CVEs published July 18, 2018
253 CVEs were published on July 18, 2018: 0 critical, 1 high.
- Published
- 253
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 1
- Unrated
- 251
- Now in CISA KEV
- 0
- Fix available
- 26
Most affected products
- Oracle MySQL Server
- 24
- Oracle Outside In Technology
- 14
- Oracle Sun ZFS Storage Appliance Kit (AK) Software
- 11
- Cisco SD-WAN Solution unknown
- 10
- Oracle Banking Corporate Lending
- 9
- Oracle Banking Payments
- 9
- Oracle FLEXCUBE Enterprise Limits and Collateral Management
- 9
- Oracle FLEXCUBE Investor Servicing
- 9
- Oracle FLEXCUBE Universal Banking
- 9
- Oracle JD Edwards EnterpriseOne Tools
- 9
High 1
Medium, low and unrated 252
- CVE-2018-0342A vulnerability in the configuration and monitoring service of the Cisco SD-WAN Solution could allow an authenticated, local attacker to exeCisco SD-WAN Solution unknown
- CVE-2018-0343A vulnerability in the configuration and management service of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to exCisco SD-WAN Solution unknown
- CVE-2018-0344A vulnerability in the vManage dashboard for the configuration and management service of the Cisco SD-WAN Solution could allow an authenticaCisco SD-WAN Solution unknown
- CVE-2018-0345A vulnerability in the configuration and management database of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to eCisco SD-WAN Solution unknown
- CVE-2018-0346A vulnerability in the Zero Touch Provisioning service of the Cisco SD-WAN Solution could allow an unauthenticated, remote attacker to causeCisco SD-WAN Solution unknown
- CVE-2018-0347A vulnerability in the Zero Touch Provisioning (ZTP) subsystem of the Cisco SD-WAN Solution could allow an authenticated, local attacker to Cisco SD-WAN Solution unknown
- CVE-2018-0348A vulnerability in the CLI of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbitrary commands that are Cisco SD-WAN Solution unknown
- CVE-2018-0349A vulnerability in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to overwrite arbitrary files on the underlying opCisco SD-WAN Solution unknown
- CVE-2018-0350A vulnerability in the VPN subsystem configuration in the Cisco SD-WAN Solution could allow an authenticated, remote attacker to inject arbiCisco SD-WAN Solution unknown
- CVE-2018-0351A vulnerability in the command-line tcpdump utility in the Cisco SD-WAN Solution could allow an authenticated, local attacker to inject arbiCisco SD-WAN Solution unknown
- CVE-2018-0372A vulnerability in the DHCPv6 feature of the Cisco Nexus 9000 Series Fabric Switches in Application-Centric Infrastructure (ACI) Mode could Cisco Nexus 9000 Series unknown
- CVE-2018-0374A vulnerability in the Policy Builder database of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to connecCisco Policy Suite unknown
- CVE-2018-0375A vulnerability in the Cluster Manager of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to log in to an aCisco Policy Suite unknown
- CVE-2018-0376A vulnerability in the Policy Builder interface of Cisco Policy Suite before 18.2.0 could allow an unauthenticated, remote attacker to accesCisco Policy Suite unknown
- CVE-2018-0377A vulnerability in the Open Systems Gateway initiative (OSGi) interface of Cisco Policy Suite before 18.1.0 could allow an unauthenticated, Cisco Policy Suite unknown
- CVE-2018-0379Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WCisco Webex Network Recording Players unknown
- CVE-2018-0380Multiple vulnerabilities exist in the Cisco Webex Network Recording Player for Advanced Recording Format (ARF) and Webex Recording Format (WCisco Webex Network Recording Players unknown
- CVE-2018-0387A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on thCisco Webex Teams unknown
- CVE-2018-0390A vulnerability in the web framework of Cisco Webex could allow an unauthenticated, remote attacker to conduct a Document Object Model-basedCisco Webex unknown
- CVE-2018-0392A vulnerability in the CLI of Cisco Policy Suite could allow an authenticated, local attacker to access files owned by another user.Cisco Policy Suite unknown
- CVE-2018-0393A Read-Only User Effect Change vulnerability in the Policy Builder interface of Cisco Policy Suite could allow an authenticated, remote attaCisco Policy Suite unknown
- CVE-2018-0394A vulnerability in the web upload function of Cisco Cloud Services Platform 2100 could allow an authenticated, remote attacker to obtain resCisco Cloud Services Platform 2100 unknown
- CVE-2018-0396A vulnerability in the web framework of the Cisco Unified Communications Manager IM and Presence Service software could allow an authenticatCisco Unified Communications Manager IM And Presence Servic…
- CVE-2018-0398Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct aCisco Finesse unknown
- CVE-2018-0399Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve Cisco Finesse unknown
- CVE-2018-0400Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenCisco Unified Contact Center Express unknown
- CVE-2018-0401Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenCisco Unified Contact Center Express unknown
- CVE-2018-0402Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenCisco Unified Contact Center Express unknown
- CVE-2018-0403Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenCisco Unified Contact Center Express unknown
- CVE-2018-14364GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write ac
- CVE-2018-14387An issue was discovered in WonderCMS before 2.5.2.
