CVEs

101,963 total · page 1862 of 2,040

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2017-10401	Oracle Corporation Hospitality Cruise Materials Management	Hig	0.57	8.7	0.00		Oct 19, 2017	Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMSUpdater). The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2017-10398	Oracle Corporation Hospitality Cruise Fleet Management	Hig	0.55	8.4	0.00		Oct 19, 2017	Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2017-10392	Oracle Corporation VM Virtualbox	Hig	0.47	7.3	0.00		Oct 19, 2017	Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10391	Oracle Corporation Glassfish Server	Hig	0.48	7.3	0.02		Oct 19, 2017	Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10388	NetApp Steelstore Cloud Integrated Storage	Hig	0.49	7.5	0.03		Oct 19, 2017	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2017-10373	Oracle Corporation Health Center	Hig	0.49	7.5	0.02		Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Health Center). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10372	Oracle Corporation Hospitality Guest Access	Hig	0.57	8.7	0.01		Oct 19, 2017	Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-10369	Oracle Corporation Virtual Directory	Hig	0.49	7.5	0.01		Oct 19, 2017	Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access…
CVE-2017-10364	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.53	8.1	0.02		Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Environment Mgmt). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10363	Oracle Corporation Flexcube Universal Banking	Hig	0.46	7.1	0.02		Oct 19, 2017	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security). Supported versions that are affected are 11.3, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability…
CVE-2017-10362	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.47	7.2	0.02		Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10360	Oracle Corporation Webcenter Content	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-10354	Oracle Corporation Peoplesoft Enterprise Prtl Interaction Hub	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10353	Oracle Corporation Hospitality Hotel Mobile	Hig	0.46	7.1	0.02		Oct 19, 2017	Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI). The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10338	Oracle Corporation Peoplesoft Enterprise Prtl Interaction Hub	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10335	Oracle Corporation Peoplesoft Enterprise Peopletools	Hig	0.49	7.5	0.03		Oct 19, 2017	Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10333	Oracle Corporation Siebel UI Framework	Hig	0.48	7.4	0.01		Oct 19, 2017	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-10332	Oracle Corporation Universal Work Queue	Hig	0.49	7.5	0.03		Oct 19, 2017	Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2017-10328	Oracle Corporation Application Object Library	Hig	0.49	7.5	0.03		Oct 19, 2017	Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-10326	Oracle Corporation Common Applications Calendar	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability…
CVE-2017-10325	Oracle Corporation Common Applications Calendar	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability…
CVE-2017-10323	Oracle Corporation Web Applications Desktop Integrator	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite (subcomponent: Application Service). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-10321	Oracle Corporation Database Server	Hig	0.57	8.8	0.00		Oct 19, 2017	Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create session privilege with logon to the infrastructure where…
CVE-2017-10312	Oracle Corporation Hyperion Bi\+	Hig	0.46	7.1	0.02		Oct 19, 2017	Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2017-10310	Oracle Corporation Hyperion Financial Reporting	Hig	0.49	7.5	0.03		Oct 19, 2017	Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10309	NetApp Steelstore Cloud Integrated Storage	Hig	0.50	7.1	0.09		Oct 19, 2017	Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2017-10303	Oracle Corporation Interaction Center Intelligence	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Setup). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10271	Oracle Corporation Weblogic Server	Hig	0.78	7.5	1.00	KEV	Oct 19, 2017	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10270	Oracle Corporation Identity Manager Connector	Hig	0.53	8.2	0.00		Oct 19, 2017	Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware (subcomponent: Microsoft Active Directory). The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the…
CVE-2017-10265	Oracle Corporation Sun Systems Products Suite	Hig	0.48	7.3	0.01		Oct 19, 2017	Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10263	Oracle Corporation Siebel UI Framework	Hig	0.53	8.2	0.01		Oct 19, 2017	Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI…
CVE-2017-10260	Oracle Corporation Sun Systems Products Suite	Hig	0.49	7.5	0.02		Oct 19, 2017	Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10259	Oracle Corporation Fusion Middleware	Hig	0.49	7.5	0.03		Oct 19, 2017	Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10190	Oracle Corporation Database Server	Hig	0.53	8.2	0.00		Oct 19, 2017	Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Create Procedure privilege with logon to the…
CVE-2017-10155	Oracle Corporation MySQL	Hig	0.49	7.5	0.04		Oct 19, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10065	Oracle Corporation Retail Applications	Hig	0.55	8.5	0.01		Oct 19, 2017	Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10060	Oracle Corporation Oracle Business Intelligence Enterprise Edition	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows…
CVE-2017-10050	Oracle Corporation Hospitality Suite8	Hig	0.53	8.2	0.01		Oct 19, 2017	Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10037	Oracle Corporation Fusion Middleware	Hig	0.49	7.5	0.03		Oct 19, 2017	Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10034	Oracle Corporation Fusion Middleware	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10026	Oracle Corporation Soa Suite	Hig	0.53	8.2	0.02		Oct 19, 2017	Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Fabric Layer). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA…
CVE-2017-12579	Hashicorp Vagrant Vmware Fusion	Hig	0.54	7.8	0.01		Oct 19, 2017	An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to obtain a root shell.
