CVEs published October 19, 2017
229 CVEs were published on October 19, 2017: 0 critical, 2 high. 1 is now in CISA KEV.
- Published
- 229
- Critical
- 0
- High
- 2
- Medium
- 0
- Low
- 0
- Unrated
- 227
- Now in CISA KEV
- 1
- Fix available
- 12
Most affected products
- Oracle Java
- 20
- Oracle MySQL Server
- 18
- Oracle PeopleSoft Enterprise PT PeopleTools
- 14
- Oracle Hospitality Suite8
- 11
- Oracle Hospitality Simphony
- 5
- Oracle Siebel UI Framework
- 5
- Oracle Database
- 4
- Oracle GlassFish Server
- 4
- Oracle Hospitality Cruise Fleet Management
- 4
- Oracle Hospitality Guest Access
- 4
High 2
- CVE-2017-10955This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC Data Protection Advisor 6.3.0.Dell EMC Data Protection Advisor
- CVE-2017-10271Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security).Oracle WebLogic Server
Medium, low and unrated 227
- CVE-2017-14017An Uncontrolled Search Path Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.Progea Movicon SCADA/HMI
- CVE-2017-14019An Unquoted Search Path or Element issue was discovered in Progea Movicon Version 11.5.1181 and prior.Progea Movicon SCADA/HMI
- CVE-2017-15650musl libc before 1.1.17 has a buffer overflow via crafted DNS replies because dns_parse_callback in network/lookup_name.c does not restrict
- CVE-2017-15643An active network attacker (MiTM) can achieve remote code execution on a machine that runs IKARUS Anti Virus 2.16.7.
- CVE-2017-15644SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:80
- CVE-2017-15645CSRF exists in Webmin 1.850.
- CVE-2017-15646Webmin before 1.860 has XSS with resultant remote code execution.
- CVE-2017-15647On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.
- CVE-2017-15648In PHPSUGAR PHP Melody before 2.7.3, page_manager.php has XSS via the page_title parameter.
- CVE-2017-15649net/packet/af_packet.c in the Linux kernel before 4.13.6 allows local users to gain privileges via crafted system calls that trigger mishand
- CVE-2012-4379MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not send a restrictive X-Frame-Options HTTP header, which allows remote attackers to
- CVE-2012-4380MediaWiki before 1.18.5, and 1.19.x before 1.19.2 allows remote attackers to bypass GlobalBlocking extension IP address blocking and create
- CVE-2012-4382MediaWiki before 1.18.5, and 1.19.x before 1.19.2 does not properly protect user block metadata, which allows remote administrators to read
- CVE-2015-4421The tzdriver module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a
- CVE-2015-4422The TEEOS module in Huawei Mate 7 (Mate7-TL10) smartphones before V100R001CHNC00B126SP03 allows local users with root permissions to gain pr
- CVE-2015-6668The Job Manager plugin before 0.7.25 allows remote attackers to read arbitrary CV files via a brute force attack to the WordPress upload dir
- CVE-2017-10933All versions prior to V2.06.00.00 of ZTE ZXDT22 SF01, an monitoring system of ZTE energy product, are impacted by directory traversal vulnerZTE ZXDT22 SF01
- CVE-2016-8748In Apache NiFi before 1.0.1 and 1.1.x before 1.1.1, there is a cross-site scripting vulnerability in connection details dialog when accessedApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2017-5635In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, if an anonymous user request is replicated to another node, the oApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2017-5636In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to anApache Software Foundation Apache NiFi · org.apache.nifi:ni…
- CVE-2012-6707WordPress through 4.8.2 uses a weak MD5-based password hashing algorithm, which makes it easier for attackers to determine cleartext values
- CVE-2017-15639tasks/feed/readRSS.cfm in Mura CMS before 6.2 allows attackers to bypass intended access restrictions by leveraging the "draggable feeds" fe
- CVE-2017-15642In lsx_aiffstartread in aiff.c in Sound eXchange (SoX) 14.4.2, there is a Use-After-Free vulnerability triggered by supplying a malformed AI
- CVE-2017-10014Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI).Oracle Hospitality Hotel Mobile
- CVE-2017-10026Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Fabric Layer).Oracle SOA Suite
- CVE-2017-10033Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Support Tools).Oracle WebCenter Sites
- CVE-2017-10034Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Core Formatting API).Oracle BI Publisher
- CVE-2017-10037Vulnerability in the Oracle BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Service API).Oracle BI Publisher
- CVE-2017-10050Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).Oracle Hospitality Suite8
- CVE-2017-10051Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2017-10054Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMS).Oracle Hospitality Cruise Materials Management
- CVE-2017-10055Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface).Oracle iPlanet Web Server
- CVE-2017-10060Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web GeneOracle Business Intelligence Enterprise Edition
- CVE-2017-10065Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: Security).