- CVE-2018-14388joyplus-cms 1.6.0 has XSS via the manager/admin_ajax.php can_search_device array parameter.
- CVE-2018-14389joyplus-cms 1.6.0 has SQL Injection via the manager/admin_ajax.php val parameter.
- CVE-2018-12429JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administr
- CVE-2018-14082PHP Scripts Mall JOB SITE (aka Job Portal) 3.0.1 has Cross-site Scripting (XSS) via the search bar.
- CVE-2018-7546wpsmain.dll in Kingsoft WPS Office 2016 and Jinshan PDF 10.1.0.6621 allows remote attackers to cause a denial of service via a crafted pdf f
- CVE-2018-10616ABB Panel Builder 800 all versions has an improper input validation vulnerability which may allow an attacker to insert and run arbitrary coABB Panel Builder
- CVE-2018-14380In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/Queorg.graylog2:graylog2-server
- CVE-2018-14381Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability.pagekit/pagekit
- CVE-2018-14382InstantCMS 2.10.1 has /redirect?url= XSS.
- CVE-2018-8042Apache Ambari, version 2.5.0 to 2.6.2, passwords for Hadoop credential stores are exposed in Ambari Agent informational log messages when thApache Software Foundation Apache Ambari
- CVE-2017-18103The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoof web content in the atlassian-http
- CVE-2018-5232The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to iAtlassian Jira
- CVE-2018-8011mod_md, DoS via Coredumps on specially crafted requestsApache Software Foundation Apache HTTP Server
- CVE-2018-10871389-ds-base before versions 1.3.8.5, 1.4.0.12 is vulnerable to a Cleartext Storage of Sensitive Information.[UNKNOWN] 389-ds-base
- CVE-2018-2598Vulnerability in the MySQL Workbench component of Oracle MySQL (subcomponent: Workbench: Security: Encryption).Oracle MySQL Workbench
- CVE-2018-2767Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Encryption).Oracle MySQL Server
- CVE-2018-2881Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Database).Oracle MICROS Retail-J
- CVE-2018-2882Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Interfaces).Oracle MICROS Retail-J
- CVE-2018-2888Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office).Oracle MICROS Retail-J
- CVE-2018-2891Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications (subcomponent: BDI Job Scheduler).Oracle Retail Bulk Data Integration
- CVE-2018-2892Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Availability Suite Service).Oracle Solaris Operating System
- CVE-2018-2893Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components).Oracle WebLogic Server
- CVE-2018-2894Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).Oracle WebLogic Server
- CVE-2018-2895Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-2896Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-2897Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-2898Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-2899Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-2900Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Layout Tools).Oracle BI Publisher
- CVE-2018-2901Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).Oracle Solaris Operating System
- CVE-2018-2903Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).Oracle Solaris Operating System
- CVE-2018-2904Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUOracle Communications EAGLE LNP Application Processor
- CVE-2018-2905Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2906Vulnerability in the Hardware Management Pack component of Oracle Sun Systems Products Suite (subcomponent: Ipmitool).Oracle SSM - (ssm_host_apps) HMP: Hardware Management Pack
- CVE-2018-2907Vulnerability in the Hyperion Financial Reporting component of Oracle Hyperion (subcomponent: Security Models).Oracle Hyperion Financial Reporting
- CVE-2018-2908Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel).Oracle Solaris Operating System
- CVE-2018-2915Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and security).Oracle Hyperion Data Relationship Management
- CVE-2018-2916Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2917Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2918Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2919Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Unified Navigation).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-2920Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2921Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2923Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Services).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2924Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2925Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: Web Server).Oracle BI Publisher
- CVE-2018-2926Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NVIDIA-GFX Kernel driver).Oracle Solaris Operating System
- CVE-2018-2927Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: HTTP data path subsystOracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2928Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RAD).Oracle Solaris Operating System
- CVE-2018-2929Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-2930Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: NAS device addition).Oracle Solaris Cluster
- CVE-2018-2932Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite (subcomponent: SuperCluster VirtuaOracle SuperCluster Specific Software
- CVE-2018-2934Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload).Oracle Application Object Library
- CVE-2018-2935Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: JSF).Oracle WebLogic Server
- CVE-2018-2936Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications (subcomponent: Web Client).Oracle Communications Convergence
- CVE-2018-2937Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: User Interface).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-2938Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB).Oracle Java
- CVE-2018-2939Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2018-2940Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries).Oracle Java
- CVE-2018-2941Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX).Oracle Java
- CVE-2018-2942Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL).Oracle Java
- CVE-2018-2943Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder).Oracle Fusion Middleware MapViewer
- CVE-2018-2944Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Monitoring and Diagnostics).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-2945Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-2946Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-2947Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-2948Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-2949Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-2950Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-2951Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Configuration Manager).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-2952Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency).Oracle Java