CVE-2017-3883	Cisco Systems, Inc. Firepower Extensible Operating System	Hig	0.56	8.6	0.04		Oct 19, 2017	A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability…
CVE-2017-15609	Octopus Octopusdeploy	Hig	0.49	7.5	0.01		Oct 19, 2017	Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets.
CVE-2017-12293	Cisco Systems, Inc. Webex Meetings Server	Hig	0.56	8.6	0.02		Oct 19, 2017	A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected software. An attacker…
CVE-2017-12271	Cisco Systems, Inc. Spa300 Firmware	Hig	0.57	8.8	0.01		Oct 19, 2017	A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this…
CVE-2017-12260	Cisco Systems, Inc. Spa300 Firmware	Hig	0.49	7.5	0.02		Oct 19, 2017	A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial…
CVE-2017-12259	Cisco Systems, Inc. Small Business SPA51x Series IP Phones	Hig	0.49	7.5	0.02		Oct 19, 2017	A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS)…
CVE-2017-15602	GNU Libextractor	Hig	0.49	7.5	0.02		Oct 18, 2017	In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.
CVE-2017-15601	GNU Libextractor	Hig	0.49	7.5	0.02		Oct 18, 2017	In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup.

CVE-2017-10401HigOct 19, 2017
Oracle Corporation
Hospitality Cruise Materials Management
risk 0.57cvss 8.7epss 0.00
Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMSUpdater). The supported version that is affected is 7.30.564.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2017-10398HigOct 19, 2017
Oracle Corporation
Hospitality Cruise Fleet Management
risk 0.55cvss 8.4epss 0.00
Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage). The supported version that is affected is 9.0.2.0. Easily exploitable vulnerability allows low privileged attacker with logon to the…
CVE-2017-10392HigOct 19, 2017
Oracle Corporation
VM Virtualbox
risk 0.47cvss 7.3epss 0.00
Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM…
CVE-2017-10391HigOct 19, 2017
Oracle Corporation
Glassfish Server
risk 0.48cvss 7.3epss 0.02
Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10388HigOct 19, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2017-10373HigOct 19, 2017
Oracle Corporation
Health Center
risk 0.49cvss 7.5epss 0.02
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Health Center). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10372HigOct 19, 2017
Oracle Corporation
Hospitality Guest Access
risk 0.57cvss 8.7epss 0.01
Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). Supported versions that are affected are 4.2.0 and 4.2.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to…
CVE-2017-10369HigOct 19, 2017
Oracle Corporation
Virtual Directory
risk 0.49cvss 7.5epss 0.01
Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Difficult to exploit vulnerability allows low privileged attacker with network access…
CVE-2017-10364HigOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.53cvss 8.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Environment Mgmt). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2017-10363HigOct 19, 2017
Oracle Corporation
Flexcube Universal Banking
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security). Supported versions that are affected are 11.3, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability…
CVE-2017-10362HigOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.47cvss 7.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10360HigOct 19, 2017
Oracle Corporation
Webcenter Content
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). Supported versions that are affected are 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network…
CVE-2017-10354HigOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Prtl Interaction Hub
risk 0.53cvss 8.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10353HigOct 19, 2017
Oracle Corporation
Hospitality Hotel Mobile
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI). The supported version that is affected is 1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to…
CVE-2017-10338HigOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Prtl Interaction Hub
risk 0.53cvss 8.2epss 0.02
Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal). The supported version that is affected is 9.1.00. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10335HigOct 19, 2017
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.49cvss 7.5epss 0.03
Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10333HigOct 19, 2017
Oracle Corporation
Siebel UI Framework
risk 0.48cvss 7.4epss 0.01
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel UI Framework.…
CVE-2017-10332HigOct 19, 2017
Oracle Corporation
Universal Work Queue
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: Administration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows…
CVE-2017-10328HigOct 19, 2017
Oracle Corporation
Application Object Library
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2017-10326HigOct 19, 2017
Oracle Corporation
Common Applications Calendar
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability…
CVE-2017-10325HigOct 19, 2017
Oracle Corporation
Common Applications Calendar
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability…
CVE-2017-10323HigOct 19, 2017
Oracle Corporation
Web Applications Desktop Integrator
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite (subcomponent: Application Service). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows…
CVE-2017-10321HigOct 19, 2017
Oracle Corporation
Database Server
risk 0.57cvss 8.8epss 0.00
Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows low privileged attacker having Create session privilege with logon to the infrastructure where…
