# CVEs published 2018-04-19

200 CVEs were published on April 19, 2018: 1 critical, 3 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2018-0112](https://cve.now/CVE-2018-0112.md): A vulnerability in Cisco WebEx Business Suite clients, Cisco WebEx Meetings, and Cisco WebEx Meetings Server could allow an authenticated, r (no CVSS, Cisco WebEx Clients)
- [CVE-2018-0227](https://cve.now/CVE-2018-0227.md): A vulnerability in the Secure Sockets Layer (SSL) Virtual Private Network (VPN) Client Certificate Authentication feature for Cisco Adaptive (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2018-0228](https://cve.now/CVE-2018-0228.md): A vulnerability in the ingress flow creation functionality of Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2018-0229](https://cve.now/CVE-2018-0229.md): A vulnerability in the implementation of Security Assertion Markup Language (SAML) Single Sign-On (SSO) authentication for Cisco AnyConnect (no CVSS, Cisco ASA Software, FTD Software, and AnyConnect Secure Mob…)
- [CVE-2018-0230](https://cve.now/CVE-2018-0230.md): A vulnerability in the internal packet-processing functionality of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Se (no CVSS, Cisco Firepower 2100 Series Security Appliances)
- [CVE-2018-0231](https://cve.now/CVE-2018-0231.md): A vulnerability in the Transport Layer Security (TLS) library of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2018-0233](https://cve.now/CVE-2018-0233.md): A vulnerability in the Secure Sockets Layer (SSL) packet reassembly functionality of the detection engine in Cisco Firepower System Software (no CVSS, Cisco Firepower Detection Engine)
- [CVE-2018-0237](https://cve.now/CVE-2018-0237.md): A vulnerability in the file type detection mechanism of the Cisco Advanced Malware Protection (AMP) for Endpoints macOS Connector could allo (no CVSS, Cisco AMP for Endpoints)
- [CVE-2018-0238](https://cve.now/CVE-2018-0238.md): A vulnerability in the role-based resource checking functionality of the Cisco Unified Computing System (UCS) Director could allow an authen (no CVSS, Cisco UCS Director)
- [CVE-2018-0239](https://cve.now/CVE-2018-0239.md): A vulnerability in the egress packet processing functionality of the Cisco StarOS operating system for Cisco Aggregation Services Router (AS (no CVSS, Cisco StarOS)
- [CVE-2018-0240](https://cve.now/CVE-2018-0240.md): Multiple vulnerabilities in the Application Layer Protocol Inspection feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2018-0241](https://cve.now/CVE-2018-0241.md): A vulnerability in the UDP broadcast forwarding function of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause (no CVSS, Cisco IOS XR)
- [CVE-2018-0242](https://cve.now/CVE-2018-0242.md): A vulnerability in the WebVPN web-based management interface of Cisco Adaptive Security Appliance could allow an unauthenticated, remote att (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2018-0243](https://cve.now/CVE-2018-0243.md): A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a confi (no CVSS, Cisco Firepower System Software)
- [CVE-2018-0244](https://cve.now/CVE-2018-0244.md): A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass a confi (no CVSS, Cisco Firepower System Software)
- [CVE-2018-0251](https://cve.now/CVE-2018-0251.md): A vulnerability in the Web Server Authentication Required screen of the Clientless Secure Sockets Layer (SSL) VPN portal of Cisco Adaptive S (no CVSS, Cisco Adaptive Security Appliance)
- [CVE-2018-0254](https://cve.now/CVE-2018-0254.md): A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configu (no CVSS, Cisco Firepower System Software)
- [CVE-2018-0255](https://cve.now/CVE-2018-0255.md): A vulnerability in the device manager web interface of Cisco Industrial Ethernet Switches could allow an unauthenticated, remote attacker to (no CVSS, Cisco Industrial Ethernet Switches)
- [CVE-2018-0256](https://cve.now/CVE-2018-0256.md): A vulnerability in the peer-to-peer message processing functionality of Cisco Packet Data Network Gateway could allow an unauthenticated, re (no CVSS, Cisco Packet Data Network Gateway)
- [CVE-2018-0257](https://cve.now/CVE-2018-0257.md): A vulnerability in Cisco IOS XE Software running on Cisco cBR Series Converged Broadband Routers could allow an unauthenticated, adjacent at (no CVSS, Cisco cBR Series Converged Broadband Routers)
- [CVE-2018-0259](https://cve.now/CVE-2018-0259.md): A vulnerability in the web-based management interface of Cisco MATE Collector could allow an unauthenticated, remote attacker to conduct a c (no CVSS, Cisco MATE Collector)
