Design/Logic Flaw

Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications subcomponent: Portal. Supported versions that are affected are 7.2.4.1.x, 7.2.4.2.x, 7.3.0.x.x and 7.3.0.1.x. Easily exploitable vulnerability allows unauthenticated attacker wi...

Code injection

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Stored Procedure. Supported versions that are affected are 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MyS...

Buffer overflow

Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications subcomponent: Base. The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hospitality Gue...

CVE-2018-2690

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2688

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2577

CVE-2018-2577 affects Oracle Solaris (Kernel subcomponent) in the Solaris component of the Sun Systems Products Suite, for the 11.3 release. The vulnerability is local: a low-privilege attacker with logon can compromise Solaris, potentially gaining unauthorized access to all Solaris-accessible da...

CVE-2018-2564

CVE-2018-2564 affects Oracle WebCenter Content (Content Server) in Oracle Fusion Middleware, version 11.1.1.9.0. The vulnerability allows an unauthenticated, network-accessible attacker via HTTP to compromise the system, with possible unauthorized creation, deletion or modification of data and re...

CVE-2017-10282

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to...

CVE-2018-2565

CVE-2018-2565 affects the MySQL Server component (InnoDB) of Oracle MySQL. Affected are MySQL 5.7.20 and earlier. The vulnerability is exploitable over the network via multiple protocols by a highly-privileged attacker and can cause a hang or a frequently repeatable crash (complete DOS) of MySQL ...

CVE-2018-2696

CVE-2018-2696 affects the MySQL Server component (Server : Security : Privileges) in Oracle MySQL. Reported affected versions include 5.6.38 and earlier, and 5.7.20 and earlier. The vulnerability can be exploited remotely by an unauthenticated attacker over several network protocols, potentially ...

CVE-2018-2582

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Hotspot. Supported versions that are affected are Java SE: 8u152 and 9.0.1; Java SE Embedded: 8u151. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols...

CVE-2018-2668

Disclaimer: This data contains information about vulnerable...

CVE-2018-2622

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-2668

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Optimizer. Supported versions that are affected are 5.5.58 and prior, 5.6.38 and prior and 5.7.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols...

CVE-2018-2569

Vulnerability in the Java ME SDK component of Oracle Java Micro Edition subcomponent: Installer. The supported version that is affected is 8.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Java ME SDK executes to compromise Java ME SDK...

CVE-2018-2688

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2694

CVE-2018-2694 describes a vulnerability in the core of the Oracle VM VirtualBox component. Affected are VirtualBox versions prior to 5.1.32 and prior to 5.2.6. The issue allows a low-privilege, logged-on attacker to compromise Oracle VM VirtualBox, with potential takeover of the VirtualBox enviro...

CVE-2018-2686

CVE-2018-2686 affects Oracle VM VirtualBox (Core) with affected versions prior to 5.1.32 and prior to 5.2.6. The vulnerability is described as easily exploitable, requiring a logon to the infrastructure and human interaction, and could lead to takeover of VirtualBox. CVSS v3.0 base score is 8.6 (...

CVE-2018-2685

CVE-2018-2685 affects Oracle VM VirtualBox Core; vulnerable in VirtualBox 5.1.x before 5.1.32 and 5.2.x before 5.2.6. Exploitation is described as easily exploitable with local access and user interaction required, potentially allowing takeover of VirtualBox (and impacting other products). Remedi...

CVE-2018-2686

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.32 and Prior to 5.2.6. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBo...