# CVEs published 2018-10-17

261 CVEs were published on October 17, 2018: 2 critical, 10 high. Days are UTC.

- [CVE-2018-0381](https://cve.now/CVE-2018-0381.md): Cisco Aironet 1560, 1800, 2800, and 3800 Series Access Points Denial of Service Vulnerability (CVSS 5.8, Cisco Aironet Access Points)
- [CVE-2018-0417](https://cve.now/CVE-2018-0417.md): Cisco Wireless LAN Controller Software GUI Privilege Escalation Vulnerability (CVSS 7.5, Cisco Wireless LAN Controller)
- [CVE-2018-0420](https://cve.now/CVE-2018-0420.md): Cisco Wireless LAN Controller Software Directory Traversal Vulnerability (CVSS 6.5, Cisco Wireless LAN Controller)
- [CVE-2018-0441](https://cve.now/CVE-2018-0441.md): Cisco IOS Access Points Software 802.11r Fast Transition Denial of Service Vulnerability (CVSS 7.4, Cisco Aironet Access Point Software)
- [CVE-2018-0442](https://cve.now/CVE-2018-0442.md): Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Information Disclosure Vulnerability (CVSS 7.5, Cisco Wireless LAN Controller)
- [CVE-2018-0443](https://cve.now/CVE-2018-0443.md): Cisco Wireless LAN Controller Software Control and Provisioning of Wireless Access Points Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco Wireless LAN Controller)
- [CVE-2018-15435](https://cve.now/CVE-2018-15435.md): Cisco SocialMiner Cross-Site Scripting Vulnerability (CVSS 6.1, Cisco SocialMiner)
- [CVE-2018-15438](https://cve.now/CVE-2018-15438.md): Cisco Prime Collaboration Assurance Cross-Site Request Forgery Vulnerability (CVSS 6.5, Cisco Prime Collaboration Assurance)
- [CVE-2018-18450](https://cve.now/CVE-2018-18450.md): apps\\admin\\controller\\content\\SingleController.php in PbootCMS before V1.3.0 build 2018-11-12 has SQL Injection, as demonstrated by the POST (no CVSS)
- [CVE-2018-0378](https://cve.now/CVE-2018-0378.md): Cisco NX-OS Software for Nexus 5500, 5600, and 6000 Series Switches Precision Time Protocol Denial of Service Vulnerability (CVSS 8.6, Cisco NX-OS Software for Nexus 6000 Series)
- [CVE-2018-14597](https://cve.now/CVE-2018-14597.md): CA Technologies Identity Governance 12.6, 14.0, 14.1, and 14.2 and CA Identity Suite Virtual Appliance 14.0, 14.1, and 14.2 provide telling (no CVSS, CA Technologies CA Identity Governance)
- [CVE-2018-0395](https://cve.now/CVE-2018-0395.md): Cisco FXOS and NX-OS Software Link Layer Discovery Protocol Denial of Service Vulnerability (CVSS 8.8, Cisco NX-OS Software · Cisco Firepower 4100 Series Next-Gen…)
- [CVE-2018-0456](https://cve.now/CVE-2018-0456.md): Cisco NX-OS Software Authenticated Simple Network Management Protocol Denial of Service Vulnerability (CVSS 7.7, Cisco NX-OS Software for Nexus 3000 Series 7.0(3)I7)
- [CVE-2018-15395](https://cve.now/CVE-2018-15395.md): Cisco Wireless LAN Controller Software Privilege Escalation Vulnerability (CVSS 5.4, Cisco Wireless LAN Controller)
- [CVE-2018-15402](https://cve.now/CVE-2018-15402.md): Cisco Enterprise NFV Infrastructure Software Cross-Site Request Forgery Vulnerability (CVSS 5.4, Cisco Enterprise NFV Infrastructure Software)
- [CVE-2018-18386](https://cve.now/CVE-2018-18386.md): drivers/tty/n\_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to access pseudo terminals) to hang/block furthe (no CVSS)
- [CVE-2018-0388](https://cve.now/CVE-2018-0388.md): Cisco Wireless LAN Controller Software Cross-Site Scripting Vulnerability (CVSS 4.8, Cisco Wireless LAN Controller)
- [CVE-2018-0416](https://cve.now/CVE-2018-0416.md): Cisco Wireless LAN Controller Software Information Disclosure Vulnerability (CVSS 5.3, Cisco Wireless LAN Controller)
- [CVE-2018-15616](https://cve.now/CVE-2018-15616.md): System Platform Web UI Deserialization (CVSS 9.0, Avaya Aura® System Platform)
- [CVE-2018-18443](https://cve.now/CVE-2018-18443.md): OpenEXR 2.3.0 has a memory leak in ThreadPool in IlmBase/IlmThread/IlmThreadPool.cpp, as demonstrated by exrmultiview. (no CVSS)
- [CVE-2018-18444](https://cve.now/CVE-2018-18444.md): makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of-bounds write, leading to an assertion failure or possibly unspecified other (no CVSS)
- [CVE-2018-18445](https://cve.now/CVE-2018-18445.md): In the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation of numeric bounds in the BPF verifier perm (no CVSS)