- [CVE-2018-0260](https://cve.now/CVE-2018-0260.md): A vulnerability in the web interface of Cisco MATE Live could allow an unauthenticated, remote attacker to view and download the contents of (no CVSS, Cisco MATE Live)
- [CVE-2018-0266](https://cve.now/CVE-2018-0266.md): A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, remote attacker to view sensitive (no CVSS, Cisco Unified Communications Manager)
- [CVE-2018-0267](https://cve.now/CVE-2018-0267.md): A vulnerability in the web framework of Cisco Unified Communications Manager could allow an authenticated, local attacker to view sensitive (no CVSS, Cisco Unified Communications Manager)
- [CVE-2018-0269](https://cve.now/CVE-2018-0269.md): A vulnerability in the web framework of the Cisco Digital Network Architecture Center (DNA Center) could allow an unauthenticated, remote at (no CVSS, Cisco DNA Center)
- [CVE-2018-0272](https://cve.now/CVE-2018-0272.md): A vulnerability in the Secure Sockets Layer (SSL) Engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker (no CVSS, Cisco Firepower Threat Defense)
- [CVE-2018-0273](https://cve.now/CVE-2018-0273.md): A vulnerability in the IPsec Manager of Cisco StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Routers and Virtualized Packet (no CVSS, Cisco StarOS IPsec Manager)
- [CVE-2018-0275](https://cve.now/CVE-2018-0275.md): A vulnerability in the support tunnel feature of Cisco Identity Services Engine (ISE) could allow an authenticated, local attacker to access (no CVSS, Cisco Identity Services Engine)
- [CVE-2018-0276](https://cve.now/CVE-2018-0276.md): A vulnerability in Cisco WebEx Connect IM could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack aga (no CVSS, Cisco WebEx Connect IM)
- [CVE-2018-3842](https://cve.now/CVE-2018-3842.md): An exploitable use of an uninitialized pointer vulnerability exists in the JavaScript engine in Foxit PDF Reader version 9.0.1.1049. (CVSS 8.8, Talos Foxit)
- [CVE-2018-3843](https://cve.now/CVE-2018-3843.md): An exploitable type confusion vulnerability exists in the way Foxit PDF Reader version 9.0.1.1049 parses files with associated file annotati (CVSS 6.5, Talos Foxit)
- [CVE-2018-10235](https://cve.now/CVE-2018-10235.md): POSCMS 3.2.10 allows remote attackers to execute arbitrary PHP code via the diy\\module\\member\\controllers\\admin\\Setting.php 'index' function (no CVSS)
- [CVE-2018-10236](https://cve.now/CVE-2018-10236.md): POSCMS 3.2.18 allows remote attackers to execute arbitrary PHP code via the diy\\dayrui\\controllers\\admin\\Syscontroller.php 'add' function be (no CVSS)
- [CVE-2018-9861](https://cve.now/CVE-2018-9861.md): Cross-site scripting (XSS) vulnerability in the Enhanced Image (aka image2) plugin for CKEditor (in versions 4.5.10 through 4.9.1; fixed in (no CVSS, drupal/core · ckeditor-dev +1)
- [CVE-2018-10230](https://cve.now/CVE-2018-10230.md): Zend Debugger in Zend Server before 9.1.3 has XSS, aka ZSR-2455. (no CVSS)
- [CVE-2018-8118](https://cve.now/CVE-2018-8118.md): A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory, aka "Internet Explorer Memory Cor (no CVSS, Microsoft Internet Explorer)
- [CVE-2017-17310](https://cve.now/CVE-2017-17310.md): Electronic Numbers to URI Mapping (ENUM) module in some Huawei products DP300 V500R002C00, RP200 V600R006C00, TE30 V100R001C10, V500R002C00, (no CVSS, Huawei Technologies Co. DP300, RP200, TE30, TE40, TE50, TE60)
- [CVE-2017-17313](https://cve.now/CVE-2017-17313.md): The inputhub driver of HUAWEI P9 Lite mobile phones with Versions earlier than VNS-L21C02B341, Versions earlier than VNS-L21C22B380, Version (no CVSS, Huawei Technologies Co. HUAWEI P9 Lite)
- [CVE-2017-3774](https://cve.now/CVE-2017-3774.md): A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than ve (no CVSS, Lenovo Group IMM2 · IBM IMM2)
- [CVE-2017-3776](https://cve.now/CVE-2017-3776.md): Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting other (no CVSS, Lenovo Group Help mobile Android app)
- [CVE-2018-10188](https://cve.now/CVE-2018-10188.md): phpMyAdmin 4.8.0 before 4.8.0-1 has CSRF, allowing an attacker to execute arbitrary SQL statements, related to js/db\_operations.js, js/tbl\_o (no CVSS, phpmyadmin/phpmyadmin)
- [CVE-2018-7899](https://cve.now/CVE-2018-7899.md): The Mali Driver of Huawei Berkeley-AL20 and Berkeley-BD smart phones with software Berkeley-AL20 8.0.0.105(C00), 8.0.0.111(C00), 8.0.0.112D( (no CVSS, Huawei Technologies Co. Berkeley-AL20, Berkeley-BD)