- CVE-2017-10066Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms).Oracle E-Business Suite Technology Stack
- CVE-2017-10077Vulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent: AD Utilities).Oracle Applications DBA
- CVE-2017-10099Vulnerability in the SPARC M7, T7, S7 based Servers component of Oracle Sun Systems Products Suite (subcomponent: Firmware).Oracle SPARC - Sun System Firmware - NPE
- CVE-2017-10152Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container).Oracle WebLogic Server
- CVE-2017-10153Vulnerability in the Oracle Communications WebRTC Session Controller component of Oracle Communications Applications (subcomponent: SecurityOracle Communications WebRTC Session Controller
- CVE-2017-10154Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin).Oracle Access Manager
- CVE-2017-10155Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth).Oracle MySQL Server
- CVE-2017-10158Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Core).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10159Vulnerability in the Oracle Communications Policy Management component of Oracle Communications Applications (subcomponent: Portal, CMP).Oracle Communications Policy Management
- CVE-2017-10161Vulnerability in the Oracle Engineering Data Management component of Oracle Supply Chain Products Suite (subcomponent: Web Services SecurityOracle Agile Engineering Data Management
- CVE-2017-10162Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services).Oracle Siebel Core - Server Framework
- CVE-2017-10163Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Web GeneOracle Business Intelligence Enterprise Edition
- CVE-2017-10164Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office).Oracle PeopleSoft Enterprise FIN Staffing Front Office
- CVE-2017-10165Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).Oracle MySQL Server
- CVE-2017-10166Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: C Oracle SSL API).Oracle Security Service
- CVE-2017-10167Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-10190Vulnerability in the Java VM component of Oracle Database Server.Oracle Database
- CVE-2017-10194Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System ManageOracle SSM - (hot-tamale) ILOM: Integrated Lights Out Manag…
- CVE-2017-10197Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Folios).Oracle Hospitality OPERA 5 Property Services
- CVE-2017-10203Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net).Oracle MySQL Connectors
- CVE-2017-10227Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-10259Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin).
- CVE-2017-10260Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System ManageOracle SSM - (hot-tamale) ILOM: Integrated Lights Out Manag…
- CVE-2017-10261Vulnerability in the XML Database component of Oracle Database Server.Oracle Database
- CVE-2017-10263Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).Oracle Siebel UI Framework
- CVE-2017-10264Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).Oracle Siebel UI Framework
- CVE-2017-10265Vulnerability in the Oracle Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems Products Suite (subcomponent: System ManageOracle SSM - (hot-tamale) ILOM: Integrated Lights Out Manag…
- CVE-2017-10268Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).Oracle MySQL Server
- CVE-2017-10270Vulnerability in the Oracle Identity Manager Connector component of Oracle Fusion Middleware (subcomponent: Microsoft Active Directory).Oracle Identity Manager Connector
- CVE-2017-10274Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO).Oracle Java
- CVE-2017-10275Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Filesystem).Oracle Solaris Operating System
- CVE-2017-10276Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS).Oracle MySQL Server
- CVE-2017-10277Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net).Oracle MySQL Connectors
- CVE-2017-10279Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-10280Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Test Framework).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10281Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).Oracle Java
- CVE-2017-10283Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema).Oracle MySQL Server
- CVE-2017-10284Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Stored Procedure).Oracle MySQL Server
- CVE-2017-10285Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI).Oracle Java
- CVE-2017-10286Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).