- [CVE-2018-12813](https://cve.now/CVE-2018-12813.md): Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-12814](https://cve.now/CVE-2018-12814.md): Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-12816](https://cve.now/CVE-2018-12816.md): Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-12818](https://cve.now/CVE-2018-12818.md): Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-12819](https://cve.now/CVE-2018-12819.md): Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-12820](https://cve.now/CVE-2018-12820.md): Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-12821](https://cve.now/CVE-2018-12821.md): Adobe Digital Editions versions 4.5.8 and below have an out of bounds read vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-12822](https://cve.now/CVE-2018-12822.md): Adobe Digital Editions versions 4.5.8 and below have an use after free vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-12823](https://cve.now/CVE-2018-12823.md): Adobe Digital Editions versions 4.5.8 and below have a heap overflow vulnerability. (no CVSS, Adobe Digital Editions)
- [CVE-2018-15969](https://cve.now/CVE-2018-15969.md): Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2018-15970](https://cve.now/CVE-2018-15970.md): Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2018-15971](https://cve.now/CVE-2018-15971.md): Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2018-15972](https://cve.now/CVE-2018-15972.md): Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2018-15973](https://cve.now/CVE-2018-15973.md): Adobe Experience Manager versions 6.4, 6.3, 6.2, 6.1, and 6.0 have a stored cross-site scripting vulnerability. (no CVSS, Adobe Experience Manager)
- [CVE-2018-15974](https://cve.now/CVE-2018-15974.md): Adobe Framemaker versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Framemaker)
- [CVE-2018-15976](https://cve.now/CVE-2018-15976.md): Adobe Technical Communications Suite versions 1.0.5.1 and below have an insecure library loading (dll hijacking) vulnerability. (no CVSS, Adobe Technical Communications Suite)
- [CVE-2017-17176](https://cve.now/CVE-2017-17176.md): The hardware security module of Mate 9 and Mate 9 Pro Huawei smart phones with the versions earlier before MHA-AL00BC00B156, versions earlie (no CVSS, Huawei Technologies Co. Mate 9, Mate 9 Pro)
- [CVE-2018-7924](https://cve.now/CVE-2018-7924.md): Anne-AL00 Huawei phones with versions earlier than 8.0.0.151(C00) have an information leak vulnerability. (no CVSS, Huawei Technologies Co. Anne-AL00)
- [CVE-2018-7989](https://cve.now/CVE-2018-7989.md): Huawei Mate 10 pro smartphones with the versions before BLA-AL00B 8.1.0.326(C00) have an improper authentication vulnerability. (no CVSS, Huawei Technologies Co. Mate 10 pro)
- [CVE-2018-10822](https://cve.now/CVE-2018-10822.md): Directory traversal vulnerability in the web interface on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 (no CVSS)
- [CVE-2018-10823](https://cve.now/CVE-2018-10823.md): An issue was discovered on D-Link DWR-116 through 1.06, DWR-512 through 2.02, DWR-712 through 2.02, DWR-912 through 2.02, DWR-921 through 2. (no CVSS)
- [CVE-2018-10824](https://cve.now/CVE-2018-10824.md): An issue was discovered on D-Link DWR-116 through 1.06, DIR-140L through 1.02, DIR-640L through 1.02, DWR-512 through 2.02, DWR-712 through (no CVSS)
- [CVE-2018-15493](https://cve.now/CVE-2018-15493.md): vBulletin 5.4.3 has an Open Redirect. (no CVSS)
- [CVE-2018-16232](https://cve.now/CVE-2018-16232.md): An authenticated command injection vulnerability exists in IPFire Firewall before 2.21 Core Update 124 in backup.cgi. (no CVSS)
- [CVE-2018-17964](https://cve.now/CVE-2018-17964.md): Aryanic HighPortal 12.5 has XSS via an Add Tags action. (no CVSS)
- [CVE-2018-18262](https://cve.now/CVE-2018-18262.md): Zoho ManageEngine OpManager 12.3 before build 123214 has XSS. (no CVSS)
- [CVE-2018-18372](https://cve.now/CVE-2018-18372.md): A Stored XSS vulnerability has been discovered in KAASoft Library CMS - Powerful Book Management System 2.1.1 via the /admin/book/create/ ti (no CVSS)
- [CVE-2018-18373](https://cve.now/CVE-2018-18373.md): In the Schiocco "Support Board - Chat And Help Desk" plugin 1.2.3 for WordPress, a Stored XSS vulnerability has been discovered in file uplo (no CVSS)
- [CVE-2018-7076](https://cve.now/CVE-2018-7076.md): A remote code execution vulnerability was identified in HPE Intelligent Management Center (iMC) prior to iMC PLAT 7.3 E0605P04. (no CVSS, Hewlett Packard Enterprise HPE intelligence Management Cent…)
- [CVE-2018-7110](https://cve.now/CVE-2018-7110.md): A remote unauthorized disclosure of information vulnerability was identified in HPE Service Governance Framework (SGF) version 4.2, 4.3. (no CVSS, Hewlett Packard Enterprise HPE Service Governance Framework)
- [CVE-2018-7111](https://cve.now/CVE-2018-7111.md): A remote unauthorized access vulnerability was identified in HPE UIoT versions 1.5, 1.4.0, 1.4.1, 1.4.2, 1.2.4.2. (no CVSS, Hewlett Packard Enterprise HPE UIoT)