- [CVE-2018-7920](https://cve.now/CVE-2018-7920.md): Huawei AR1200 V200R006C10SPC300, AR160 V200R006C10SPC300, AR200 V200R006C10SPC300, AR2200 V200R006C10SPC300, AR3200 V200R006C10SPC300 device (no CVSS, Huawei Technologies Co. AR1200, AR160, AR200, AR2200, AR3200)
- [CVE-2018-1143](https://cve.now/CVE-2018-1143.md): A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reque (no CVSS, Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router)
- [CVE-2018-1144](https://cve.now/CVE-2018-1144.md): A remote unauthenticated user can execute commands as root in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reque (no CVSS, Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router)
- [CVE-2018-1145](https://cve.now/CVE-2018-1145.md): A remote unauthenticated user can overflow a stack buffer in the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP reques (no CVSS, Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router)
- [CVE-2018-1146](https://cve.now/CVE-2018-1146.md): A remote unauthenticated user can enable telnet on the Belkin N750 using firmware version 1.10.22 by sending a crafted HTTP request to set.c (no CVSS, Belkin N750 DB Wi-Fi Dual-Band N+ Gigabit Router)
- [CVE-2018-6306](https://cve.now/CVE-2018-6306.md): Unauthorized code execution from specific DLL and is known as DLL Hijacking attack in Kaspersky Password Manager versions before 8.0.6.538. (no CVSS, Kaspersky Lab Kaspersky Password Manager)
- [CVE-2017-18261](https://cve.now/CVE-2017-18261.md): The arch\_timer\_reg\_read\_stable macro in arch/arm64/include/asm/arch\_timer.h in the Linux kernel before 4.13 allows local users to cause a de (no CVSS)
- [CVE-2018-10205](https://cve.now/CVE-2018-10205.md): hyperstart 1.0.0 in HyperHQ Hyper has memory leaks in the container\_setup\_modules and hyper\_rescan\_scsi functions in container.c, related to (no CVSS)
- [CVE-2018-10219](https://cve.now/CVE-2018-10219.md): baijiacms V3 has physical path leakage via an index.php?mod=mobile&name=member&do=index request. (no CVSS)
- [CVE-2018-10220](https://cve.now/CVE-2018-10220.md): Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. (no CVSS)
- [CVE-2018-10221](https://cve.now/CVE-2018-10221.md): An issue was discovered in WUZHI CMS V4.1.0. (no CVSS)
- [CVE-2018-10222](https://cve.now/CVE-2018-10222.md): An issue was discovered in idreamsoft iCMS V7.0. (no CVSS)
- [CVE-2018-10223](https://cve.now/CVE-2018-10223.md): An issue was discovered in YzmCMS 3.8. (no CVSS)
- [CVE-2018-10224](https://cve.now/CVE-2018-10224.md): An issue was discovered in YzmCMS 3.8. (no CVSS)
- [CVE-2018-10225](https://cve.now/CVE-2018-10225.md): thinkphp 3.1.3 has SQL Injection via the index.php s parameter. (no CVSS, topthink/framework)
- [CVE-2018-10227](https://cve.now/CVE-2018-10227.md): MiniCMS v1.10 has XSS via the mc-admin/conf.php site\_link parameter. (no CVSS)
- [CVE-2018-9137](https://cve.now/CVE-2018-9137.md): Open-AudIT before 2.2 has CSV Injection. (no CVSS)
- [CVE-2018-1167](https://cve.now/CVE-2018-1167.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Spotify Music Player 1.0.69.336. (no CVSS, Spotify Music Player)
- [CVE-2018-2563](https://cve.now/CVE-2018-2563.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Library). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2572](https://cve.now/CVE-2018-2572.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: In (no CVSS, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2018-2587](https://cve.now/CVE-2018-2587.md): Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). (no CVSS, Oracle Access Manager · Oracle Adaptive Access Manager)
- [CVE-2018-2628](https://cve.now/CVE-2018-2628.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (CVSS 9.8, KEV, Oracle WebLogic Server)
- [CVE-2018-2718](https://cve.now/CVE-2018-2718.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2737](https://cve.now/CVE-2018-2737.md): Vulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications (subcomponent: Security). (no CVSS, Oracle Retail Returns Management)
- [CVE-2018-2738](https://cve.now/CVE-2018-2738.md): Vulnerability in the Oracle Retail Central Office component of Oracle Retail Applications (subcomponent: Security). (no CVSS, Oracle Retail Central Office)
- [CVE-2018-2739](https://cve.now/CVE-2018-2739.md): Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin). (no CVSS, Oracle COREid Access)
