# CVEs published 2019-01-16 212 CVEs were published on January 16, 2019: 0 critical, 11 high. Days are UTC. - [CVE-2018-18812](https://cve.now/CVE-2018-18812.md): TIBCO Spotfire Fails To Prevent Write Access to Spotfire Library (CVSS 6.5, TIBCO Software TIBCO Spotfire Analytics Platform for AWS Ma…) - [CVE-2018-18813](https://cve.now/CVE-2018-18813.md): TIBCO Spotfire Reflected and Persistent Cross-Site Scripting Vulnerabilities (CVSS 8.8, TIBCO Software TIBCO Spotfire Analytics Platform for AWS Ma…) - [CVE-2018-18814](https://cve.now/CVE-2018-18814.md): TIBCO Spotfire Authentication Vulnerability (CVSS 8.8, TIBCO Software TIBCO Spotfire Analytics Platform for AWS Ma…) - [CVE-2016-9778](https://cve.now/CVE-2016-9778.md): An error handling certain queries using the nxdomain-redirect feature could cause a REQUIRE assertion failure in db.c (CVSS 7.5, ISC BIND) - [CVE-2017-3135](https://cve.now/CVE-2017-3135.md): Combination of DNS64 and RPZ Can Lead to Crash (CVSS 7.5, ISC BIND) - [CVE-2017-3136](https://cve.now/CVE-2017-3136.md): An error handling synthesized records could cause an assertion failure when using DNS64 with "break-dnssec yes;" (CVSS 5.9, ISC BIND) - [CVE-2017-3137](https://cve.now/CVE-2017-3137.md): A response packet can cause a resolver to terminate when processing an answer containing a CNAME or DNAME (CVSS 7.5, ISC BIND) - [CVE-2017-3138](https://cve.now/CVE-2017-3138.md): named exits with a REQUIRE assertion failure if it receives a null command string on its control channel (CVSS 6.5, ISC BIND) - [CVE-2017-3140](https://cve.now/CVE-2017-3140.md): An error processing RPZ rules can cause named to loop endlessly after handling a query (CVSS 3.7, ISC BIND) - [CVE-2017-3141](https://cve.now/CVE-2017-3141.md): Windows service and uninstall paths are not quoted when BIND is installed (CVSS 7.2, ISC BIND) - [CVE-2017-3142](https://cve.now/CVE-2017-3142.md): An error in TSIG authentication can permit unauthorized zone transfers (CVSS 5.3, ISC BIND) - [CVE-2017-3143](https://cve.now/CVE-2017-3143.md): An error in TSIG authentication can permit unauthorized dynamic updates (CVSS 7.5, ISC BIND) - [CVE-2017-3144](https://cve.now/CVE-2017-3144.md): Failure to properly clean up closed OMAPI connections can exhaust available sockets (CVSS 5.3, ISC DHCP) - [CVE-2017-3145](https://cve.now/CVE-2017-3145.md): Improper fetch cleanup sequencing in the resolver can cause named to crash (CVSS 7.5, ISC BIND) - [CVE-2018-15782](https://cve.now/CVE-2018-15782.md): DSA-2018-226: RSA® Authentication Manager Relative Path Traversal Vulnerability (CVSS 7.7, Dell RSA Authentication Manager) - [CVE-2018-5733](https://cve.now/CVE-2018-5733.md): A malicious client can overflow a reference counter in ISC dhcpd (CVSS 5.9, ISC DHCP) - [CVE-2018-5734](https://cve.now/CVE-2018-5734.md): A malformed request can trigger an assertion failure in badcache.c (CVSS 7.5, ISC BIND) - [CVE-2018-5736](https://cve.now/CVE-2018-5736.md): An error in zone database reference counting can lead to an assertion failure if a server which is running an affected version of BIND attem (no CVSS) - [CVE-2018-5737](https://cve.now/CVE-2018-5737.md): BIND 9.12's serve-stale implementation can cause an assertion failure in rbtdb.c or other undesirable behavior, even if serve-stale is not enabled. (CVSS 5.9, ISC BIND) - [CVE-2018-5738](https://cve.now/CVE-2018-5738.md): Some versions of BIND can improperly permit recursive query service to unauthorized clients (CVSS 5.3, ISC BIND) - [CVE-2018-5739](https://cve.now/CVE-2018-5739.md): Failure to release memory may exhaust system resources (CVSS 6.5, ISC Kea DHCP) - [CVE-2018-5740](https://cve.now/CVE-2018-5740.md): A flaw in the "deny-answer-aliases" feature can cause an assertion failure in named (CVSS 7.5, ISC BIND) - [CVE-2018-5741](https://cve.now/CVE-2018-5741.md): Update policies krb5-subdomain and ms-subdomain do not enforce controls promised in their documentation (CVSS 6.5, ISC BIND) - [CVE-2018-3125](https://cve.now/CVE-2018-3125.md): Vulnerability in the Oracle Retail Merchandising System component of Oracle Retail Applications (subcomponent: Security (SQL Logger)). (no CVSS, Oracle