- CVE-2018-2953Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: Print Server).Oracle One-to-One Fulfillment
- CVE-2018-2954Vulnerability in the Oracle Order Management component of Oracle E-Business Suite (subcomponent: Product Diagnostic Tools).Oracle Order Management
- CVE-2018-2955Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Integration).Oracle Hospitality OPERA 5 Property Services
- CVE-2018-2956Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Integration).Oracle Hospitality OPERA 5 Property Services
- CVE-2018-2957Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Logging).Oracle Hospitality OPERA 5 Property Services
- CVE-2018-2958Vulnerability in the BI Publisher component of Oracle Fusion Middleware (subcomponent: BI Publisher Security).Oracle BI Publisher
- CVE-2018-2959Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI).Oracle Siebel UI Framework
- CVE-2018-2960Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponeOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2018-2961Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponeOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2018-2962Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponeOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2018-2963Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcomponeOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2018-2964Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment).Oracle Java
- CVE-2018-2965Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core).Oracle Primavera Unifier
- CVE-2018-2966Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core).Oracle Primavera Unifier
- CVE-2018-2967Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core).Oracle Primavera Unifier
- CVE-2018-2968Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core).
- CVE-2018-2969Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core).Oracle Primavera Unifier
- CVE-2018-2970Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-2972Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security).Oracle Java
- CVE-2018-2973Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE).Oracle Java
- CVE-2018-2974Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-2975Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-2976Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking).Oracle Enterprise Manager Ops Center
- CVE-2018-2977Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-2978Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Import/Export).Oracle Hospitality Simphony
- CVE-2018-2979Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-2980Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-2981Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-2982Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-2984Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Gangway AOracle Hospitality Cruise Fleet Management
- CVE-2018-2985Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-2986Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-2987Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console).Oracle WebLogic Server
- CVE-2018-2988Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Products).Oracle Marketing
- CVE-2018-2989Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration).Oracle iLearning
- CVE-2018-2990Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-2991Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Trade Management
- CVE-2018-2992Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-2993Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences).Oracle CRM Technical Foundation
- CVE-2018-2994Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart).Oracle iStore
- CVE-2018-2995Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart).Oracle iStore
- CVE-2018-2996Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Oracle Diagnostics Interfaces).Oracle Applications Manager
- CVE-2018-2997Vulnerability in the Oracle Scripting component of Oracle E-Business Suite (subcomponent: Script Author).Oracle Scripting
- CVE-2018-2998Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: SAML).Oracle WebLogic Server
- CVE-2018-2999Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-3000Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponeOracle Hospitality Cruise Shipboard Property Management Sys…
- CVE-2018-3001Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcomponeOracle Hospitality Cruise Shipboard Property Management Sys…
- CVE-2018-3002Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet ManOracle Hospitality Cruise Fleet Management
- CVE-2018-3003Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (subcomponent: Fleet ManOracle Hospitality Cruise Fleet Management
- CVE-2018-3004Vulnerability in the Java VM component of Oracle Database Server.Oracle Database
- CVE-2018-3005Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3006Vulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products (subcomponent: Web Runtime).Oracle JD Edwards EnterpriseOne Tools
- CVE-2018-3007Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).Oracle Tuxedo
- CVE-2018-3008Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Marketing
- CVE-2018-3009Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3010Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3012Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface).Oracle Trade Management
- CVE-2018-3013Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Report Server Oracle Hospitality OPERA 5 Property Services
- CVE-2018-3014Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomponent: Reports).Oracle Hospitality OPERA 5 Property Services
- CVE-2018-3015Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-3016Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2018-3017Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Preferences).Oracle CRM Technical Foundation
- CVE-2018-3018Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart).Oracle iStore
- CVE-2018-3019Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2018-3020Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-3021Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-3022Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-3023Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-3024Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-3025Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-3026Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-3027Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core).Oracle Banking Payments