CVE-2017-10312HigOct 19, 2017
Oracle Corporation
Hyperion Bi\+
risk 0.46cvss 7.1epss 0.02
Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2017-10310HigOct 19, 2017
Oracle Corporation
Hyperion Financial Reporting
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10309HigOct 19, 2017
NetApp
Steelstore Cloud Integrated Storage
risk 0.50cvss 7.1epss 0.09
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…
CVE-2017-10303HigOct 19, 2017
Oracle Corporation
Interaction Center Intelligence
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Setup). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10271HigKEVOct 19, 2017
Oracle Corporation
Weblogic Server
risk 0.78cvss 7.5epss 1.00
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10270HigOct 19, 2017
Oracle Corporation
Identity Manager Connector
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware (subcomponent: Microsoft Active Directory). The supported version that is affected is 9.1.1.5.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the…
CVE-2017-10265HigOct 19, 2017
Oracle Corporation
Sun Systems Products Suite
risk 0.48cvss 7.3epss 0.01
Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10263HigOct 19, 2017
Oracle Corporation
Siebel UI Framework
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). Supported versions that are affected are 16.0 and 17.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Siebel UI…
CVE-2017-10260HigOct 19, 2017
Oracle Corporation
Sun Systems Products Suite
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System Management). The supported version that is affected is Prior to 3.2.6. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2017-10259HigOct 19, 2017
Oracle Corporation
Fusion Middleware
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise…
CVE-2017-10190HigOct 19, 2017
Oracle Corporation
Database Server
risk 0.53cvss 8.2epss 0.00
Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Easily exploitable vulnerability allows high privileged attacker having Create Session, Create Procedure privilege with logon to the…
CVE-2017-10155HigOct 19, 2017
Oracle Corporation
MySQL
risk 0.49cvss 7.5epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2017-10065HigOct 19, 2017
Oracle Corporation
Retail Applications
risk 0.55cvss 8.5epss 0.01
Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are 13.2, 13.3, 13.4, 14.0 and 14.1. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2017-10060HigOct 19, 2017
Oracle Corporation
Oracle Business Intelligence Enterprise Edition
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web General). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows…
CVE-2017-10050HigOct 19, 2017
Oracle Corporation
Hospitality Suite8
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect). Supported versions that are affected are 8.10.1 and 8.10.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10037HigOct 19, 2017
Oracle Corporation
Fusion Middleware
risk 0.49cvss 7.5epss 0.03
Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2017-10034HigOct 19, 2017
Oracle Corporation
Fusion Middleware
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API). Supported versions that are affected are 11.1.1.7.0 and 11.1.1.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP…
CVE-2017-10026HigOct 19, 2017
Oracle Corporation
Soa Suite
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Fabric Layer). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA…
CVE-2017-12579HigOct 19, 2017
Hashicorp
Vagrant Vmware Fusion
risk 0.54cvss 7.8epss 0.01
An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-root user to obtain a root shell.
CVE-2017-3883HigOct 19, 2017
Cisco Systems, Inc.
Firepower Extensible Operating System
risk 0.56cvss 8.6epss 0.04
A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FXOS) and NX-OS System Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability…
CVE-2017-15609HigOct 19, 2017
Octopus
Octopusdeploy
risk 0.49cvss 7.5epss 0.01
Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop Targets.
CVE-2017-12293HigOct 19, 2017
Cisco Systems, Inc.
Webex Meetings Server
risk 0.56cvss 8.6epss 0.02
A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to insufficient limitations on the number of connections that can be made to the affected software. An attacker…
CVE-2017-12271HigOct 19, 2017
Cisco Systems, Inc.
Spa300 Firmware
risk 0.57cvss 8.8epss 0.01
A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on an affected device. The vulnerability is due to a lack of cross-site request forgery (CSRF) protection. An attacker could exploit this…
CVE-2017-12260HigOct 19, 2017
Cisco Systems, Inc.
Spa300 Firmware
risk 0.49cvss 7.5epss 0.02
A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial…
CVE-2017-12259HigOct 19, 2017
Cisco Systems, Inc.
Small Business SPA51x Series IP Phones
risk 0.49cvss 7.5epss 0.02
A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones could allow an unauthenticated, remote attacker to cause an affected device to become unresponsive, resulting in a denial of service (DoS)…
CVE-2017-15602HigOct 18, 2017
GNU
Libextractor
risk 0.49cvss 7.5epss 0.02
In GNU Libextractor 1.4, there is an integer signedness error for the chunk size in the EXTRACTOR_nsfe_extract_method function in plugins/nsfe_extractor.c, leading to an infinite loop for a crafted size.
CVE-2017-15601HigOct 18, 2017
GNU
Libextractor
risk 0.49cvss 7.5epss 0.02
In GNU Libextractor 1.4, there is a heap-based buffer overflow in the EXTRACTOR_png_extract_method function in plugins/png_extractor.c, related to processiTXt and stndup.