- [CVE-2018-10933](https://cve.now/CVE-2018-10933.md): A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. (CVSS 9.1, \[UNKNOWN\] libssh)
- [CVE-2018-18434](https://cve.now/CVE-2018-18434.md): An issue was discovered in litemall 0.9.0. (no CVSS)
- [CVE-2018-18436](https://cve.now/CVE-2018-18436.md): JTBC(PHP) 3.0 allows CSRF for creating an account via the console/account/manage.php?type=action&action=add URI. (no CVSS)
- [CVE-2018-18407](https://cve.now/CVE-2018-18407.md): A heap-based buffer over-read was discovered in the tcpreplay-edit binary of Tcpreplay 4.3.0 beta1, during the incremental checksum operatio (no CVSS)
- [CVE-2018-18408](https://cve.now/CVE-2018-18408.md): A use-after-free was discovered in the tcpbridge binary of Tcpreplay 4.3.0 beta1. (no CVSS)
- [CVE-2018-18409](https://cve.now/CVE-2018-18409.md): A stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received incorrect values causing incorrect computati (no CVSS)
- [CVE-2018-18422](https://cve.now/CVE-2018-18422.md): UsualToolCMS 8.0 allows CSRF for adding a user account via the cmsadmin/a\_adminx.php?x=a URI. (no CVSS)
- [CVE-2018-18426](https://cve.now/CVE-2018-18426.md): s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.ph (no CVSS)
- [CVE-2018-18427](https://cve.now/CVE-2018-18427.md): s-cms 3.0 allows SQL Injection via the member/post.php 0\_id parameter or the POST data to member/member\_login.php. (no CVSS)
- [CVE-2018-18430](https://cve.now/CVE-2018-18430.md): An issue was discovered in DESTOON B2B 7.0. (no CVSS)
- [CVE-2018-18431](https://cve.now/CVE-2018-18431.md): An issue was discovered in DESTOON B2B 7.0. (no CVSS)
- [CVE-2018-18432](https://cve.now/CVE-2018-18432.md): An issue was discovered in DESTOON B2B 7.0. (no CVSS)
- [CVE-2018-18433](https://cve.now/CVE-2018-18433.md): An issue was discovered in DESTOON B2B 7.0. (no CVSS)
- [CVE-2018-17893](https://cve.now/CVE-2018-17893.md): LAquis SCADA Versions 4.1.0.3870 and prior has an untrusted pointer dereference vulnerability, which may allow remote code execution. (no CVSS, LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA…)
- [CVE-2018-17895](https://cve.now/CVE-2018-17895.md): LAquis SCADA Versions 4.1.0.3870 and prior has several out-of-bounds read vulnerabilities, which may allow remote code execution. (no CVSS, LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA…)
- [CVE-2018-17897](https://cve.now/CVE-2018-17897.md): LAquis SCADA Versions 4.1.0.3870 and prior has several integer overflow to buffer overflow vulnerabilities, which may allow remote code exec (no CVSS)
- [CVE-2018-17899](https://cve.now/CVE-2018-17899.md): LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution. (no CVSS, LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA…)
- [CVE-2018-17901](https://cve.now/CVE-2018-17901.md): LAquis SCADA Versions 4.1.0.3870 and prior, when processing project files the application fails to sanitize user input prior to performing w (no CVSS, LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA…)
- [CVE-2018-17911](https://cve.now/CVE-2018-17911.md): LAquis SCADA Versions 4.1.0.3870 and prior has several stack-based buffer overflow vulnerabilities, which may allow remote code execution. (no CVSS, LCDS - Leão Consultoria e Desenvolvimento de Sistemas LTDA…)
- [CVE-2018-3953](https://cve.now/CVE-2018-3953.md): Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are suscept (CVSS 7.2, Linksys ESeries E1200 · Linksys ESeries E2500)
- [CVE-2018-3954](https://cve.now/CVE-2018-3954.md): Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are suscept (CVSS 7.2, Linksys ESeries E1200 · Linksys ESeries E2500)
- [CVE-2018-3955](https://cve.now/CVE-2018-3955.md): An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and L (CVSS 7.2, Linksys ESeries E1200 · Linksys ESeries E2500)
- [CVE-2018-2887](https://cve.now/CVE-2018-2887.md): Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back Office). (no CVSS, Oracle MICROS Retail-J)
- [CVE-2018-2889](https://cve.now/CVE-2018-2889.md): Vulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Internal Operations). (no CVSS, Oracle MICROS Retail-J)
- [CVE-2018-2902](https://cve.now/CVE-2018-2902.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Console). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-2909](https://cve.now/CVE-2018-2909.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-2911](https://cve.now/CVE-2018-2911.md): Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). (no CVSS, Oracle GlassFish Server)
- [CVE-2018-2912](https://cve.now/CVE-2018-2912.md): Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). (no CVSS, Oracle GoldenGate)
