VYPR

CVEs

101,988 total · page 1794 of 2,040

AllCriticalHighKEV
  • CVE-2018-2844HigApr 19, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.57cvss 8.8epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2843HigApr 19, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.57cvss 8.8epss 0.00

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2842HigApr 19, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.57cvss 8.8epss 0.00

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2841HigApr 19, 2018
    Oracle Corporation
    Database Server
    risk 0.55cvss 8.5epss 0.02

    Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via…

  • CVE-2018-2840HigApr 19, 2018
    Oracle Corporation
    Retail Xstore Point Of Service
    risk 0.50cvss 7.6epss 0.01

    Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office). Supported versions that are affected are 6.5.11, 7.0.6, 7.1.6, 15.0.1 and 16.0.2. Easily exploitable vulnerability allows unauthenticated attacker…

  • CVE-2018-2837HigApr 19, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2836HigApr 19, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2835HigApr 19, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2834HigApr 19, 2018
    Oracle Corporation
    Fusion Middleware
    risk 0.55cvss 8.5epss 0.00

    Vulnerability in the Oracle Data Visualization Desktop component of Oracle Fusion Middleware (subcomponent: Security). The supported version that is affected is 12.2.4.1.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where…

  • CVE-2018-2833HigApr 19, 2018
    Oracle Corporation
    Hospitality Simphony
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 2.7, 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2018-2832HigApr 19, 2018
    Oracle Corporation
    Goldengate
    risk 0.56cvss 8.6epss 0.02

    Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate. The supported version that is affected is 12.2.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle GoldenGate. While the vulnerability is in…

  • CVE-2018-2830HigApr 19, 2018
    Oracle Corporation
    VM Virtualbox
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). Supported versions that are affected are Prior to 5.1.36 and Prior to 5.2.10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…

  • CVE-2018-2829HigApr 19, 2018
    Oracle Corporation
    Hospitality Simphony
    risk 0.56cvss 8.6epss 0.02

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). The supported version that is affected is 2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2018-2828HigApr 19, 2018
    Oracle Corporation
    Webcenter Content
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access…

  • CVE-2018-2827HigApr 19, 2018
    Oracle Corporation
    Hospitality Suite8
    risk 0.49cvss 7.6epss 0.01

    Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Profile). The supported version that is affected is 8.x. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle…

  • CVE-2018-2826HigApr 19, 2018
    Oracle Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.05

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2018-2825HigApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2018-2824HigApr 19, 2018
    Oracle Corporation
    Hospitality Simphony
    risk 0.50cvss 7.7epss 0.01

    Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network…

  • CVE-2018-2814HigApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2018-2811HigApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.50cvss 7.7epss 0.00

    Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). Supported versions that are affected are Java SE: 8u162 and 10. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Java SE executes to…

  • CVE-2018-2806HigApr 19, 2018
    Oracle Corporation
    Outside In Technology
    risk 0.46cvss 7.1epss 0.02

    Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2018-2804HigApr 19, 2018
    Oracle Corporation
    Application Object Library
    risk 0.48cvss 7.4epss 0.02

    Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: DB Privileges). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Difficult to exploit vulnerability allows unauthenticated…

  • CVE-2018-2803HigApr 19, 2018
    Oracle Corporation
    Hospitality Reporting And Analytics
    risk 0.53cvss 8.1epss 0.01

    Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). The supported version that is affected is 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…

  • CVE-2018-2801HigApr 19, 2018
    Oracle Corporation
    Outside In Technology
    risk 0.46cvss 7.1epss 0.02

    Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Image Export SDK). The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2018-2794HigApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.50cvss 7.7epss 0.01

    Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162, 10 and JRockit: R28.3.17. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…

  • CVE-2018-2791HigApr 19, 2018
    Oracle Corporation
    Webcenter Sites
    risk 0.59cvss 8.2epss 0.39

    Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). Supported versions that are affected are 11.1.1.8.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2018-2783HigApr 19, 2018
    Sun Corporation
    Java SE
    risk 0.48cvss 7.4epss 0.04

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u161 and 8u152; Java SE Embedded: 8u152; JRockit: R28.3.17. Difficult to exploit vulnerability allows…

  • CVE-2018-2774HigApr 19, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.48cvss 7.3epss 0.02

    Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2018-2772HigApr 19, 2018
    Oracle Corporation
    Peoplesoft Enterprise Peopletools
    risk 0.57cvss 8.8epss 0.02

    Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via…

  • CVE-2018-2770HigApr 19, 2018
    Oracle Corporation
    Adaptive Access Manager
    risk 0.50cvss 7.6epss 0.01

    Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware (subcomponent: OAAM Admin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise…

  • CVE-2018-2768HigApr 19, 2018
    Oracle Corporation
    Outside In Technology
    risk 0.46cvss 7.1epss 0.02

    Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). The supported version that is affected is 8.5.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…

