CVEs

407,864 total · page 6025 of 8,158

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-2928	Oracle Corporation Solaris	Hig	0.53	8.1	0.02	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RAD). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris.…
CVE-2018-2927	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.28	4.3	0.01	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2926	Oracle Corporation Solaris	Hig	0.50	7.6	0.01	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NVIDIA-GFX Kernel driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise…
CVE-2018-2925	Oracle Corporation Bi Publisher	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2924	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.37	5.7	0.00	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2018-2923	Oracle Corporation Sun Zfs Storage Appliance Kit	Low	0.15	2.3	0.00	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2018-2921	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.38	5.8	0.02	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2920	Oracle Corporation Sun Zfs Storage Appliance Kit	Hig	0.48	7.4	0.01	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2018-2919	Oracle Corporation Peoplesoft Enterprise Peopletools	Med	0.40	6.1	0.02	Jul 18, 2018	Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Unified Navigation). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2918	Oracle Corporation Sun Zfs Storage Appliance Kit	Hig	0.49	7.5	0.02	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2018-2917	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.35	5.3	0.03	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2916	Oracle Corporation Sun Zfs Storage Appliance Kit	Low	0.18	2.7	0.02	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with network access…
CVE-2018-2915	Oracle Corporation Hyperion Data Relationship Management	Med	0.38	5.8	0.02	Jul 18, 2018	Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security). The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2018-2908	Oracle Corporation Solaris	Hig	0.50	7.7	0.02	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the…
CVE-2018-2907	Oracle Corporation Hyperion Financial Reporting	Hig	0.56	8.6	0.03	Jul 18, 2018	Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-2906	Oracle Corporation Hardware Management Pack	Low	0.24	3.7	0.02	Jul 18, 2018	Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise…
CVE-2018-2905	Oracle Corporation Sun Zfs Storage Appliance Kit	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2904	Oracle Corporation Communications Eagle Lnp Application Processor	Med	0.42	6.5	0.02	Jul 18, 2018	Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2903	Oracle Corporation Solaris	Med	0.29	4.4	0.00	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2018-2901	Oracle Corporation Solaris	Low	0.24	3.7	0.02	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via DHCP to compromise Solaris.…
CVE-2018-2900	Oracle Corporation Bi Publisher	Hig	0.53	8.2	0.02	Jul 18, 2018	Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2018-2899	Oracle Corporation Flexcube Universal Banking	Med	0.40	6.1	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily…
CVE-2018-2898	Oracle Corporation Flexcube Investor Servicing	Med	0.40	6.1	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2897	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.40	6.1	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows…
CVE-2018-2896	Oracle Corporation Banking Payments	Med	0.40	6.1	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-2895	Oracle Corporation Banking Corporate Lending	Med	0.40	6.1	0.02	Jul 18, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2894	Oracle Corporation Weblogic Server	Cri	0.68	9.8	0.50	Jul 18, 2018	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2893	Oracle Corporation Weblogic Server	Cri	0.69	9.8	0.70	Jul 18, 2018	Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-2892	Oracle Corporation Solaris	Hig	0.54	7.8	0.02	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2018-2891	Oracle Corporation Retail Bulk Data Integration	Med	0.40	6.1	0.01	Jul 18, 2018	Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications (subcomponent: BDI Job Scheduler). The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2888	Oracle Corporation Micros Retail J	Med	0.44	6.7	0.01	Jul 18, 2018	Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to…
CVE-2018-2882	Oracle Corporation Micros Retail J	Hig	0.50	7.7	0.01	Jul 18, 2018	Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Interfaces). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x,12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2881	Oracle Corporation Micros Retail J	Med	0.41	6.3	0.01	Jul 18, 2018	Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Database). Supported versions that are affected are 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-2767	MariaDB MariaDB	Low	0.13	3.1	0.02	Jul 18, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2018-2598	Oracle Corporation Mysql Workbench	Low	0.24	3.7	0.01	Jul 18, 2018	Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security: Encryption). Supported versions that are affected are 6.3.10 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2018-10871	389 Ds Base 389-ds-base	Low	0.25	3.8	0.01	Jul 18, 2018	389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker…
CVE-2018-14371	Eclipse Mojarra	Hig	0.42	7.5	0.04	Jul 18, 2018	The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.
CVE-2018-14379	Techsmith mp4v2	Hig	0.50	8.8	0.03	Jul 18, 2018	MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted MP4…
CVE-2018-14363	Neomutt Neomutt	Hig	0.42	7.5	0.02	Jul 17, 2018	An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
CVE-2018-14362	Mutt Mutt	Cri	0.57	9.8	0.04	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
CVE-2018-14361	Neomutt Neomutt	Cri	0.57	9.8	0.03	Jul 17, 2018	An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.