- CVE-2017-10287Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Strategic Sourcing).Oracle PeopleSoft Enterprise SCM Strategic Sourcing
- CVE-2017-10292Vulnerability in the RDBMS Security component of Oracle Database Server.Oracle Database
- CVE-2017-10293Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc).Oracle Java
- CVE-2017-10294Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-10295Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).Oracle Java
- CVE-2017-10296Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL Server
- CVE-2017-10299Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Security).Oracle Agile PLM Framework
- CVE-2017-10300Vulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM (subcomponent: Siebel Business Service Issues).Oracle Siebel CRM Desktop
- CVE-2017-10302Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).Oracle Siebel UI Framework
- CVE-2017-10303Vulnerability in the Oracle Interaction Center Intelligence component of Oracle E-Business Suite (subcomponent: Setup).Oracle Interaction Center Intelligence
- CVE-2017-10304Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2017-10306Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2017-10308Vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite (subcomponent: Performance).Oracle Agile PLM Framework
- CVE-2017-10309Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).Oracle Java
- CVE-2017-10310Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models).Oracle Hyperion Financial Reporting
- CVE-2017-10311Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS).Oracle MySQL Server
- CVE-2017-10312Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization).Oracle Hyperion BI+
- CVE-2017-10313Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS).Oracle MySQL Server
- CVE-2017-10314Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).Oracle MySQL Server
- CVE-2017-10315Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).Oracle Siebel UI Framework
- CVE-2017-10316Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).Oracle Hospitality Suite8
- CVE-2017-10317Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).Oracle Hospitality Suite8
- CVE-2017-10318Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).Oracle Hospitality Suite8
- CVE-2017-10319Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).Oracle Hospitality Suite8
- CVE-2017-10320Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).Oracle MySQL Server
- CVE-2017-10321Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2017-10322Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar).Oracle Common Applications Calendar
- CVE-2017-10323Vulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business Suite (subcomponent: Application Service).Oracle Web Applications Desktop Integrator
- CVE-2017-10324Vulnerability in the Oracle Applications Technology Stack component of Oracle E-Business Suite (subcomponent: Oracle Forms).Oracle E-Business Suite Technology Stack
- CVE-2017-10325Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar).Oracle Common Applications Calendar
- CVE-2017-10326Vulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite (subcomponent: Applications Calendar).Oracle Common Applications Calendar
- CVE-2017-10327Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10328Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics).Oracle Application Object Library
- CVE-2017-10329Vulnerability in the Oracle Global Order Promising component of Oracle E-Business Suite (subcomponent: Reschedule Sales Orders).Oracle Global Order Promising
- CVE-2017-10330Vulnerability in the Oracle Common Applications component of Oracle E-Business Suite (subcomponent: Gantt Server).Oracle Common Applications
- CVE-2017-10331Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics).Oracle Application Object Library
- CVE-2017-10332Vulnerability in the Oracle Universal Work Queue component of Oracle E-Business Suite (subcomponent: Administration).Oracle Universal Work Queue
- CVE-2017-10333Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: EAI).Oracle Siebel UI Framework
- CVE-2017-10334Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container).