Retail Merchandising System) - [CVE-2018-3303](https://cve.now/CVE-2018-3303.md): Vulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager Products Suite (subcomponent: EM Console). (no CVSS, Oracle Enterprise Manager Base Platform) - [CVE-2018-3304](https://cve.now/CVE-2018-3304.md): Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for (no CVSS, Oracle Application Testing Suite) - [CVE-2018-3305](https://cve.now/CVE-2018-3305.md): Vulnerability in the Oracle Application Testing Suite component of Oracle Enterprise Manager Products Suite (subcomponent: Load Testing for (no CVSS, Oracle Application Testing Suite) - [CVE-2018-3309](https://cve.now/CVE-2018-3309.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2018-3311](https://cve.now/CVE-2018-3311.md): Vulnerability in the Oracle Retail Xstore Payment component of Oracle Retail Applications (subcomponent: Security). (no CVSS, Oracle MICROS Xstore Payment) - [CVE-2019-2395](https://cve.now/CVE-2019-2395.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). (no CVSS, Oracle WebLogic Server) - [CVE-2019-2396](https://cve.now/CVE-2019-2396.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). (no CVSS, Oracle CRM Technical Foundation) - [CVE-2019-2397](https://cve.now/CVE-2019-2397.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics) - [CVE-2019-2398](https://cve.now/CVE-2019-2398.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Deployment). (no CVSS, Oracle WebLogic Server) - [CVE-2019-2399](https://cve.now/CVE-2019-2399.md): Vulnerability in the Oracle Communications Diameter Signaling Router (DSR) component of Oracle Communications Applications (subcomponent: Se (no CVSS, Oracle Communications Diameter Signaling Router) - [CVE-2019-2400](https://cve.now/CVE-2019-2400.md): Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registration). (no CVSS, Oracle iStore) - [CVE-2019-2401](https://cve.now/CVE-2019-2401.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics) - [CVE-2019-2402](https://cve.now/CVE-2019-2402.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Simphony) - [CVE-2019-2403](https://cve.now/CVE-2019-2403.md): Vulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Simphony) - [CVE-2019-2404](https://cve.now/CVE-2019-2404.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2405](https://cve.now/CVE-2019-2405.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Security). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2406](https://cve.now/CVE-2019-2406.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database) - [CVE-2019-2407](https://cve.now/CVE-2019-2407.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics) - [CVE-2019-2408](https://cve.now/CVE-2019-2408.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Feeds). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2409](https://cve.now/CVE-2019-2409.md): Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcompone (no CVSS, Oracle Hospitality Cruise Shipboard Property Management Sys…) - [CVE-2019-2410](https://cve.now/CVE-2019-2410.md): Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcompone (no CVSS, Oracle Hospitality Cruise Shipboard Property Management Sys…) - [CVE-2019-2411](https://cve.now/CVE-2019-2411.md): Vulnerability in the Oracle Hospitality Cruise Shipboard Property Management System component of Oracle Hospitality Applications (subcompone (no CVSS, Oracle Hospitality Cruise Shipboard Property Management Sys…) - [CVE-2019-2412](https://cve.now/CVE-2019-2412.md): Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Object Store). (no CVSS, Oracle Sun ZFS Storage Appliance Kit (AK) Software) - [CVE-2019-2413](https://cve.now/CVE-2019-2413.md): Vulnerability in the Oracle Reports Developer component of Oracle Fusion Middleware (subcomponent: Valid Session). (no CVSS) - [CVE-2019-2414](https://cve.now/CVE-2019-2414.md): Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: Web Listener). (no CVSS, Oracle HTTP Server) - [CVE-2019-2415](https://cve.now/CVE-2019-2415.md): Vulnerability in the Hyperion BI+ component of Oracle Hyperion (subcomponent: Foundation UI & Servlets). (no CVSS, Oracle Hyperion BI+) - [CVE-2019-2416](https://cve.now/CVE-2019-2416.