CVEs

102,253 total · page 1717 of 2,046

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-3226	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3225	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3224	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3223	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3222	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3221	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3220	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.02	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3219	Oracle Corporation Fusion Middleware	Hig	0.46	7.1	0.02	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3218	Oracle Corporation Fusion Middleware	Hig	0.46	7.1	0.02	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3217	Oracle Corporation Outside In Technology	Hig	0.46	7.1	0.02	Oct 17, 2018	Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3213	Oracle Corporation Weblogic Server	Hig	0.49	7.5	0.04	Oct 17, 2018	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Docker Images). The supported version that is affected is prior to Docker 12.2.1.3.20180913. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3209	Oracle Corporation Java SE	Hig	0.54	8.3	0.03	Oct 17, 2018	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). The supported version that is affected is Java SE: 8u182. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2018-3208	Oracle Corporation Hyperion Data Relationship Management	Hig	0.50	7.7	0.02	Oct 17, 2018	Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and Security). The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-3204	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Server). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3196	Oracle Corporation Partner Management	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dashboard). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-3192	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2018-3190	Oracle Corporation E Business Suite	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle E-Business Intelligence component of Oracle E-Business Suite (subcomponent: Overview Page/Report Rendering). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-3189	Oracle Corporation Customer Interaction History	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Outcome-Result). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3188	Oracle Corporation Istore	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Web interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-3179	Oracle Corporation Fusion Middleware	Hig	0.47	7.2	0.02	Oct 17, 2018	Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3169	Oracle Corporation Java SE Embedded	Hig	0.54	8.3	0.04	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2018-3168	Oracle Corporation Fusion Middleware	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Identity Analytics component of Oracle Fusion Middleware (subcomponent: Core Components). The supported version that is affected is 11.1.1.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3165	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.02	Oct 17, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2018-3160	Oracle Corporation Hospitality Cruise Shipboard Property Management System	Hig	0.50	7.7	0.01	Oct 17, 2018	Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC Admin, OHC Management). The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged…
CVE-2018-3158	Oracle Corporation Hospitality Cruise Fleet Management	Hig	0.46	7.1	0.01	Oct 17, 2018	Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-3155	Oracle Corporation Mysql Server	Hig	0.50	7.7	0.04	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2018-3152	Oracle Corporation Glassfish Server	Hig	0.49	7.5	0.02	Oct 17, 2018	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-3151	Oracle Corporation Iprocurement	Hig	0.49	7.5	0.03	Oct 17, 2018	Vulnerability in the Oracle iProcurement component of Oracle E-Business Suite (subcomponent: E-Content Manager Catalog). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-3149	Oracle Corporation Jrockit	Hig	0.55	8.3	0.07	Oct 17, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows…
CVE-2018-3146	Oracle Corporation Ilearning	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). Supported versions that are affected are 6.1 and 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-3142	Oracle Corporation Hyperion	Hig	0.50	7.7	0.02	Oct 17, 2018	Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3138	Oracle Corporation Application Object Library	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-3128	Oracle Corporation Hospitality Reporting And Analytics	Hig	0.53	8.1	0.02	Oct 17, 2018	Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with network access via HTTP…
CVE-2018-3115	Oracle Corporation Retail Sales Audit	Hig	0.50	7.7	0.01	Oct 17, 2018	Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-3011	Oracle Corporation Trade Management	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2914	Oracle Corporation Goldengate	Hig	0.49	7.5	0.04	Oct 17, 2018	Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to…
CVE-2018-2912	Oracle Corporation Goldengate	Hig	0.49	7.5	0.04	Oct 17, 2018	Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to…
CVE-2018-2911	Oracle Corporation Glassfish Server	Hig	0.54	8.3	0.02	Oct 17, 2018	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-2909	Oracle Corporation VM Virtualbox	Hig	0.56	8.6	0.01	Oct 17, 2018	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-2889	Oracle Corporation Retail Applications	Hig	0.49	7.5	0.02	Oct 17, 2018	Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). The supported version that is affected is 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS…
CVE-2018-14772	Pydio Pydio	Hig	0.47	7.2	0.07	Oct 16, 2018	Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web application can execute arbitrary code on the underlying system via Command Injection.