- [CVE-2018-2913](https://cve.now/CVE-2018-2913.md): Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring Manager). (no CVSS, Oracle GoldenGate)
- [CVE-2018-2914](https://cve.now/CVE-2018-2914.md): Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). (no CVSS, Oracle GoldenGate)
- [CVE-2018-2922](https://cve.now/CVE-2018-2922.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-2971](https://cve.now/CVE-2018-2971.md): Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: REST Services). (no CVSS, Oracle Applications Framework)
- [CVE-2018-3011](https://cve.now/CVE-2018-3011.md): Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Trade Management)
- [CVE-2018-3059](https://cve.now/CVE-2018-3059.md): Vulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open UI). (no CVSS, Oracle Siebel UI Framework)
- [CVE-2018-3115](https://cve.now/CVE-2018-3115.md): Vulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications (subcomponent: Operational Insights). (no CVSS)
- [CVE-2018-3122](https://cve.now/CVE-2018-3122.md): Vulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications (subcomponent: Integrations). (no CVSS, Oracle Retail Open Commerce Platform Cloud Service)
- [CVE-2018-3126](https://cve.now/CVE-2018-3126.md): Vulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail Applications (subcomponent: Xenvironment). (no CVSS, Oracle Retail Xstore Point of Service)
- [CVE-2018-3127](https://cve.now/CVE-2018-3127.md): Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). (no CVSS, Oracle Demantra Demand Management)
- [CVE-2018-3128](https://cve.now/CVE-2018-3128.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics)
- [CVE-2018-3129](https://cve.now/CVE-2018-3129.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3130](https://cve.now/CVE-2018-3130.md): Vulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft Products (subcomponent: Application Portal). (no CVSS, Oracle PeopleSoft Enterprise PRTL Interaction Hub)
- [CVE-2018-3131](https://cve.now/CVE-2018-3131.md): Vulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Gift and Loyalty)
- [CVE-2018-3132](https://cve.now/CVE-2018-3132.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3133](https://cve.now/CVE-2018-3133.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3134](https://cve.now/CVE-2018-3134.md): Vulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle Supply Chain Products Suite (subcomponent: Us (no CVSS, Oracle Agile Product Lifecycle Management for Process)
- [CVE-2018-3135](https://cve.now/CVE-2018-3135.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3136](https://cve.now/CVE-2018-3136.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). (no CVSS, Oracle Java)
- [CVE-2018-3137](https://cve.now/CVE-2018-3137.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3138](https://cve.now/CVE-2018-3138.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). (no CVSS, Oracle Applications Framework)
- [CVE-2018-3139](https://cve.now/CVE-2018-3139.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java)
- [CVE-2018-3140](https://cve.now/CVE-2018-3140.md): Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). (no CVSS, Oracle Hyperion Essbase Administration Services)
- [CVE-2018-3141](https://cve.now/CVE-2018-3141.md): Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). (no CVSS, Oracle Hyperion Essbase Administration Services)
- [CVE-2018-3142](https://cve.now/CVE-2018-3142.md): Vulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion (subcomponent: EAS Console). (no CVSS, Oracle Hyperion Essbase Administration Services)
- [CVE-2018-3143](https://cve.now/CVE-2018-3143.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3144](https://cve.now/CVE-2018-3144.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3145](https://cve.now/CVE-2018-3145.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). (no CVSS)
- [CVE-2018-3146](https://cve.now/CVE-2018-3146.md): Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). (no CVSS, Oracle iLearning)
- [CVE-2018-3147](https://cve.now/CVE-2018-3147.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3148](https://cve.now/CVE-2018-3148.md): Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Web Access). (no CVSS, Oracle Primavera Unifier)
- [CVE-2018-3149](https://cve.now/CVE-2018-3149.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI). (no CVSS, Oracle Java)
- [CVE-2018-3150](https://cve.now/CVE-2018-3150.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility). (no CVSS, Oracle Java)