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Application Server). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2417](https://cve.now/CVE-2019-2417.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Performance Monitor). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2418](https://cve.now/CVE-2019-2418.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server) - [CVE-2019-2419](https://cve.now/CVE-2019-2419.md): Vulnerability in the PeopleSoft Enterprise CC Common Application Objects component of Oracle PeopleSoft Products (subcomponent: Form and App (no CVSS, Oracle PeopleSoft Enterprise CC Common Application Objects) - [CVE-2019-2420](https://cve.now/CVE-2019-2420.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server) - [CVE-2019-2421](https://cve.now/CVE-2019-2421.md): Vulnerability in the PeopleSoft Enterprise HCM eProfile Manager Desktop component of Oracle PeopleSoft Products (subcomponent: Guided Self S (no CVSS, Oracle PeopleSoft Enterprise HCM eProfile Manager Desktop) - [CVE-2019-2422](https://cve.now/CVE-2019-2422.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). (no CVSS, Oracle Java) - [CVE-2019-2423](https://cve.now/CVE-2019-2423.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2425](https://cve.now/CVE-2019-2425.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (no CVSS, Oracle Hospitality Reporting and Analytics) - [CVE-2019-2426](https://cve.now/CVE-2019-2426.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking). (no CVSS, Oracle Java) - [CVE-2019-2427](https://cve.now/CVE-2019-2427.md): Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: WebCenter Spaces Application). (no CVSS, Oracle WebCenter Portal) - [CVE-2019-2429](https://cve.now/CVE-2019-2429.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2430](https://cve.now/CVE-2019-2430.md): Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). (no CVSS, Oracle Argus Safety) - [CVE-2019-2431](https://cve.now/CVE-2019-2431.md): Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Console). (no CVSS, Oracle Argus Safety) - [CVE-2019-2432](https://cve.now/CVE-2019-2432.md): Vulnerability in the Oracle Argus Safety component of Oracle Health Sciences Applications (subcomponent: Login). (no CVSS, Oracle Argus Safety) - [CVE-2019-2433](https://cve.now/CVE-2019-2433.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2434](https://cve.now/CVE-2019-2434.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). (no CVSS, Oracle MySQL Server) - [CVE-2019-2435](https://cve.now/CVE-2019-2435.md): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). (no CVSS, Oracle MySQL Connectors · mysql-connector-python) - [CVE-2019-2436](https://cve.now/CVE-2019-2436.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server) - [CVE-2019-2437](https://cve.now/CVE-2019-2437.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System) - [CVE-2019-2438](https://cve.now/CVE-2019-2438.md): Vulnerability in the Oracle Web Cache component of Oracle Fusion Middleware (subcomponent: ESI/Partial Page Caching). (no CVSS, Oracle Web Cache) - [CVE-2019-2439](https://cve.now/CVE-2019-2439.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2440](https://cve.now/CVE-2019-2440.md): Vulnerability in the Oracle Marketing component of Oracle E-Business Suite (subcomponent: User Interface). (no CVSS, Oracle Marketing) - [CVE-2019-2441](https://cve.now/CVE-2019-2441.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Application Container - JavaEE). (no CVSS, Oracle WebLogic Server) - [CVE-2019-2442](https://cve.now/CVE-2019-2442.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2443](https://cve.now/CVE-2019-2443.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: XML Publisher). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2444](https://cve.now/CVE-2019-2444.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (no CVSS, Oracle Database) - [CVE-2019-2445](https://cve.now/CVE-2019-2445.md): Vulnerability in the Oracle Content Manager component of Oracle E-Business Suite (subcomponent: Cover Letter). (no CVSS, Oracle Content Manager) - [CVE-2019-2446](https://cve.now/CVE-2019-2446.