PT-2018-16121

Name of the Vulnerable Software and Affected Versions BMC Firmware in Intel server boards, compute modules, and systems affected versions not specified Description The issue potentially allows an attacker with administrative privileges to make unauthorized read/writes to the SMBUS. Recommendation...

CVE-2018-3682: Improper Privilege Management

BMC Firmware in Intel server boards, compute modules, and systems potentially allow an attacker with administrative privileges to make unauthorized read\writes to the SMBUS...

CVE-2018-11051: Improper Limitation of a Pathname to a Restricted Directory

RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enroll Server. A remote unauthenticated attacker could potentially exploit this vulnerability by manipulating input parameters of the applicati...

PT-2018-9448

Name of the Vulnerable Software and Affected Versions Trovebox versions prior to 4.0.0-rc6 after commit 742b8ed contains the fix, implying versions up to 4.0.0-rc6 are affected Description The issue is related to a Server-Side request forgery vulnerability in the webhook component. This can lead ...

PT-2018-2349

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue is related to the Application Management Pack for Oracle E-Business Suite component, specifically the User Monitoring subcomponent. It allows...

Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit Component Unauthorized Operation Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the API frameworks subcomponent of the Sun ZFS Storage AK component in the Oracle Sun Systems...

mysql: Server: DDL unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

PT-2018-3365

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.5.60 and prior MySQL Server versions 5.6.40 and prior MySQL Server versions 5.7.22 and prior Description: The issue is related to a lack of protection for service data in the MySQL Server component of Oracle MySQL,...

CVE-2018-2831

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization subcomponent: Core. Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBo...

CVE-2018-2813

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

CVE-2018-2858: Undefined Security Weakness

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: HTTP data path subsystems. The supported version that is affected is Prior to 8.7.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

PT-2018-15773

Name of the Vulnerable Software and Affected Versions Oracle Retail Returns Management versions 2.3.8, 2.4.9, 14.0.4, and 14.1.3 Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Retail Returns Management. Successful attacks can result in...

PT-2018-15867

Name of the Vulnerable Software and Affected Versions Oracle Financial Services Basel Regulatory Capital Basic version 8.0.x Description The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Basel Regulatory Capital Basic. Successful...

CVE-2018-2867: Undefined Security Weakness

Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite subcomponent: Diagnostics. Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

CVE-2018-2872: Undefined Security Weakness

Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite subcomponent: Account Hierarchy Manager. Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker wit...

CVE-2018-2789: Undefined Security Weakness

Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM subcomponent: Services. The supported version that is affected is 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. Whi...

PT-2018-15876

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions prior to 8.7.17 Description The issue allows a low-privileged attacker with network access via HTTP to compromise the system, potentially impacting additional products. Successful attacks can result i...

PT-2018-15885

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Account Hierarchy Manager subcomponent of Oracle General Ledger, allowing an unauthenticated attacker with networ...

PT-2018-15879

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 Description The issue affects the Consolidation Hierarchy Viewer subcomponent of Oracle General Ledger, allowing an unauthenticated attacker with...

CVE-2018-2813: Undefined Security Weakness

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: DDL. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...