- [CVE-2018-3151](https://cve.now/CVE-2018-3151.md): Vulnerability in the Oracle iProcurement component of Oracle E-Business Suite (subcomponent: E-Content Manager Catalog). (no CVSS, Oracle iProcurement)
- [CVE-2018-3152](https://cve.now/CVE-2018-3152.md): Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). (no CVSS, Oracle GlassFish Server)
- [CVE-2018-3153](https://cve.now/CVE-2018-3153.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3154](https://cve.now/CVE-2018-3154.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3155](https://cve.now/CVE-2018-3155.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3156](https://cve.now/CVE-2018-3156.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3157](https://cve.now/CVE-2018-3157.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound). (no CVSS, Oracle Java)
- [CVE-2018-3158](https://cve.now/CVE-2018-3158.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Respon (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2018-3159](https://cve.now/CVE-2018-3159.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Sender and Recei (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2018-3160](https://cve.now/CVE-2018-3160.md): Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcompone (no CVSS, Oracle Hospitality Cruise Shipboard Property Management Sys…)
- [CVE-2018-3161](https://cve.now/CVE-2018-3161.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3162](https://cve.now/CVE-2018-3162.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3163](https://cve.now/CVE-2018-3163.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Respon (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2018-3164](https://cve.now/CVE-2018-3164.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Elastic Search). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3165](https://cve.now/CVE-2018-3165.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: SQR). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3166](https://cve.now/CVE-2018-3166.md): Vulnerability in the Oracle Hospitality Cruise Fleet Management component of Oracle Hospitality Applications (subcomponent: Emergency Respon (no CVSS, Oracle Hospitality Cruise Fleet Management)
- [CVE-2018-3167](https://cve.now/CVE-2018-3167.md): Vulnerability in the Application Management Pack for Oracle E-Business Suite component of Oracle E-Business Suite (subcomponent: User Monito (no CVSS, Application Management Pack for Oracle E-Business Suite)
- [CVE-2018-3168](https://cve.now/CVE-2018-3168.md): Vulnerability in the Oracle Identity Analytics component of Oracle Fusion Middleware (subcomponent: Core Components). (no CVSS, Oracle Identity Analytics)
- [CVE-2018-3169](https://cve.now/CVE-2018-3169.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). (no CVSS)
- [CVE-2018-3170](https://cve.now/CVE-2018-3170.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3171](https://cve.now/CVE-2018-3171.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3172](https://cve.now/CVE-2018-3172.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3173](https://cve.now/CVE-2018-3173.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3174](https://cve.now/CVE-2018-3174.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3175](https://cve.now/CVE-2018-3175.md): Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). (no CVSS, Oracle Hyperion Common Events)
- [CVE-2018-3176](https://cve.now/CVE-2018-3176.md): Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). (no CVSS, Oracle Hyperion Common Events)
- [CVE-2018-3177](https://cve.now/CVE-2018-3177.md): Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). (no CVSS, Oracle Hyperion Common Events)
- [CVE-2018-3178](https://cve.now/CVE-2018-3178.md): Vulnerability in the Hyperion Common Events component of Oracle Hyperion (subcomponent: User Interface). (no CVSS, Oracle Hyperion Common Events)
- [CVE-2018-3179](https://cve.now/CVE-2018-3179.md): Vulnerability in the Oracle Identity Manager component of Oracle Fusion Middleware (subcomponent: Advanced Console). (no CVSS, Oracle Identity Manager)
- [CVE-2018-3180](https://cve.now/CVE-2018-3180.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE). (no CVSS, Oracle Java)
- [CVE-2018-3181](https://cve.now/CVE-2018-3181.md): Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcompone (no CVSS, Oracle Hospitality Cruise Shipboard Property Management Sys…)
- [CVE-2018-3182](https://cve.now/CVE-2018-3182.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3183](https://cve.now/CVE-2018-3183.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting). (no CVSS, Oracle Java)