- CVE-2017-10335Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10336Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Container).Oracle WebLogic Server
- CVE-2017-10337Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).Oracle Hospitality Suite8
- CVE-2017-10338Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal).Oracle PeopleSoft Enterprise PRTL Interaction Hub
- CVE-2017-10339Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).Oracle Hospitality Suite8
- CVE-2017-10340Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export).Oracle Hospitality Simphony
- CVE-2017-10341Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server).Oracle Java
- CVE-2017-10342Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server).Oracle Java
- CVE-2017-10343Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export).Oracle Hospitality Simphony
- CVE-2017-10344Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export).Oracle Hospitality Simphony
- CVE-2017-10345Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization).Oracle Java
- CVE-2017-10346Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot).Oracle Java
- CVE-2017-10347Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization).Oracle Java
- CVE-2017-10348Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).Oracle Java
- CVE-2017-10349Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP).Oracle Java
- CVE-2017-10350Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS).Oracle Java
- CVE-2017-10351Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10352Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).Oracle WebLogic Server
- CVE-2017-10353Vulnerability in the Oracle Hospitality Hotel Mobile component of Oracle Hospitality Applications (subcomponent: Suite8/RESTAPI).Oracle Hospitality Hotel Mobile
- CVE-2017-10354Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Enterprise Portal).Oracle PeopleSoft Enterprise PRTL Interaction Hub
- CVE-2017-10355Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).Oracle Java
- CVE-2017-10356Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security).Oracle Java
- CVE-2017-10357Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization).Oracle Java
- CVE-2017-10358Vulnerability in the Oracle Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Workspace).Oracle Hyperion Financial Reporting
- CVE-2017-10359Vulnerability in the Oracle Hyperion BI+ component of Oracle Hyperion (subcomponent: UI and Visualization).Oracle Hyperion BI+
- CVE-2017-10360Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server).Oracle WebCenter Content
- CVE-2017-10361Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponeOracle Hospitality Cruise Shipboard Property Management Sys…
- CVE-2017-10362Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Sawbridge).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10363Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security).Oracle FLEXCUBE Universal Banking
- CVE-2017-10364Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Environment Mgmt).
- CVE-2017-10365Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: InnoDB).Oracle MySQL Server
- CVE-2017-10366Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10367Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Engagement).Oracle Hospitality Simphony
- CVE-2017-10368Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition StatusOracle PeopleSoft Enterprise SCM eProcurement
- CVE-2017-10369Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Server).Oracle Virtual Directory
- CVE-2017-10370Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base).Oracle Hospitality Guest Access
- CVE-2017-10372Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base).Oracle Hospitality Guest Access
- CVE-2017-10373Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: Health Center).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10375Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base).Oracle Hospitality Guest Access
- CVE-2017-10378Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2017-10379Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs).
- CVE-2017-10380Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server).Oracle Java
- CVE-2017-10381Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10382Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10383Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Interface).Oracle Hospitality Guest Access
- CVE-2017-10384Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).Oracle MySQL Server
- CVE-2017-10385Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container).Oracle GlassFish Server
- CVE-2017-10386Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server).Oracle Java
- CVE-2017-10387Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences).Oracle CRM Technical Foundation
- CVE-2017-10388Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).Oracle Java
- CVE-2017-10389Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS).Oracle Hospitality Suite8
- CVE-2017-10391Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration).Oracle GlassFish Server
- CVE-2017-10392Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-10393Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Web Container).Oracle GlassFish Server
- CVE-2017-10394Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10395Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWOracle Hospitality Cruise Fleet Management
- CVE-2017-10396Vulnerability in the Oracle Hospitality Cruise AffairWhere component of Oracle Hospitality Applications (subcomponent: AffairWhere).Oracle Hospitality Cruise AffairWhere
- CVE-2017-10397Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage).Oracle Hospitality Cruise Fleet Management
- CVE-2017-10398Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: BaseMasterPage).Oracle Hospitality Cruise Fleet Management
- CVE-2017-10399Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: GangwayActivityWOracle Hospitality Cruise Fleet Management
- CVE-2017-10400Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration Graphical User Interface).Oracle GlassFish Server
- CVE-2017-10401Vulnerability in the Oracle Hospitality Cruise Materials Management component of Oracle Hospitality Applications (subcomponent: MMSUpdater).Oracle Hospitality Cruise Materials Management