- [CVE-2018-2742](https://cve.now/CVE-2018-2742.md): Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Framework). (no CVSS, Oracle Enterprise Manager Ops Center)
- [CVE-2018-2746](https://cve.now/CVE-2018-2746.md): Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2018-2747](https://cve.now/CVE-2018-2747.md): Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2018-2748](https://cve.now/CVE-2018-2748.md): Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2018-2749](https://cve.now/CVE-2018-2749.md): Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). (no CVSS, Oracle FLEXCUBE Universal Banking)
- [CVE-2018-2750](https://cve.now/CVE-2018-2750.md): Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: UI Framework). (no CVSS, Oracle Enterprise Manager Base Platform)
- [CVE-2018-2752](https://cve.now/CVE-2018-2752.md): Vulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products (subcomponent: Security). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2753](https://cve.now/CVE-2018-2753.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Python modules). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2754](https://cve.now/CVE-2018-2754.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: ZVNET Driver). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2755](https://cve.now/CVE-2018-2755.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2756](https://cve.now/CVE-2018-2756.md): Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications (subcomponent: WebUI (no CVSS, Oracle Communications Order and Service Management)
- [CVE-2018-2758](https://cve.now/CVE-2018-2758.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2759](https://cve.now/CVE-2018-2759.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2760](https://cve.now/CVE-2018-2760.md): Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OSSL Module). (no CVSS, Oracle HTTP Server)
- [CVE-2018-2761](https://cve.now/CVE-2018-2761.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2762](https://cve.now/CVE-2018-2762.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2763](https://cve.now/CVE-2018-2763.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NTPD). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2764](https://cve.now/CVE-2018-2764.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2765](https://cve.now/CVE-2018-2765.md): Vulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent: Oracle SSL API). (no CVSS, Oracle Security Service · Oracle Database - Enterprise Edit…)
- [CVE-2018-2766](https://cve.now/CVE-2018-2766.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2768](https://cve.now/CVE-2018-2768.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-2769](https://cve.now/CVE-2018-2769.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Pluggable Auth). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2770](https://cve.now/CVE-2018-2770.md): Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware (subcomponent: OAAM Admin). (no CVSS, Oracle Adaptive Access Manager)
- [CVE-2018-2771](https://cve.now/CVE-2018-2771.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Locking). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2772](https://cve.now/CVE-2018-2772.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2773](https://cve.now/CVE-2018-2773.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2774](https://cve.now/CVE-2018-2774.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2775](https://cve.now/CVE-2018-2775.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2776](https://cve.now/CVE-2018-2776.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Group Replication GCS). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2777](https://cve.now/CVE-2018-2777.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2778](https://cve.now/CVE-2018-2778.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2779](https://cve.now/CVE-2018-2779.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2780](https://cve.now/CVE-2018-2780.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2781](https://cve.now/CVE-2018-2781.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2782](https://cve.now/CVE-2018-2782.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2783](https://cve.now/CVE-2018-2783.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). (no CVSS)