- [CVE-2018-3184](https://cve.now/CVE-2018-3184.md): Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: IQR - Foundation Services). (no CVSS, Oracle Hyperion BI+)
- [CVE-2018-3185](https://cve.now/CVE-2018-3185.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3186](https://cve.now/CVE-2018-3186.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3187](https://cve.now/CVE-2018-3187.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3188](https://cve.now/CVE-2018-3188.md): Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Web interface). (no CVSS, Oracle iStore)
- [CVE-2018-3189](https://cve.now/CVE-2018-3189.md): Vulnerability in the Oracle Customer Interaction History component of Oracle E-Business Suite (subcomponent: Outcome-Result). (no CVSS, Oracle Customer Interaction History)
- [CVE-2018-3190](https://cve.now/CVE-2018-3190.md): Vulnerability in the Oracle E-Business Intelligence component of Oracle E-Business Suite (subcomponent: Overview Page/Report Rendering). (no CVSS, Oracle E-Business Intelligence)
- [CVE-2018-3191](https://cve.now/CVE-2018-3191.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3192](https://cve.now/CVE-2018-3192.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Query). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3193](https://cve.now/CVE-2018-3193.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3194](https://cve.now/CVE-2018-3194.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Activity Guide). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3195](https://cve.now/CVE-2018-3195.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3196](https://cve.now/CVE-2018-3196.md): Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dashboard). (no CVSS, Oracle Partner Management)
- [CVE-2018-3197](https://cve.now/CVE-2018-3197.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3198](https://cve.now/CVE-2018-3198.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3200](https://cve.now/CVE-2018-3200.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3201](https://cve.now/CVE-2018-3201.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3202](https://cve.now/CVE-2018-3202.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3203](https://cve.now/CVE-2018-3203.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3204](https://cve.now/CVE-2018-3204.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion Middleware (subcomponent: Analytics Server). (no CVSS, Oracle Business Intelligence Enterprise Edition)
- [CVE-2018-3205](https://cve.now/CVE-2018-3205.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Workflow). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3206](https://cve.now/CVE-2018-3206.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3207](https://cve.now/CVE-2018-3207.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3208](https://cve.now/CVE-2018-3208.md): Vulnerability in the Hyperion Data Relationship Management component of Oracle Hyperion (subcomponent: Access and Security). (no CVSS, Oracle Hyperion Data Relationship Management)
- [CVE-2018-3209](https://cve.now/CVE-2018-3209.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). (no CVSS)
- [CVE-2018-3210](https://cve.now/CVE-2018-3210.md): Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Java Server Faces). (no CVSS, Oracle GlassFish Server)
- [CVE-2018-3211](https://cve.now/CVE-2018-3211.md): Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serviceability). (no CVSS, Oracle Java)
- [CVE-2018-3212](https://cve.now/CVE-2018-3212.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3213](https://cve.now/CVE-2018-3213.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Docker Images). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3214](https://cve.now/CVE-2018-3214.md): Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound). (no CVSS, Oracle Java)
- [CVE-2018-3215](https://cve.now/CVE-2018-3215.md): Vulnerability in the Oracle Endeca Information Discovery Integrator component of Oracle Fusion Middleware (subcomponent: Integrator ETL). (no CVSS, Oracle Endeca Information Discovery Integrator)
