Vendor CVEs

Oracle Corporation

All CVEs

13,473 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-13631	SQLite SQLite	Med	0.29	5.5	0.01	May 27, 2020	SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
CVE-2020-13434	SQLite SQLite	Med	0.29	5.5	0.01	May 24, 2020	SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVE-2020-9489	Apache Tika	Med	0.29	5.5	0.03	Apr 27, 2020	A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika…
CVE-2020-2930	Fedoraproject Fedora	Med	0.29	4.4	0.02	Apr 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2020-2926	Fedoraproject Fedora	Med	0.29	4.4	0.02	Apr 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-2921	Fedoraproject Fedora	Med	0.29	4.4	0.02	Apr 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-2760	MySQL Server	Med	0.29	5.5	0.03	Apr 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-2656	Oracle Corporation Solaris	Med	0.29	4.4	0.01	Jan 15, 2020	Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to…
CVE-2020-2584	NetApp Snapcenter	Med	0.29	4.4	0.02	Jan 15, 2020	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols…
CVE-2019-3018	Fedoraproject Fedora	Med	0.29	4.4	0.02	Oct 16, 2019	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2019-3009	Fedoraproject Fedora	Med	0.29	4.4	0.03	Oct 16, 2019	Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2019-2938	Fedoraproject Fedora	Med	0.29	4.4	0.03	Oct 16, 2019	Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2019-2770	Oracle Corporation Hyperion Planning	Med	0.29	4.5	0.01	Jul 23, 2019	Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Smart View). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion…
CVE-2019-2758	MariaDB MariaDB	Med	0.29	5.5	0.03	Jul 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2019-2636	Oracle Corporation MySQL	Med	0.29	4.4	0.02	Apr 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Group Replication Plugin). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via MySQL Procotol to…
CVE-2019-2630	Oracle Corporation MySQL	Med	0.29	4.4	0.02	Apr 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2019-2617	Fedoraproject Fedora	Med	0.29	4.4	0.02	Apr 23, 2019	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2019-2397	Oracle Corporation Hospitality Reporting And Analytics	Med	0.29	4.4	0.00	Jan 16, 2019	Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the…
CVE-2018-3283	NetApp Snapcenter	Med	0.29	4.4	0.02	Oct 17, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple…
CVE-2018-3264	Oracle Corporation Solaris	Med	0.29	4.4	0.00	Oct 17, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2016-9583	Jasper Project Jasper	Med	0.29	5.5	0.02	Aug 1, 2018	An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.
CVE-2018-2962	Oracle Corporation Primavera P6 Enterprise Project Portfolio Management	Med	0.29	4.4	0.01	Jul 18, 2018	Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Difficult to exploit vulnerability allows low…
CVE-2018-2903	Oracle Corporation Solaris	Med	0.29	4.4	0.00	Jul 18, 2018	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2018-2799	Sun Corporation Java SE	Med	0.29	5.3	0.15	Apr 19, 2018	Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2787	MariaDB MariaDB	Med	0.29	5.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2786	MariaDB MariaDB	Med	0.29	5.5	0.03	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2018-2762	Oracle Corporation MySQL	Med	0.29	4.4	0.00	Apr 19, 2018	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server…
CVE-2018-1324	Apache Commons Compress	Med	0.29	5.5	0.04	Mar 16, 2018	A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that…
CVE-2018-2602	Sun Corporation Java SE	Med	0.29	4.5	0.01	Jan 18, 2018	Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2018-2580	Oracle Corporation Applications Dba	Med	0.29	4.4	0.00	Jan 18, 2018	Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: ADPatch). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with logon to…
CVE-2017-10286	MariaDB MariaDB	Med	0.29	4.4	0.02	Oct 19, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple…
CVE-2017-10099	Oracle Corporation SPARC M7, T7, S7 based Servers	Med	0.29	4.4	0.00	Oct 19, 2017	Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is Prior to 9.7.6.b. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2017-10033	Oracle Corporation Webcenter Sites	Med	0.29	4.0	0.02	Oct 19, 2017	Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2017-3649	Oracle Corporation MySQL	Med	0.29	4.4	0.03	Aug 8, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via…
CVE-2017-3648	Oracle Corporation MySQL	Med	0.29	4.4	0.03	Aug 8, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network…
CVE-2017-3647	Oracle Corporation MySQL	Med	0.29	4.4	0.03	Aug 8, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via…
CVE-2017-10200	Oracle Corporation Hospitality E7	Med	0.29	4.4	0.00	Aug 8, 2017	Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2017-10182	Oracle Corporation Hospitality Opera 5 Property Services	Med	0.29	4.4	0.01	Aug 8, 2017	Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Export Functionality). Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high…
CVE-2017-10003	Oracle Corporation Solaris	Med	0.29	4.5	0.00	Aug 8, 2017	Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network Services Library). The supported version that is affected is 10. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris…
CVE-2017-3483	Oracle Corporation Flexcube Enterprise Limits And Collateral Management	Med	0.29	4.4	0.00	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows high…
CVE-2017-3243	MariaDB MariaDB	Med	0.29	4.4	0.04	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2016-8327	Oracle Corporation MySQL	Med	0.29	4.4	0.02	Jan 27, 2017	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via…
CVE-2016-8290	Oracle Corporation MySQL	Med	0.29	4.4	0.02	Oct 25, 2016	Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-5633.
CVE-2016-8287	Oracle Corporation MySQL	Med	0.29	4.5	0.02	Oct 25, 2016	Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Replication.
CVE-2016-8283	MariaDB MariaDB	Med	0.29	4.3	0.07	Oct 25, 2016	Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
CVE-2016-5584	MariaDB MariaDB	Med	0.29	4.4	0.01	Oct 25, 2016	Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
CVE-2015-8922	Libarchive Libarchive	Med	0.29	5.5	0.02	Sep 20, 2016	The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.
CVE-2016-3488	Oracle Corporation Database Server	Med	0.29	4.4	0.00	Jul 21, 2016	Unspecified vulnerability in the DB Sharding component in Oracle Database Server 12.1.0.2 allows local users to affect integrity via unknown vectors.
CVE-2016-3480	Oracle Corporation Solaris Cluster	Med	0.29	4.4	0.00	Jul 21, 2016	Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql.
CVE-2016-2178	OpenSSL Project OpenSSL	Med	0.29	5.5	0.01	Jun 20, 2016	The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