- CVE-2017-10402Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report).Oracle Hospitality Reporting and Analytics
- CVE-2017-10403Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery).Oracle Hospitality Reporting and Analytics
- CVE-2017-10404Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: iQuery).Oracle Hospitality Reporting and Analytics
- CVE-2017-10405Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report).Oracle Hospitality Reporting and Analytics
- CVE-2017-10406Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10407Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-10408Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-10409Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Merchant UI).Oracle iStore
- CVE-2017-10410Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Search).Oracle Knowledge Management
- CVE-2017-10411Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Knowledge Management
- CVE-2017-10412Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Knowledge Management
- CVE-2017-10413Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Multiplatform Based on HTML5).Oracle Mobile Field Service
- CVE-2017-10414Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Checkout and Order Placement).Oracle iStore
- CVE-2017-10415Vulnerability in the Oracle iSupport component of Oracle E-Business Suite (subcomponent: Others).Oracle iSupport
- CVE-2017-10416Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Setup and Configuration).Oracle Advanced Outbound Telephony
- CVE-2017-10417Vulnerability in the Oracle Advanced Outbound Telephony component of Oracle E-Business Suite (subcomponent: Setup and Configuration).Oracle Advanced Outbound Telephony
- CVE-2017-10418Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PeopleSoft CDA).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10419Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS).Oracle Hospitality Suite8
- CVE-2017-10420Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).Oracle Hospitality Suite8
- CVE-2017-10421Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).Oracle Hospitality Suite8
- CVE-2017-10422Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Updates Change Assistant).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2017-10423Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security).Oracle Retail Back Office
- CVE-2017-10424Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Web).Oracle MySQL Enterprise Monitor
- CVE-2017-10425Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Service Host).Oracle Hospitality Simphony
- CVE-2017-10426Vulnerability in the PeopleSoft Enterprise FSCM component of Oracle PeopleSoft Products (subcomponent: Staffing Front Office).Oracle PeopleSoft Enterprise FIN Staffing Front Office
- CVE-2017-10427Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Point of Sale).Oracle Retail Xstore Point of Service
- CVE-2017-10428Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2017-3444Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Trade Management
- CVE-2017-3445Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Trade Management
- CVE-2017-3446Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Trade Management
- CVE-2017-3588Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: HA for MySQL).Oracle Solaris Cluster
- CVE-2017-12579An insecure suid wrapper binary in the HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 4.0.24 and earlier allows a non-ro
- CVE-2017-12251A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interactCisco Cloud Services Platform
- CVE-2017-12259A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA51x Series IP Phones couCisco Small Business SPA51x Series IP Phones
- CVE-2017-12260A vulnerability in the implementation of Session Initiation Protocol (SIP) functionality in Cisco Small Business SPA50x, SPA51x, and SPA52x Cisco Small Business SPA50x, SPA51x, and SPA52x Series IP P…
- CVE-2017-12271A vulnerability in Cisco SPA300 and SPA500 Series IP Phones could allow an unauthenticated, remote attacker to execute unwanted actions on aCisco SPA300 and SPA500 Series IP Phones
- CVE-2017-12272A vulnerability in the web framework code of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site sCisco IOS XE
- CVE-2017-12284A vulnerability in the web interface of Cisco Jabber for Windows Client could allow an authenticated, local attacker to retrieve user profilCisco Jabber for Windows Client
- CVE-2017-12285A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbCisco Network Analysis Module
- CVE-2017-12286A vulnerability in the web interface of Cisco Jabber could allow an authenticated, local attacker to retrieve user profile information from Cisco Jabber
- CVE-2017-12287A vulnerability in the cluster database (CDB) management component of Cisco Expressway Series Software and Cisco TelePresence Video CommunicCisco Expressway Series and Cisco TelePresence Video Commun…
- CVE-2017-12288A vulnerability in the web-based management interface of Cisco Unified Contact Center Express could allow an unauthenticated, remote attackeCisco Unified Contact Center Express
- CVE-2017-12289A vulnerability in conditional, verbose debug logging for the IPsec feature of Cisco IOS XE Software could allow an authenticated, local attCisco IOS XE
- CVE-2017-12293A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.Cisco WebEx Meetings Server
- CVE-2017-12296A vulnerability in Cisco WebEx Meetings Server could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attacCisco WebEx Meetings Server
- CVE-2017-12298A vulnerability in Cisco WebEx Meeting Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attackCisco WebEx Meeting Center
- CVE-2017-12301A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python Cisco NX-OS Software
- CVE-2017-15609Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations invol
- CVE-2017-15610An issue was discovered in Octopus before 3.17.7.
- CVE-2017-15611In Octopus before 3.17.7, an authenticated user who was explicitly granted the permission to invite new users (aka UserInvite) can invite us
- CVE-2017-15612mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escapmistune
- CVE-2017-3883A vulnerability in the authentication, authorization, and accounting (AAA) implementation of Cisco Firepower Extensible Operating System (FX