- [CVE-2018-3217](https://cve.now/CVE-2018-3217.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3218](https://cve.now/CVE-2018-3218.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3219](https://cve.now/CVE-2018-3219.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3220](https://cve.now/CVE-2018-3220.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3221](https://cve.now/CVE-2018-3221.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3222](https://cve.now/CVE-2018-3222.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3223](https://cve.now/CVE-2018-3223.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3224](https://cve.now/CVE-2018-3224.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3225](https://cve.now/CVE-2018-3225.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3226](https://cve.now/CVE-2018-3226.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3227](https://cve.now/CVE-2018-3227.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3228](https://cve.now/CVE-2018-3228.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3229](https://cve.now/CVE-2018-3229.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3230](https://cve.now/CVE-2018-3230.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3231](https://cve.now/CVE-2018-3231.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3232](https://cve.now/CVE-2018-3232.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3233](https://cve.now/CVE-2018-3233.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3234](https://cve.now/CVE-2018-3234.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)
- [CVE-2018-3235](https://cve.now/CVE-2018-3235.md): Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: None). (no CVSS, Oracle Applications Manager)
- [CVE-2018-3236](https://cve.now/CVE-2018-3236.md): Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Reports). (no CVSS, Oracle User Management)
- [CVE-2018-3237](https://cve.now/CVE-2018-3237.md): Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: Support Cart). (no CVSS, Oracle Applications Manager)
- [CVE-2018-3238](https://cve.now/CVE-2018-3238.md): Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent: Advanced UI). (no CVSS, Oracle WebCenter Sites)
- [CVE-2018-3239](https://cve.now/CVE-2018-3239.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3241](https://cve.now/CVE-2018-3241.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcompone (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2018-3242](https://cve.now/CVE-2018-3242.md): Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: Marketing Administration). (no CVSS, Oracle Marketing)
- [CVE-2018-3243](https://cve.now/CVE-2018-3243.md): Vulnerability in the Oracle Applications Framework component of Oracle E-Business Suite (subcomponent: None). (no CVSS, Oracle Applications Framework)
- [CVE-2018-3244](https://cve.now/CVE-2018-3244.md): Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: Attachments / File Upload). (no CVSS, Oracle Application Object Library)
- [CVE-2018-3245](https://cve.now/CVE-2018-3245.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3246](https://cve.now/CVE-2018-3246.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3247](https://cve.now/CVE-2018-3247.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Merge). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3248](https://cve.now/CVE-2018-3248.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3249](https://cve.now/CVE-2018-3249.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3250](https://cve.now/CVE-2018-3250.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3251](https://cve.now/CVE-2018-3251.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3252](https://cve.now/CVE-2018-3252.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server)
- [CVE-2018-3253](https://cve.now/CVE-2018-3253.md): Vulnerability in the Oracle Virtual Directory component of Oracle Fusion Middleware (subcomponent: Virtual Directory Manager). (no CVSS, Oracle Virtual Directory)
- [CVE-2018-3254](https://cve.now/CVE-2018-3254.md): Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). (no CVSS, Oracle WebCenter Portal)
- [CVE-2018-3255](https://cve.now/CVE-2018-3255.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3256](https://cve.now/CVE-2018-3256.md): Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). (no CVSS, Oracle Email Center)
- [CVE-2018-3257](https://cve.now/CVE-2018-3257.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3258](https://cve.now/CVE-2018-3258.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). (no CVSS, Oracle MySQL Connectors · mysql:mysql-connector-java)
- [CVE-2018-3259](https://cve.now/CVE-2018-3259.md): Vulnerability in the Java VM component of Oracle Database Server. (no CVSS, Oracle Database)