CVE-2018-11025	Amazon Kindle Fire HD (3rd)	Hig	0.49	7.5	0.03	Oct 16, 2018	kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash.
CVE-2018-11024	Amazon Kindle Fire HD (3rd)	Hig	0.49	7.5	0.03	Oct 16, 2018	kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 1077435789 and cause a kernel crash.
CVE-2018-11023	Amazon Kindle Fire HD (3rd)	Hig	0.49	7.5	0.03	Oct 16, 2018	kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash.
CVE-2018-11022	Amazon Fire OS	Hig	0.49	7.5	0.03	Oct 16, 2018	kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3224132973 and cause a kernel crash.
CVE-2018-11021	Amazon Fire OS	Hig	0.49	7.5	0.03	Oct 16, 2018	kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash.
CVE-2018-11019	Amazon kernel	Hig	0.49	7.5	0.03	Oct 16, 2018	kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3221773726 and cause a kernel crash.
CVE-2018-6974	VMware Workstation	Hig	0.57	8.8	0.00	Oct 16, 2018	VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to…
CVE-2018-18385	—	Hig	0.49	7.5	0.02	Oct 16, 2018	Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that Parser.next_block was not exhausting all the lines in the reader as the while loop expected it would. This was happening because the regular…
CVE-2018-13399	Atlassian Fisheye	Hig	0.51	7.8	0.00	Oct 16, 2018	The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.

CVE-2018-3226HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3225HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3224HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3223HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3222HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3221HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3220HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3219HigOct 17, 2018
Oracle Corporation
Fusion Middleware
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3218HigOct 17, 2018
Oracle Corporation
Fusion Middleware
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3217HigOct 17, 2018
Oracle Corporation
Outside In Technology
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected are 8.5.3 and 8.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3213HigOct 17, 2018
Oracle Corporation
Weblogic Server
risk 0.49cvss 7.5epss 0.04
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Docker Images). The supported version that is affected is prior to Docker 12.2.1.3.20180913. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-3209HigOct 17, 2018
Oracle Corporation
Java SE
risk 0.54cvss 8.3epss 0.03
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). The supported version that is affected is Java SE: 8u182. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2018-3208HigOct 17, 2018
Oracle Corporation
Hyperion Data Relationship Management
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and Security). The supported version that is affected is 11.1.2.4.345. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-3204HigOct 17, 2018
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Server). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3196HigOct 17, 2018
Oracle Corporation
Partner Management
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dashboard). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-3192HigOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2018-3190HigOct 17, 2018
Oracle Corporation
E Business Suite
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle E-Business Intelligence component of Oracle E-Business Suite (subcomponent: Overview Page/Report Rendering). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-3189HigOct 17, 2018
Oracle Corporation
Customer Interaction History
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Outcome-Result). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-3188HigOct 17, 2018
Oracle Corporation
Istore
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Web interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-3179HigOct 17, 2018
Oracle Corporation
Fusion Middleware
risk 0.47cvss 7.2epss 0.02
Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2018-3169HigOct 17, 2018
Oracle Corporation
Java SE Embedded
risk 0.54cvss 8.3epss 0.04
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 7u191, 8u182 and 11; Java SE Embedded: 8u181. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2018-3168HigOct 17, 2018
Oracle Corporation
Fusion Middleware
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Identity Analytics component of Oracle Fusion Middleware (subcomponent: Core Components). The supported version that is affected is 11.1.1.5.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3165HigOct 17, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise…
CVE-2018-3160HigOct 17, 2018
Oracle Corporation
Hospitality Cruise Shipboard Property Management System
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponent: OHC Admin, OHC Management). The supported version that is affected is 8.0. Easily exploitable vulnerability allows high privileged…
CVE-2018-3158HigOct 17, 2018
Oracle Corporation
Hospitality Cruise Fleet Management
risk 0.46cvss 7.1epss 0.01