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2447](https://cve.now/CVE-2019-2447.md): Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Detail). (no CVSS, Oracle Partner Management) - [CVE-2019-2448](https://cve.now/CVE-2019-2448.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2449](https://cve.now/CVE-2019-2449.md): Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). (no CVSS, Oracle Java) - [CVE-2019-2450](https://cve.now/CVE-2019-2450.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2451](https://cve.now/CVE-2019-2451.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2452](https://cve.now/CVE-2019-2452.md): Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). (no CVSS, Oracle WebLogic Server) - [CVE-2019-2453](https://cve.now/CVE-2019-2453.md): Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite (subcomponent: Performance Management Plan). (no CVSS, Oracle Performance Management) - [CVE-2019-2455](https://cve.now/CVE-2019-2455.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser). (no CVSS, Oracle MySQL Server) - [CVE-2019-2456](https://cve.now/CVE-2019-2456.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2457](https://cve.now/CVE-2019-2457.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2458](https://cve.now/CVE-2019-2458.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2459](https://cve.now/CVE-2019-2459.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2460](https://cve.now/CVE-2019-2460.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2461](https://cve.now/CVE-2019-2461.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2462](https://cve.now/CVE-2019-2462.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2463](https://cve.now/CVE-2019-2463.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2464](https://cve.now/CVE-2019-2464.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2465](https://cve.now/CVE-2019-2465.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2466](https://cve.now/CVE-2019-2466.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2467](https://cve.now/CVE-2019-2467.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2468](https://cve.now/CVE-2019-2468.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2469](https://cve.now/CVE-2019-2469.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2470](https://cve.now/CVE-2019-2470.md): Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Detail). (no CVSS, Oracle Partner Management) - [CVE-2019-2471](https://cve.now/CVE-2019-2471.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Portal). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2472](https://cve.now/CVE-2019-2472.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2473](https://cve.now/CVE-2019-2473.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2474](https://cve.now/CVE-2019-2474.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2475](https://cve.now/CVE-2019-2475.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2476](https://cve.now/CVE-2019-2476.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2477](https://cve.now/CVE-2019-2477.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2478](https://cve.now/CVE-2019-2478.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2479](https://cve.now/CVE-2019-2479.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2480](https://cve.now/CVE-2019-2480.md): Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filters). (no CVSS, Oracle Outside In Technology) - [CVE-2019-2481](https://cve.now/CVE-2019-2481.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server) - [CVE-2019-2482](https://cve.now/CVE-2019-2482.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: PS). (no CVSS, Oracle MySQL Server) - [CVE-2019-2485](https://cve.now/CVE-2019-2485.md): Vulnerability in the Oracle Mobile Field Service component of Oracle E-Business Suite (subcomponent: Administration). (no CVSS, Oracle Mobile Field Service) - [CVE-2019-2486](https://cve.now/CVE-2019-2486.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server) - [CVE-2019-2487](https://cve.now/CVE-2019-2487.md): Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI Infrastructure). (no CVSS, Oracle Transportation Management) - [CVE-2019-2488](https://cve.now/CVE-2019-2488.