CVE-2018-14360	Neomutt Neomutt	Cri	0.57	9.8	0.03	Jul 17, 2018	An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.
CVE-2018-14359	Mutt Mutt	Cri	0.57	9.8	0.04	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.
CVE-2018-14358	Mutt Mutt	Cri	0.57	9.8	0.04	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.
CVE-2018-14357	Mutt Mutt	Cri	0.57	9.8	0.05	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
CVE-2018-14356	Mutt Mutt	Cri	0.57	9.8	0.03	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.
CVE-2018-14355	Mutt Mutt	Med	0.28	5.3	0.03	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.
CVE-2018-14354	Mutt Mutt	Cri	0.57	9.8	0.06	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
CVE-2018-14353	Mutt Mutt	Cri	0.57	9.8	0.04	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.
CVE-2018-14352	Mutt Mutt	Cri	0.57	9.8	0.04	Jul 17, 2018	An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.

CVE-2018-2928HigJul 18, 2018
Oracle Corporation
Solaris
risk 0.53cvss 8.1epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RAD). The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris.…
CVE-2018-2927MedJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.28cvss 4.3epss 0.01
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystems). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2926HigJul 18, 2018
Oracle Corporation
Solaris
risk 0.50cvss 7.6epss 0.01
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NVIDIA-GFX Kernel driver). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via ISCSI to compromise…
CVE-2018-2925MedJul 18, 2018
Oracle Corporation
Bi Publisher
risk 0.42cvss 6.5epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via…
CVE-2018-2924MedJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.37cvss 5.7epss 0.00
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2018-2923LowJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.15cvss 2.3epss 0.00
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2018-2921MedJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.38cvss 5.8epss 0.02
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2920HigJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.48cvss 7.4epss 0.01
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.19. Easily exploitable vulnerability allows low privileged attacker with network access…
CVE-2018-2919MedJul 18, 2018
Oracle Corporation
Peoplesoft Enterprise Peopletools
risk 0.40cvss 6.1epss 0.02
Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Unified Navigation). Supported versions that are affected are 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via…
CVE-2018-2918HigJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.49cvss 7.5epss 0.02
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Difficult to exploit vulnerability allows unauthenticated attacker with network…
CVE-2018-2917MedJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.35cvss 5.3epss 0.03
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2916LowJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.18cvss 2.7epss 0.02
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). The supported version that is affected is Prior to 8.7.18. Easily exploitable vulnerability allows high privileged attacker with network access…
CVE-2018-2915MedJul 18, 2018
Oracle Corporation
Hyperion Data Relationship Management
risk 0.38cvss 5.8epss 0.02
Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security). The supported version that is affected is 11.1.2.4.330. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to…
CVE-2018-2908HigJul 18, 2018
Oracle Corporation
Solaris
risk 0.50cvss 7.7epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with network access via RPC to compromise Solaris. While the…
CVE-2018-2907HigJul 18, 2018
Oracle Corporation
Hyperion Financial Reporting
risk 0.56cvss 8.6epss 0.03
Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models). The supported version that is affected is 11.1.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion…
CVE-2018-2906LowJul 18, 2018
Oracle Corporation
Hardware Management Pack
risk 0.24cvss 3.7epss 0.02
Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via IPMI to compromise…
CVE-2018-2905MedJul 18, 2018
Oracle Corporation
Sun Zfs Storage Appliance Kit
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services). The supported version that is affected is Prior to 8.7.20. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2904MedJul 18, 2018
Oracle Corporation
Communications Eagle Lnp Application Processor
risk 0.42cvss 6.5epss 0.02
Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2903MedJul 18, 2018
Oracle Corporation
Solaris
risk 0.29cvss 4.4epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2018-2901LowJul 18, 2018
Oracle Corporation
Solaris
risk 0.24cvss 3.7epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via DHCP to compromise Solaris.…
CVE-2018-2900HigJul 18, 2018
Oracle Corporation
Bi Publisher
risk 0.53cvss 8.2epss 0.02
Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools). The supported version that is affected is 11.1.1.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise BI Publisher.…
CVE-2018-2899MedJul 18, 2018
Oracle Corporation
Flexcube Universal Banking
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily…
CVE-2018-2898MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2897MedJul 18, 2018
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.3.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows…
