastructure where VirtualBox runs to compromise the VirtualBox instance, with potential ta...

CVE-2018-2667

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

CVE-2018-2667

CVE-2018-2667 affects the MySQL Server component (Server: Optimizer). Affected are 5.7.20 and earlier. The vulnerability allows a high-privilege attacker with network access via multiple protocols to cause a hang or a complete DoS through the MySQL Server Optimizer path. Several connected advisor...

CVE-2018-2612

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: InnoDB. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

CVE-2018-2698

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox...

CVE-2018-2686

CVE-2018-2686 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.1.32 and prior to 5.2.6. The vulnerability is described as easily exploitable, requiring a logon to the infrastructure and human interaction, and could lead to takeover of VirtualBox. CVSS v3.0 base score is 8.6 (...

CVE-2018-2622

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-2667

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successfu...

BuddyBoss Media <= 3.2.3 - Stored XSS

The album description does not perform input / output validation. According to the researcher: No reply from vendor. Issue not patched. Vulnerability can be exploited by any user. Form not vulnerable to CSRF. PoC '"...

designerbox.com XSS vulnerability

Open Bug Bounty ID: OBB-522633 Description| Value ---|--- Affected Website:| designerbox.com Open Bug Bounty Program:| Not created yet Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N...

Zimbra Collaboration Suite Cross Site Scripting

COMPASS SECURITY ADVISORY https://www.compass-security.com CVE ID : CVE-2017-8802 Product: Zimbra Collaboration Suite ZCS 1 Vendor: Synacor Inc. 2 Subject: Stored Cross-Site Scripting XSS Vulnerability Risk: High Effect: Exploitable by Anonymous Internet Adversaries Triggered in the Context of an...

Blender Sequencer imb_load_dpx_cineon Integer Overflow Code Execution Vulnerability

Summary An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted .cin file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

Vulnerability Spotlight: Ruby Rails Gem XSS Vulnerabilities

Vulnerabilities discovered by Zachary Sanchez of Cisco ASIG Overview Talos has discovered two XSS vulnerabilities in Ruby Rails Gems. Rails is a Ruby framework designed to create web services or web pages. Ruby Gems is a package manager for distributing software packages as 'gems'. The two XSS...

Monero: remote access to localhost daemon, can issue jsonrpc commands

NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: Remotely use...