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Session Management). (no CVSS, Oracle CRM Technical Foundation) - [CVE-2019-2489](https://cve.now/CVE-2019-2489.md): Vulnerability in the Oracle One-to-One Fulfillment component of Oracle E-Business Suite (subcomponent: OCM Query). (no CVSS, Oracle One-to-One Fulfillment) - [CVE-2019-2490](https://cve.now/CVE-2019-2490.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Panel Processor). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2491](https://cve.now/CVE-2019-2491.md): Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). (no CVSS, Oracle Email Center) - [CVE-2019-2492](https://cve.now/CVE-2019-2492.md): Vulnerability in the Oracle Email Center component of Oracle E-Business Suite (subcomponent: Message Display). (no CVSS, Oracle Email Center) - [CVE-2019-2493](https://cve.now/CVE-2019-2493.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community component of Oracle PeopleSoft Products (subcomponent: Frameworks). (no CVSS, Oracle PeopleSoft Enterprise CS Campus Community) - [CVE-2019-2494](https://cve.now/CVE-2019-2494.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server) - [CVE-2019-2495](https://cve.now/CVE-2019-2495.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server) - [CVE-2019-2496](https://cve.now/CVE-2019-2496.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). (no CVSS, Oracle CRM Technical Foundation) - [CVE-2019-2497](https://cve.now/CVE-2019-2497.md): Vulnerability in the Oracle CRM Technical Foundation component of Oracle E-Business Suite (subcomponent: Messages). (no CVSS, Oracle CRM Technical Foundation) - [CVE-2019-2498](https://cve.now/CVE-2019-2498.md): Vulnerability in the Oracle Partner Management component of Oracle E-Business Suite (subcomponent: Partner Dash board). (no CVSS, Oracle Partner Management) - [CVE-2019-2499](https://cve.now/CVE-2019-2499.md): Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: PIA Search Functionality). (no CVSS, Oracle PeopleSoft Enterprise PT PeopleTools) - [CVE-2019-2500](https://cve.now/CVE-2019-2500.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2501](https://cve.now/CVE-2019-2501.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2502](https://cve.now/CVE-2019-2502.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server) - [CVE-2019-2503](https://cve.now/CVE-2019-2503.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection Handling). (no CVSS, Oracle MySQL Server) - [CVE-2019-2504](https://cve.now/CVE-2019-2504.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2505](https://cve.now/CVE-2019-2505.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2506](https://cve.now/CVE-2019-2506.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2507](https://cve.now/CVE-2019-2507.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server) - [CVE-2019-2508](https://cve.now/CVE-2019-2508.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2509](https://cve.now/CVE-2019-2509.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2510](https://cve.now/CVE-2019-2510.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). (no CVSS, Oracle MySQL Server) - [CVE-2019-2511](https://cve.now/CVE-2019-2511.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2512](https://cve.now/CVE-2019-2512.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite (subcompone (no CVSS, Oracle Primavera P6 Enterprise Project Portfolio Management) - [CVE-2019-2513](https://cve.now/CVE-2019-2513.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell). (no CVSS, Oracle MySQL Server) - [CVE-2019-2519](https://cve.now/CVE-2019-2519.md): Vulnerability in the PeopleSoft Enterprise SCM eProcurement component of Oracle PeopleSoft Products (subcomponent: Manage Requisition Status (no CVSS, Oracle PeopleSoft Enterprise SCM eProcurement) - [CVE-2019-2520](https://cve.now/CVE-2019-2520.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2521](https://cve.now/CVE-2019-2521.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2522](https://cve.now/CVE-2019-2522.