CVE-2018-2896MedJul 18, 2018
Oracle Corporation
Banking Payments
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core). Supported versions that are affected are 12.2.0, 12.3.0, 12.4.0, 12.5.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-2895MedJul 18, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.40cvss 6.1epss 0.02
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0, 14.0.0 and 14.1.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2894CriJul 18, 2018
Oracle Corporation
Weblogic Server
risk 0.68cvss 9.8epss 0.50
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access…
CVE-2018-2893CriJul 18, 2018
Oracle Corporation
Weblogic Server
risk 0.69cvss 9.8epss 0.70
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2018-2892HigJul 18, 2018
Oracle Corporation
Solaris
risk 0.54cvss 7.8epss 0.02
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where…
CVE-2018-2891MedJul 18, 2018
Oracle Corporation
Retail Bulk Data Integration
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications (subcomponent: BDI Job Scheduler). The supported version that is affected is 16.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to…
CVE-2018-2888MedJul 18, 2018
Oracle Corporation
Micros Retail J
risk 0.44cvss 6.7epss 0.01
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x, 12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Difficult to exploit vulnerability allows physical access to…
CVE-2018-2882HigJul 18, 2018
Oracle Corporation
Micros Retail J
risk 0.50cvss 7.7epss 0.01
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Interfaces). Supported versions that are affected are 10.2.x, 11.0.x, 12.0.x,12.1.x, 12.1.1.x,12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2018-2881MedJul 18, 2018
Oracle Corporation
Micros Retail J
risk 0.41cvss 6.3epss 0.01
Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Database). Supported versions that are affected are 11.0.x, 12.0.x, 12.1.x, 12.1.1.x, 12.1.2.x and 13.1.x. Easily exploitable vulnerability allows low privileged attacker with network…
CVE-2018-2767LowJul 18, 2018
MariaDB
MariaDB
risk 0.13cvss 3.1epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption). Supported versions that are affected are 5.5.60 and prior, 5.6.40 and prior and 5.7.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with…
CVE-2018-2598LowJul 18, 2018
Oracle Corporation
Mysql Workbench
risk 0.24cvss 3.7epss 0.01
Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security: Encryption). Supported versions that are affected are 6.3.10 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple…
CVE-2018-10871LowJul 18, 2018
389 Ds Base
389-ds-base
risk 0.25cvss 3.8epss 0.01
389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information. By default, when the Replica and/or retroChangeLog plugins are enabled, 389-ds-base stores passwords in plaintext format in their respective changelog files. An attacker…
CVE-2018-14371HigJul 18, 2018
Eclipse
Mojarra
risk 0.42cvss 7.5epss 0.04
The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacker can download configuration files or Java bytecodes from applications.
CVE-2018-14379HigJul 18, 2018
Techsmith
mp4v2
risk 0.50cvss 8.8epss 0.03
MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted MP4…
CVE-2018-14363HigJul 17, 2018
Neomutt
Neomutt
risk 0.42cvss 7.5epss 0.02
An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames.
CVE-2018-14362CriJul 17, 2018
Mutt
Mutt
risk 0.57cvss 9.8epss 0.04
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character.
CVE-2018-14361CriJul 17, 2018
Neomutt
Neomutt
risk 0.57cvss 9.8epss 0.03
An issue was discovered in NeoMutt before 2018-07-16. nntp.c proceeds even if memory allocation fails for messages data.
CVE-2018-14360CriJul 17, 2018
Neomutt
Neomutt
risk 0.57cvss 9.8epss 0.03
An issue was discovered in NeoMutt before 2018-07-16. nntp_add_group in newsrc.c has a stack-based buffer overflow because of incorrect sscanf usage.
CVE-2018-14359CriJul 17, 2018
Mutt
Mutt
risk 0.57cvss 9.8epss 0.04
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They have a buffer overflow via base64 data.
CVE-2018-14358CriJul 17, 2018
Mutt
Mutt
risk 0.57cvss 9.8epss 0.04
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/message.c has a stack-based buffer overflow for a FETCH response with a long RFC822.SIZE field.
CVE-2018-14357CriJul 17, 2018
Mutt
Mutt
risk 0.57cvss 9.8epss 0.05
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with an automatic subscription.
CVE-2018-14356CriJul 17, 2018
Mutt
Mutt
risk 0.57cvss 9.8epss 0.03
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c mishandles a zero-length UID.
CVE-2018-14355MedJul 17, 2018
Mutt
Mutt
risk 0.28cvss 5.3epss 0.03
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name.
CVE-2018-14354CriJul 17, 2018
Mutt
Mutt
risk 0.57cvss 9.8epss 0.06
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. They allow remote IMAP servers to execute arbitrary commands via backquote characters, related to the mailboxes command associated with a manual subscription or unsubscription.
CVE-2018-14353CriJul 17, 2018
Mutt
Mutt
risk 0.57cvss 9.8epss 0.04
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c has an integer underflow.
CVE-2018-14352CriJul 17, 2018
Mutt
Mutt
risk 0.57cvss 9.8epss 0.04
An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap_quote_string in imap/util.c does not leave room for quote characters, leading to a stack-based buffer overflow.