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Response System). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-3155HigOct 17, 2018
Oracle Corporation
Mysql Server
risk 0.50cvss 7.7epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols…
CVE-2018-3152HigOct 17, 2018
Oracle Corporation
Glassfish Server
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-3151HigOct 17, 2018
Oracle Corporation
Iprocurement
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle iProcurement component of Oracle E-Business Suite (subcomponent: E-Content Manager Catalog). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-3149HigOct 17, 2018
Oracle Corporation
Jrockit
risk 0.55cvss 8.3epss 0.07
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). Supported versions that are affected are Java SE: 6u201, 7u191, 8u182 and 11; Java SE Embedded: 8u181; JRockit: R28.3.19. Difficult to exploit vulnerability allows…
CVE-2018-3146HigOct 17, 2018
Oracle Corporation
Ilearning
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). Supported versions that are affected are 6.1 and 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-3142HigOct 17, 2018
Oracle Corporation
Hyperion
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…
CVE-2018-3138HigOct 17, 2018
Oracle Corporation
Application Object Library
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2018-3128HigOct 17, 2018
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with network access via HTTP…
CVE-2018-3115HigOct 17, 2018
Oracle Corporation
Retail Sales Audit
risk 0.50cvss 7.7epss 0.01
Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). Supported versions that are affected are 15.0 and 16.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2018-3011HigOct 17, 2018
Oracle Corporation
Trade Management
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2914HigOct 17, 2018
Oracle Corporation
Goldengate
risk 0.49cvss 7.5epss 0.04
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to…
CVE-2018-2912HigOct 17, 2018
Oracle Corporation
Goldengate
risk 0.49cvss 7.5epss 0.04
Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to…
CVE-2018-2911HigOct 17, 2018
Oracle Corporation
Glassfish Server
risk 0.54cvss 8.3epss 0.02
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). The supported version that is affected is 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2018-2909HigOct 17, 2018
Oracle Corporation
VM Virtualbox
risk 0.56cvss 8.6epss 0.01
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.2.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM…
CVE-2018-2889HigOct 17, 2018
Oracle Corporation
Retail Applications
risk 0.49cvss 7.5epss 0.02
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). The supported version that is affected is 12.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise MICROS…
CVE-2018-14772HigOct 16, 2018
Pydio
Pydio
risk 0.47cvss 7.2epss 0.07
Pydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an attacker with administrator access to the web application can execute arbitrary code on the underlying system via Command Injection.
CVE-2018-11025HigOct 16, 2018
Amazon
Kindle Fire HD (3rd)
risk 0.49cvss 7.5epss 0.03
kernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/twl6030-gpadc with the command 24832 and cause a kernel crash.
CVE-2018-11024HigOct 16, 2018
Amazon
Kindle Fire HD (3rd)
risk 0.49cvss 7.5epss 0.03
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 1077435789 and cause a kernel crash.
CVE-2018-11023HigOct 16, 2018
Amazon
Kindle Fire HD (3rd)
risk 0.49cvss 7.5epss 0.03
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3222560159 and cause a kernel crash.
CVE-2018-11022HigOct 16, 2018
Amazon
Fire OS
risk 0.49cvss 7.5epss 0.03
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3224132973 and cause a kernel crash.
CVE-2018-11021HigOct 16, 2018
Amazon
Fire OS
risk 0.49cvss 7.5epss 0.03
kernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/dsscomp with the command 1118064517 and cause a kernel crash.
CVE-2018-11019HigOct 16, 2018
Amazon
kernel
risk 0.49cvss 7.5epss 0.03
kernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire OS 4.5.5.3 allows attackers to inject a crafted argument via the argument of an ioctl on device /dev/gcioctl with the command 3221773726 and cause a kernel crash.
CVE-2018-6974HigOct 16, 2018
VMware
Workstation
risk 0.57cvss 8.8epss 0.00
VMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before ESXi600-201808401-BG), Workstation (14.x before 14.1.3) and Fusion (10.x before 10.1.3) contain an out-of-bounds read vulnerability in SVGA device. This issue may allow a guest to…
CVE-2018-18385HigOct 16, 2018
risk 0.49cvss 7.5epss 0.02
Asciidoctor in versions < 1.5.8 allows remote attackers to cause a denial of service (infinite loop). The loop was caused by the fact that Parser.next_block was not exhausting all the lines in the reader as the while loop expected it would. This was happening because the regular…
CVE-2018-13399HigOct 16, 2018
Atlassian
Fisheye
risk 0.51cvss 7.8epss 0.00
The Microsoft Windows Installer for Atlassian Fisheye and Crucible before version 4.6.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.