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2523](https://cve.now/CVE-2019-2523.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2524](https://cve.now/CVE-2019-2524.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2525](https://cve.now/CVE-2019-2525.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2526](https://cve.now/CVE-2019-2526.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2527](https://cve.now/CVE-2019-2527.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2528](https://cve.now/CVE-2019-2528.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Partition). (no CVSS, Oracle MySQL Server) - [CVE-2019-2529](https://cve.now/CVE-2019-2529.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server) - [CVE-2019-2530](https://cve.now/CVE-2019-2530.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). (no CVSS, Oracle MySQL Server) - [CVE-2019-2531](https://cve.now/CVE-2019-2531.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server) - [CVE-2019-2532](https://cve.now/CVE-2019-2532.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). (no CVSS, Oracle MySQL Server) - [CVE-2019-2533](https://cve.now/CVE-2019-2533.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). (no CVSS, Oracle MySQL Server) - [CVE-2019-2534](https://cve.now/CVE-2019-2534.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). (no CVSS, Oracle MySQL Server) - [CVE-2019-2535](https://cve.now/CVE-2019-2535.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). (no CVSS, Oracle MySQL Server) - [CVE-2019-2536](https://cve.now/CVE-2019-2536.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). (no CVSS, Oracle MySQL Server) - [CVE-2019-2537](https://cve.now/CVE-2019-2537.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). (no CVSS, Oracle MySQL Server) - [CVE-2019-2538](https://cve.now/CVE-2019-2538.md): Vulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware (subcomponent: MFT Runtime Server). (no CVSS, Oracle Managed File Transfer) - [CVE-2019-2539](https://cve.now/CVE-2019-2539.md): Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). (no CVSS, Oracle MySQL Server) - [CVE-2019-2540](https://cve.now/CVE-2019-2540.md): Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). (no CVSS, Oracle Java) - [CVE-2019-2541](https://cve.now/CVE-2019-2541.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Client). (no CVSS, Oracle Solaris Operating System) - [CVE-2019-2543](https://cve.now/CVE-2019-2543.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System) - [CVE-2019-2544](https://cve.now/CVE-2019-2544.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). (no CVSS, Oracle Solaris Operating System) - [CVE-2019-2545](https://cve.now/CVE-2019-2545.md): Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). (no CVSS, Oracle Solaris Operating System) - [CVE-2019-2546](https://cve.now/CVE-2019-2546.md): Vulnerability in the Oracle Applications Manager component of Oracle E-Business Suite (subcomponent: SQL Extensions). (no CVSS, Oracle Applications Manager) - [CVE-2019-2547](https://cve.now/CVE-2019-2547.md): Vulnerability in the Java VM component of Oracle Database Server. (no CVSS, Oracle Database) - [CVE-2019-2548](https://cve.now/CVE-2019-2548.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2549](https://cve.now/CVE-2019-2549.md): Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). (no CVSS, Oracle FLEXCUBE Direct Banking) - [CVE-2019-2550](https://cve.now/CVE-2019-2550.md): Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). (no CVSS, Oracle FLEXCUBE Direct Banking) - [CVE-2019-2552](https://cve.now/CVE-2019-2552.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2553](https://cve.now/CVE-2019-2553.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2554](https://cve.now/CVE-2019-2554.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2555](https://cve.now/CVE-2019-2555.