CVE-2020-13631MedMay 27, 2020
SQLite
SQLite
risk 0.29cvss 5.5epss 0.01
SQLite before 3.32.0 allows a virtual table to be renamed to the name of one of its shadow tables, related to alter.c and build.c.
CVE-2020-13434MedMay 24, 2020
SQLite
SQLite
risk 0.29cvss 5.5epss 0.01
SQLite through 3.32.0 has an integer overflow in sqlite3_str_vappendf in printf.c.
CVE-2020-9489MedApr 27, 2020
Apache
Tika
risk 0.29cvss 5.5epss 0.03
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache Tika…
CVE-2020-2930MedApr 15, 2020
Fedoraproject
Fedora
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2020-2926MedApr 15, 2020
Fedoraproject
Fedora
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-2921MedApr 15, 2020
Fedoraproject
Fedora
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-2760MedApr 15, 2020
MySQL
Server
risk 0.29cvss 5.5epss 0.03
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2020-2656MedJan 15, 2020
Oracle Corporation
Solaris
risk 0.29cvss 4.4epss 0.01
Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to…
CVE-2020-2584MedJan 15, 2020
NetApp
Snapcenter
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols…
CVE-2019-3018MedOct 16, 2019
Fedoraproject
Fedora
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2019-3009MedOct 16, 2019
Fedoraproject
Fedora
risk 0.29cvss 4.4epss 0.03
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL…
CVE-2019-2938MedOct 16, 2019
Fedoraproject
Fedora
risk 0.29cvss 4.4epss 0.03
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2019-2770MedJul 23, 2019
Oracle Corporation
Hyperion Planning
risk 0.29cvss 4.5epss 0.01
Vulnerability in the Oracle Hyperion Planning component of Oracle Hyperion (subcomponent: Smart View). The supported version that is affected is 11.1.2.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Hyperion…
CVE-2019-2758MedJul 23, 2019
MariaDB
MariaDB
risk 0.29cvss 5.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2019-2636MedApr 23, 2019
Oracle Corporation
MySQL
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Group Replication Plugin). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via MySQL Procotol to…
CVE-2019-2630MedApr 23, 2019
Oracle Corporation
MySQL
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2019-2617MedApr 23, 2019
Fedoraproject
Fedora
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2019-2397MedJan 16, 2019
Oracle Corporation
Hospitality Reporting And Analytics
risk 0.29cvss 4.4epss 0.00
Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker having Report privilege with logon to the…
CVE-2018-3283MedOct 17, 2018
NetApp
Snapcenter
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging). Supported versions that are affected are 5.7.23 and prior and 8.0.12 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple…
CVE-2018-3264MedOct 17, 2018
Oracle Corporation
Solaris
risk 0.29cvss 4.4epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2016-9583MedAug 1, 2018
Jasper Project
Jasper
risk 0.29cvss 5.5epss 0.02
An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.
CVE-2018-2962MedJul 18, 2018
Oracle Corporation
Primavera P6 Enterprise Project Portfolio Management
risk 0.29cvss 4.4epss 0.01
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Difficult to exploit vulnerability allows low…
CVE-2018-2903MedJul 18, 2018
Oracle Corporation
Solaris
risk 0.29cvss 4.4epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to…
CVE-2018-2799MedApr 19, 2018
Sun Corporation
Java SE
risk 0.29cvss 5.3epss 0.15
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2787MedApr 19, 2018
MariaDB
MariaDB
risk 0.29cvss 5.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to…
CVE-2018-2786MedApr 19, 2018
MariaDB
MariaDB
risk 0.29cvss 5.5epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server.…
CVE-2018-2762MedApr 19, 2018
Oracle Corporation
MySQL
risk 0.29cvss 4.4epss 0.00
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server…
CVE-2018-1324MedMar 16, 2018
Apache
Commons Compress
risk 0.29cvss 5.5epss 0.04
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that…
CVE-2018-2602MedJan 18, 2018
Sun Corporation
Java SE
risk 0.29cvss 4.5epss 0.01
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n). Supported versions that are affected are Java SE: 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded: 8u151. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2018-2580MedJan 18, 2018
Oracle Corporation
Applications Dba
risk 0.29cvss 4.4epss 0.00
Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: ADPatch). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows high privileged attacker with logon to…
CVE-2017-10286MedOct 19, 2017
MariaDB
MariaDB