  • CVE-2018-2765HigApr 19, 2018
    Oracle Corporation
    Security Service
    risk 0.49cvss 7.5epss 0.03

    Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with…

  • CVE-2018-2764HigApr 19, 2018
    Oracle Corporation
    Solaris
    risk 0.49cvss 7.5epss 0.03

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris.…

  • CVE-2018-2755HigApr 19, 2018
    Oracle Corporation
    Mysql Server
    risk 0.43cvss 7.7epss 0.01

    Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…

  • CVE-2018-2754HigApr 19, 2018
    Oracle Corporation
    Solaris
    risk 0.50cvss 7.7epss 0.00

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: ZVNET Driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris executes to…

  • CVE-2018-2750HigApr 19, 2018
    Oracle Corporation
    Enterprise Manager Base Platform
    risk 0.46cvss 7.1epss 0.01

    Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: UI Framework). The supported version that is affected is 12.1.0.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via…

  • CVE-2018-2746HigApr 19, 2018
    Oracle Corporation
    Banking Corporate Lending
    risk 0.46cvss 7.1epss 0.02

    Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with…

  • CVE-2018-2742HigApr 19, 2018
    Oracle Corporation
    Enterprise Manager Ops Center
    risk 0.48cvss 7.3epss 0.02

    Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Framework). Supported versions that are affected are 12.2.2 and 12.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…

  • CVE-2018-2718HigApr 19, 2018
    Oracle Corporation
    Solaris
    risk 0.49cvss 7.5epss 0.03

    Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via NFS to compromise Solaris. Successful…

  • CVE-2018-1167HigApr 19, 2018
    Spotify
    Music Player
    risk 0.58cvss 8.8epss 0.05

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Spotify Music Player 1.0.69.336. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific…

  • CVE-2018-10204HigApr 18, 2018
    PureVPN
    PureVPN
    risk 0.57cvss 8.8epss 0.02

    PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at…

  • CVE-2018-10194HigApr 18, 2018
    Artifex
    Ghostscript
    risk 0.51cvss 7.8epss 0.02

    The set_text_distance function in devices/vector/gdevpdts.c in the pdfwrite component in Artifex Ghostscript through 9.22 does not prevent overflows in text-positioning calculation, which allows remote attackers to cause a denial of service (application crash) or possibly have…

  • CVE-2018-7762HigApr 18, 2018
    Schneider Electric
    Modicon Quantum Plc
    risk 0.49cvss 7.5epss 0.01

    A vulnerability exists in the web services to process SOAP requests in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200 which could allow result in a buffer overflow.

  • CVE-2018-7759HigApr 18, 2018
    Schneider Electric
    Modicon Quantum Plc
    risk 0.49cvss 7.5epss 0.01

    A buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium, Modicon Quantum PLC, BMXNOR0200. The buffer overflow vulnerability is caused by the length of the source string specified (instead of the buffer size) as the number of bytes to be…

  • CVE-2018-7240HigApr 18, 2018
    Schneider Electric
    Modicon Quantum Plc
    risk 0.57cvss 8.8epss 0.03

    A vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the communication modules which could allow arbitrary code execution. An FTP command used to upgrade the firmware of the module can be misused to cause a denial of service, or in extreme cases, to…

  • CVE-2018-1000167HigApr 18, 2018
    risk 0.44cvss 7.8epss 0.04

    OISF suricata-update version 1.0.0a1 contains an Insecure Deserialization vulnerability in the insecure yaml.load-Function as used in the following files: config.py:136, config.py:142, sources.py:99 and sources.py:131. The "list-sources"-command is affected by this bug. that can…

  • CVE-2018-1000165HigApr 18, 2018
    risk 0.42cvss 7.5epss 0.01

    LightSAML version prior to 1.3.5 contains a Incorrect Access Control vulnerability in signature validation in readers in src/LightSaml/Model/XmlDSig/ that can result in impersonation of any user from Identity Provider. This vulnerability appears to have been fixed in 1.3.5 and…

  • CVE-2018-1000164HigApr 18, 2018
    risk 0.49cvss 7.5epss 0.02

    gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an attacker causing the server to return arbitrary HTTP headers. This vulnerability…

  • CVE-2018-1000158HigApr 18, 2018
    Cmsmadesimple
    Cmsmadesimple
    risk 0.57cvss 8.8epss 0.01

    cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of send_recovery_email in the line "$url = $config['admin_url'] . '/login.php?recoverme=' . $code;" that can result in Administrator Password Reset Poisoning, specifically a reset URL…

  • CVE-2018-1274HigApr 18, 2018
    risk 0.42cvss 7.5epss 0.02

    Spring Data Commons, versions 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property path parser vulnerability caused by unlimited resource allocation. An unauthenticated remote malicious user (or attacker) can issue requests against Spring Data REST…