- [CVE-2018-2784](https://cve.now/CVE-2018-2784.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2785](https://cve.now/CVE-2018-2785.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2786](https://cve.now/CVE-2018-2786.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2787](https://cve.now/CVE-2018-2787.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2788](https://cve.now/CVE-2018-2788.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2789](https://cve.now/CVE-2018-2789.md): Vulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent: Services). (no CVSS, Oracle Siebel Core - Server Framework)
- [CVE-2018-2790](https://cve.now/CVE-2018-2790.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). (CVSS 3.1, Oracle Java)
- [CVE-2018-2791](https://cve.now/CVE-2018-2791.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2018-2792](https://cve.now/CVE-2018-2792.md): Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool). (no CVSS, Oracle SSM - (ssm\_host\_apps) HMP: Hardware Management Pack)
- [CVE-2018-2793](https://cve.now/CVE-2018-2793.md): Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products (subcomponent: PsAdmin). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2794](https://cve.now/CVE-2018-2794.md): Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security). (no CVSS, Oracle Java)
- [CVE-2018-2795](https://cve.now/CVE-2018-2795.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). (no CVSS, Oracle Java)
- [CVE-2018-2796](https://cve.now/CVE-2018-2796.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). (CVSS 5.3, Oracle Java)
- [CVE-2018-2797](https://cve.now/CVE-2018-2797.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX). (no CVSS, Oracle Java)
- [CVE-2018-2798](https://cve.now/CVE-2018-2798.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT). (CVSS 5.3, Oracle Java)
- [CVE-2018-2799](https://cve.now/CVE-2018-2799.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP). (no CVSS, Oracle Java)
- [CVE-2018-2800](https://cve.now/CVE-2018-2800.md): Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI). (no CVSS, Oracle Java)
- [CVE-2018-2801](https://cve.now/CVE-2018-2801.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Image Export SDK). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-2802](https://cve.now/CVE-2018-2802.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Client Application Loader). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2018-2803](https://cve.now/CVE-2018-2803.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Hospitality Applications (subcomponent: Report). (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2018-2804](https://cve.now/CVE-2018-2804.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: DB Privileges). (no CVSS, Oracle Application Object Library)
- [CVE-2018-2805](https://cve.now/CVE-2018-2805.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: GIS Extension). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2806](https://cve.now/CVE-2018-2806.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-2807](https://cve.now/CVE-2018-2807.md): Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Securities). (no CVSS, Oracle FLEXCUBE Core Banking)
- [CVE-2018-2808](https://cve.now/CVE-2018-2808.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2809](https://cve.now/CVE-2018-2809.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Homepage & Navigation). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2810](https://cve.now/CVE-2018-2810.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2811](https://cve.now/CVE-2018-2811.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install). (no CVSS, Oracle Java)
- [CVE-2018-2812](https://cve.now/CVE-2018-2812.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2813](https://cve.now/CVE-2018-2813.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2814](https://cve.now/CVE-2018-2814.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). (no CVSS, Oracle Java)
- [CVE-2018-2815](https://cve.now/CVE-2018-2815.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). (CVSS 5.3, Oracle Java)
- [CVE-2018-2816](https://cve.now/CVE-2018-2816.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2817](https://cve.now/CVE-2018-2817.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2818](https://cve.now/CVE-2018-2818.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2819](https://cve.now/CVE-2018-2819.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2820](https://cve.now/CVE-2018-2820.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2821](https://cve.now/CVE-2018-2821.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-2822](https://cve.now/CVE-2018-2822.md): Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: Cluster Geo). (no CVSS, Oracle Solaris Cluster)