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB). Supported versions that are affected are 5.6.37 and earlier and 5.7.19 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple…
CVE-2017-10099MedOct 19, 2017
Oracle Corporation
SPARC M7, T7, S7 based Servers
risk 0.29cvss 4.4epss 0.00
Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite (subcomponent: Firmware). The supported version that is affected is Prior to 9.7.6.b. Easily exploitable vulnerability allows high privileged attacker with logon to the…
CVE-2017-10033MedOct 19, 2017
Oracle Corporation
Webcenter Sites
risk 0.29cvss 4.0epss 0.02
Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools). Supported versions that are affected are 11.1.1.8.0 and 12.2.1.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the…
CVE-2017-3649MedAug 8, 2017
Oracle Corporation
MySQL
risk 0.29cvss 4.4epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via…
CVE-2017-3648MedAug 8, 2017
Oracle Corporation
MySQL
risk 0.29cvss 4.4epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network…
CVE-2017-3647MedAug 8, 2017
Oracle Corporation
MySQL
risk 0.29cvss 4.4epss 0.03
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via…
CVE-2017-10200MedAug 8, 2017
Oracle Corporation
Hospitality E7
risk 0.29cvss 4.4epss 0.00
Vulnerability in the Oracle Hospitality e7 component of Oracle Hospitality Applications (subcomponent: Other). The supported version that is affected is 4.2.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle…
CVE-2017-10182MedAug 8, 2017
Oracle Corporation
Hospitality Opera 5 Property Services
risk 0.29cvss 4.4epss 0.01
Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: OPERA Export Functionality). Supported versions that are affected are 5.4.0.x, 5.4.1.x and 5.4.3.x. Difficult to exploit vulnerability allows high…
CVE-2017-10003MedAug 8, 2017
Oracle Corporation
Solaris
risk 0.29cvss 4.5epss 0.00
Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network Services Library). The supported version that is affected is 10. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris…
CVE-2017-3483MedApr 24, 2017
Oracle Corporation
Flexcube Enterprise Limits And Collateral Management
risk 0.29cvss 4.4epss 0.00
Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomponent: Limits and Collateral). Supported versions that are affected are 12.0.0 and 12.1.0. Easily "exploitable" vulnerability allows high…
CVE-2017-3243MedJan 27, 2017
MariaDB
MariaDB
risk 0.29cvss 4.4epss 0.04
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 5.5.53 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise…
CVE-2016-8327MedJan 27, 2017
Oracle Corporation
MySQL
risk 0.29cvss 4.4epss 0.02
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with network access via…
CVE-2016-8290MedOct 25, 2016
Oracle Corporation
MySQL
risk 0.29cvss 4.4epss 0.02
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Performance Schema, a different vulnerability than CVE-2016-5633.
CVE-2016-8287MedOct 25, 2016
Oracle Corporation
MySQL
risk 0.29cvss 4.5epss 0.02
Unspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows remote administrators to affect availability via vectors related to Server: Replication.
CVE-2016-8283MedOct 25, 2016
MariaDB
MariaDB
risk 0.29cvss 4.3epss 0.07
Unspecified vulnerability in Oracle MySQL 5.5.51 and earlier, 5.6.32 and earlier, and 5.7.14 and earlier allows remote authenticated users to affect availability via vectors related to Server: Types.
CVE-2016-5584MedOct 25, 2016
MariaDB
MariaDB
risk 0.29cvss 4.4epss 0.01
Unspecified vulnerability in Oracle MySQL 5.5.52 and earlier, 5.6.33 and earlier, and 5.7.15 and earlier allows remote administrators to affect confidentiality via vectors related to Server: Security: Encryption.
CVE-2015-8922MedSep 20, 2016
Libarchive
Libarchive
risk 0.29cvss 5.5epss 0.02
The read_CodersInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted 7z file, related to the _7z_folder struct.
CVE-2016-3488MedJul 21, 2016
Oracle Corporation
Database Server
risk 0.29cvss 4.4epss 0.00
Unspecified vulnerability in the DB Sharding component in Oracle Database Server 12.1.0.2 allows local users to affect integrity via unknown vectors.
CVE-2016-3480MedJul 21, 2016
Oracle Corporation
Solaris Cluster
risk 0.29cvss 4.4epss 0.00
Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.3 allows local users to affect confidentiality via vectors related to HA for Postgresql.
CVE-2016-2178MedJun 20, 2016
OpenSSL Project
OpenSSL
risk 0.29cvss 5.5epss 0.01
The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations, which makes it easier for local users to discover a DSA private key via a timing side-channel attack.

Page 161 of 270