- CVE-2018-3028Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-3029Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-3030Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-3031Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-3032Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-3033Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-3034Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-3035Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2018-3036Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-3037Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-3038Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-3039Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-3040Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-3041Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-3042Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-3043Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-3044Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-3045Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-3046Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-3047Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-3048Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-3049Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-3050Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module).Oracle Banking Corporate Lending
- CVE-2018-3051Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services Applications (subcomOracle FLEXCUBE Enterprise Limits and Collateral Management
- CVE-2018-3052Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Internal Operations).Oracle MICROS Relate CRM Software
- CVE-2018-3053Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation component of Oracle Retail Applications (subcomponent: InOracle Retail Customer Management and Segmentation Foundati…
- CVE-2018-3054Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).Oracle MySQL Server
- CVE-2018-3055Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3056Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL Server
- CVE-2018-3057Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: API frameworks).Oracle Sun ZFS Storage Appliance Kit (AK) Software
- CVE-2018-3058Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: MyISAM).Oracle MySQL Server
- CVE-2018-3060Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).Oracle MySQL Server
- CVE-2018-3061Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL Server
- CVE-2018-3062Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached).Oracle MySQL Server
- CVE-2018-3063Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL Server
- CVE-2018-3064Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).Oracle MySQL Server
- CVE-2018-3065Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML).Oracle MySQL Server
- CVE-2018-3066Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options).Oracle MySQL Server
- CVE-2018-3067Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication).Oracle MySQL Server
- CVE-2018-3068Vulnerability in the PeopleSoft Enterprise HCM Human Resources component of Oracle PeopleSoft Products (subcomponent: Compensation).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2018-3069Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: InOracle Agile Product Lifecycle Management for Process
- CVE-2018-3070Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client mysqldump).Oracle MySQL Server
- CVE-2018-3071Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Audit Log).Oracle MySQL Server
- CVE-2018-3072Vulnerability in the PeopleSoft HRMS component of Oracle PeopleSoft Products (subcomponent: Candidate Gateway).Oracle PeopleSoft Enterprise HCM Candidate Gateway
- CVE-2018-3073Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).Oracle MySQL Server
- CVE-2018-3074Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles).Oracle MySQL Server
- CVE-2018-3075Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).Oracle MySQL Server
- CVE-2018-3076Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products (subcomponent: ISIR Processing).Oracle PeopleSoft Enterprise CS Financial Aid
- CVE-2018-3077Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).Oracle MySQL Server
- CVE-2018-3078Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).Oracle MySQL Server
- CVE-2018-3079Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB).Oracle MySQL Server
- CVE-2018-3080Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).Oracle MySQL Server
- CVE-2018-3081Vulnerability in the MySQL Client component of Oracle MySQL (subcomponent: Client programs).Oracle MySQL Server
- CVE-2018-3082Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL).Oracle MySQL Server
- CVE-2018-3084Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Core / Client).Oracle MySQL Server
- CVE-2018-3085Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3086Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3087Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3088Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3089Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3090Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3091Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core).Oracle VM VirtualBox
- CVE-2018-3092Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3093Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3094Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3095Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3096Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3097Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3098Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3099Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3100Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: Process Analysis & DiscovOracle Business Process Management Suite
- CVE-2018-3101Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: Portlet Services).Oracle WebCenter Portal
- CVE-2018-3102Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3103Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3104Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters).Oracle Outside In Technology
- CVE-2018-3105Vulnerability in the Oracle SOA Suite component of Oracle Fusion Middleware (subcomponent: Health Care FastPath).Oracle SOA Suite
- CVE-2018-14371The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameteorg.glassfish:mojarra-parent
- CVE-2018-14379MP4Atom::factory in mp4atom.cpp in MP4v2 2.0.0 incorrectly uses the MP4ItemAtom data type in a certain case where MP4DataAtom is required, w