- [CVE-2018-2823](https://cve.now/CVE-2018-2823.md): Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). (no CVSS, Oracle Transportation Management)
- [CVE-2018-2824](https://cve.now/CVE-2018-2824.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2018-2825](https://cve.now/CVE-2018-2825.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). (CVSS 8.3, Oracle Java)
- [CVE-2018-2826](https://cve.now/CVE-2018-2826.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). (CVSS 8.3, Oracle Java)
- [CVE-2018-2827](https://cve.now/CVE-2018-2827.md): Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Profile). (no CVSS, Oracle Hospitality Suite8)
- [CVE-2018-2828](https://cve.now/CVE-2018-2828.md): Vulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent: Content Server). (no CVSS, Oracle WebCenter Content)
- [CVE-2018-2829](https://cve.now/CVE-2018-2829.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2018-2830](https://cve.now/CVE-2018-2830.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2831](https://cve.now/CVE-2018-2831.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS)
- [CVE-2018-2832](https://cve.now/CVE-2018-2832.md): Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate. (no CVSS, Oracle GoldenGate)
- [CVE-2018-2833](https://cve.now/CVE-2018-2833.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). (no CVSS, Oracle Hospitality Simphony)
- [CVE-2018-2834](https://cve.now/CVE-2018-2834.md): Vulnerability in the Oracle Data Visualization Desktop component of Oracle Fusion Middleware (subcomponent: Security). (no CVSS, Oracle Data Visualization Desktop)
- [CVE-2018-2835](https://cve.now/CVE-2018-2835.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2836](https://cve.now/CVE-2018-2836.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2837](https://cve.now/CVE-2018-2837.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2838](https://cve.now/CVE-2018-2838.md): Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft Products (subcomponent: EPPCM\_HIER\_TOP). (no CVSS, Oracle PeopleSoft Enterprise PRTL Interaction Hub)
- [CVE-2018-2839](https://cve.now/CVE-2018-2839.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2840](https://cve.now/CVE-2018-2840.md): Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xstore Office). (no CVSS, Oracle Retail Xstore Point of Service)
- [CVE-2018-2841](https://cve.now/CVE-2018-2841.md): Vulnerability in the Java VM component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2018-2842](https://cve.now/CVE-2018-2842.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2843](https://cve.now/CVE-2018-2843.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2845](https://cve.now/CVE-2018-2845.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2846](https://cve.now/CVE-2018-2846.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance Schema). (no CVSS, Oracle MySQL Server)
- [CVE-2018-2847](https://cve.now/CVE-2018-2847.md): Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations). (no CVSS, Oracle Hospitality Simphony First Edition)
- [CVE-2018-2848](https://cve.now/CVE-2018-2848.md): Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Client Applicatio (no CVSS, Oracle Hospitality Simphony First Edition)
- [CVE-2018-2849](https://cve.now/CVE-2018-2849.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcompone (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2018-2850](https://cve.now/CVE-2018-2850.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet Man (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2018-2851](https://cve.now/CVE-2018-2851.md): Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Enterprise Manage (no CVSS, Oracle Hospitality Simphony First Edition)
- [CVE-2018-2852](https://cve.now/CVE-2018-2852.md): Vulnerability in the Oracle Hospitality Guest Access component of Oracle Hospitality Applications (subcomponent: Base). (no CVSS, Oracle Hospitality Guest Access)
- [CVE-2018-2853](https://cve.now/CVE-2018-2853.md): Vulnerability in the Oracle Hospitality Simphony First Edition component of Oracle Hospitality Applications (subcomponent: Operations, Clien (no CVSS, Oracle Hospitality Simphony First Edition)
- [CVE-2018-2854](https://cve.now/CVE-2018-2854.md): Vulnerability in the Oracle Financial Services Basel Regulatory Capital Basic component of Oracle Financial Services Applications (subcompon (no CVSS, Oracle Financial Services Basel Regulatory Capital Basic)