- [CVE-2018-3261](https://cve.now/CVE-2018-3261.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Integration Broker). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3262](https://cve.now/CVE-2018-3262.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Stylesheet). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3263](https://cve.now/CVE-2018-3263.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Sudo). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3264](https://cve.now/CVE-2018-3264.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3265](https://cve.now/CVE-2018-3265.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zones). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3266](https://cve.now/CVE-2018-3266.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Verified Boot). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3267](https://cve.now/CVE-2018-3267.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LFTP). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3268](https://cve.now/CVE-2018-3268.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SMB Server). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3269](https://cve.now/CVE-2018-3269.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: SMB Server). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3270](https://cve.now/CVE-2018-3270.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3271](https://cve.now/CVE-2018-3271.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3272](https://cve.now/CVE-2018-3272.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones Virtualized NIC Driver). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3273](https://cve.now/CVE-2018-3273.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Remote Administration Daemon (RAD)). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3274](https://cve.now/CVE-2018-3274.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3275](https://cve.now/CVE-2018-3275.md): Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LibKMIP). (no CVSS, Oracle Solaris Operating System)
- [CVE-2018-3276](https://cve.now/CVE-2018-3276.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3277](https://cve.now/CVE-2018-3277.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3278](https://cve.now/CVE-2018-3278.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: RBR). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3279](https://cve.now/CVE-2018-3279.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3280](https://cve.now/CVE-2018-3280.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: JSON). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3281](https://cve.now/CVE-2018-3281.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcompone (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2018-3282](https://cve.now/CVE-2018-3282.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Storage Engines). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3283](https://cve.now/CVE-2018-3283.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Logging). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3284](https://cve.now/CVE-2018-3284.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3285](https://cve.now/CVE-2018-3285.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Windows). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3286](https://cve.now/CVE-2018-3286.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server)
- [CVE-2018-3287](https://cve.now/CVE-2018-3287.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3288](https://cve.now/CVE-2018-3288.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3289](https://cve.now/CVE-2018-3289.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3290](https://cve.now/CVE-2018-3290.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3291](https://cve.now/CVE-2018-3291.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3292](https://cve.now/CVE-2018-3292.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3293](https://cve.now/CVE-2018-3293.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3294](https://cve.now/CVE-2018-3294.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3295](https://cve.now/CVE-2018-3295.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3296](https://cve.now/CVE-2018-3296.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3297](https://cve.now/CVE-2018-3297.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3298](https://cve.now/CVE-2018-3298.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox)
- [CVE-2018-3299](https://cve.now/CVE-2018-3299.md): Vulnerability in the Oracle Text component of Oracle Database Server. (no CVSS, Oracle Text)
- [CVE-2018-3301](https://cve.now/CVE-2018-3301.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Core Technology). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2018-3302](https://cve.now/CVE-2018-3302.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-10-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