- [CVE-2018-2855](https://cve.now/CVE-2018-2855.md): Vulnerability in the Oracle Financial Services Basel Regulatory Capital Basic component of Oracle Financial Services Applications (subcompon (no CVSS, Oracle Financial Services Basel Regulatory Capital Basic)
- [CVE-2018-2856](https://cve.now/CVE-2018-2856.md): Vulnerability in the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach component of Oracle Financial Servic (no CVSS)
- [CVE-2018-2857](https://cve.now/CVE-2018-2857.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsyst (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2018-2858](https://cve.now/CVE-2018-2858.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsyst (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2018-2859](https://cve.now/CVE-2018-2859.md): Vulnerability in the Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach component of Oracle Financial Servic (no CVSS, Oracle Financial Services Basel Regulatory Capital Internal…)
- [CVE-2018-2860](https://cve.now/CVE-2018-2860.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2861](https://cve.now/CVE-2018-2861.md): Vulnerability in the Oracle Retail Back Office component of Oracle Retail Applications (subcomponent: Security). (no CVSS, Oracle Retail Back Office)
- [CVE-2018-2862](https://cve.now/CVE-2018-2862.md): Vulnerability in the Oracle Retail Point-of-Service component of Oracle Retail Applications (subcomponent: User Interface). (no CVSS, Oracle Retail Point-of-Service)
- [CVE-2018-2863](https://cve.now/CVE-2018-2863.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks). (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software)
- [CVE-2018-2864](https://cve.now/CVE-2018-2864.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). (no CVSS, Oracle Application Object Library)
- [CVE-2018-2865](https://cve.now/CVE-2018-2865.md): Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer). (no CVSS, Oracle General Ledger)
- [CVE-2018-2866](https://cve.now/CVE-2018-2866.md): Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Consolidation Hierarchy Viewer). (no CVSS, Oracle General Ledger)
- [CVE-2018-2867](https://cve.now/CVE-2018-2867.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Diagnostics). (no CVSS, Oracle Application Object Library)
- [CVE-2018-2868](https://cve.now/CVE-2018-2868.md): Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). (no CVSS, Oracle Human Resources)
- [CVE-2018-2869](https://cve.now/CVE-2018-2869.md): Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). (no CVSS, Oracle Human Resources)
- [CVE-2018-2870](https://cve.now/CVE-2018-2870.md): Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). (no CVSS, Oracle Human Resources)
- [CVE-2018-2871](https://cve.now/CVE-2018-2871.md): Vulnerability in the Oracle Human Resources component of Oracle E-Business Suite (subcomponent: General Utilities). (no CVSS, Oracle Human Resources)
- [CVE-2018-2872](https://cve.now/CVE-2018-2872.md): Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). (no CVSS, Oracle General Ledger)
- [CVE-2018-2873](https://cve.now/CVE-2018-2873.md): Vulnerability in the Oracle General Ledger component of Oracle E-Business Suite (subcomponent: Account Hierarchy Manager). (no CVSS, Oracle General Ledger)
- [CVE-2018-2874](https://cve.now/CVE-2018-2874.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Logging). (no CVSS, Oracle Application Object Library)
- [CVE-2018-2876](https://cve.now/CVE-2018-2876.md): Vulnerability in the Oracle Retail Integration Bus component of Oracle Retail Applications (subcomponent: RIB Kernal(Apache Commons Collecti (no CVSS, Oracle Retail Integration Bus)
- [CVE-2018-2877](https://cve.now/CVE-2018-2877.md): Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: ndbcluster/plugin). (no CVSS, Oracle MySQL Cluster)
- [CVE-2018-2878](https://cve.now/CVE-2018-2878.md): Vulnerability in the PeopleSoft Enterprise HCM Shared Components component of Oracle PeopleSoft Products (subcomponent: Notepad). (no CVSS, Oracle PeopleSoft Enterprise HCM Shared Components)
- [CVE-2018-2879](https://cve.now/CVE-2018-2879.md): Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine). (no CVSS, Oracle Access Manager)
- [CVE-2018-1035](https://cve.now/CVE-2018-1035.md): A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka "Windows Security Featur (no CVSS, Microsoft Windows)
- [CVE-2018-2844](https://cve.now/CVE-2018-2844.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.