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-2556](https://cve.now/CVE-2019-2556.md): Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). (no CVSS, Oracle VM VirtualBox) - [CVE-2019-6455](https://cve.now/CVE-2019-6455.md): An issue was discovered in GNU Recutils 1.8. (no CVSS) - [CVE-2019-6456](https://cve.now/CVE-2019-6456.md): An issue was discovered in GNU Recutils 1.8. (no CVSS) - [CVE-2019-6457](https://cve.now/CVE-2019-6457.md): An issue was discovered in GNU Recutils 1.8. (no CVSS) - [CVE-2019-6458](https://cve.now/CVE-2019-6458.md): An issue was discovered in GNU Recutils 1.8. (no CVSS) - [CVE-2019-6459](https://cve.now/CVE-2019-6459.md): An issue was discovered in GNU Recutils 1.8. (no CVSS) - [CVE-2019-6460](https://cve.now/CVE-2019-6460.md): An issue was discovered in GNU Recutils 1.8. (no CVSS) - [CVE-2019-6461](https://cve.now/CVE-2019-6461.md): An issue was discovered in cairo 1.16.0. (no CVSS) - [CVE-2019-6462](https://cve.now/CVE-2019-6462.md): An issue was discovered in cairo 1.16.0. (no CVSS) - [CVE-2015-9276](https://cve.now/CVE-2015-9276.md): SmarterTools SmarterMail before 13.3.5535 was vulnerable to stored XSS by bypassing the anti-XSS mechanisms. (no CVSS) - [CVE-2015-9277](https://cve.now/CVE-2015-9277.md): MailEnable before 8.60 allows Directory Traversal for reading the messages of other users, uploading files, and deleting files because "/../ (no CVSS) - [CVE-2015-9278](https://cve.now/CVE-2015-9278.md): MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB a (no CVSS) - [CVE-2015-9279](https://cve.now/CVE-2015-9279.md): MailEnable before 8.60 allows Stored XSS via malformed use of "\" character in the body of an e-mail message. (no CVSS) - [CVE-2015-9280](https://cve.now/CVE-2015-9280.md): MailEnable before 8.60 allows XXE via an XML document in the request.aspx Options parameter. (no CVSS) - [CVE-2018-20723](https://cve.now/CVE-2018-20723.md): A cross-site scripting (XSS) vulnerability exists in color\_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended charact (no CVSS) - [CVE-2018-20724](https://cve.now/CVE-2018-20724.md): A cross-site scripting (XSS) vulnerability exists in pollers.php in Cacti before 1.2.0 due to lack of escaping of unintended characters in t (no CVSS) - [CVE-2018-20725](https://cve.now/CVE-2018-20725.md): A cross-site scripting (XSS) vulnerability exists in graph\_templates.php in Cacti before 1.2.0 due to lack of escaping of unintended charact (no CVSS) - [CVE-2018-20726](https://cve.now/CVE-2018-20726.md): A cross-site scripting (XSS) vulnerability exists in host.php (via tree.php) in Cacti before 1.2.0 due to lack of escaping of unintended cha (no CVSS) - [CVE-2018-20721](https://cve.now/CVE-2018-20721.md): URI\_FUNC() in UriParse.c in uriparser before 0.9.1 has an out-of-bounds read (in uriParse\*Ex\* functions) for an incomplete URI with an IPv6 (no CVSS) - [CVE-2019-6447](https://cve.now/CVE-2019-6447.md): The ES File Explorer File Manager application through 4.1.9.7.4 for Android allows remote attackers to read arbitrary files or execute appli (no CVSS) - [CVE-2019-6261](https://cve.now/CVE-2019-6261.md): An issue was discovered in Joomla! before 3.9.2. (no CVSS) - [CVE-2019-6262](https://cve.now/CVE-2019-6262.md): An issue was discovered in Joomla! before 3.9.2. (no CVSS) - [CVE-2019-6263](https://cve.now/CVE-2019-6263.md): An issue was discovered in Joomla! before 3.9.2. (no CVSS) - [CVE-2019-6264](https://cve.now/CVE-2019-6264.md): An issue was discovered in Joomla! before 3.9.2. (no CVSS) - [CVE-2019-6442](https://cve.now/CVE-2019-6442.md): An issue was discovered in NTPsec before 1.1.3. (no CVSS) - [CVE-2019-6443](https://cve.now/CVE-2019-6443.md): An issue was discovered in NTPsec before 1.1.3. (no CVSS) - [CVE-2019-6444](https://cve.now/CVE-2019-6444.md): An issue was discovered in NTPsec before 1.1.3. (no CVSS) - [CVE-2019-6445](https://cve.now/CVE-2019-6445.md): An issue was discovered in NTPsec before 1.1.3. (no CVSS) - [CVE-2019-6446](https://cve.now/CVE-2019-6446.md): An issue was discovered in NumPy before 1.16.3. (no CVSS, numpy) - [CVE-2016-10737](https://cve.now/CVE-2016-10737.md): Serendipity 2.0.4 has XSS via the serendipity\_admin.php serendipity\[body\] parameter. (no CVSS) - [CVE-2016-10738](https://cve.now/CVE-2016-10738.md): Zenbership v107 has CSRF via admin/cp-functions/event-add.php. (no CVSS) - [CVE-2019-6440](https://cve.now/CVE-2019-6440.md): Zemana AntiMalware before 3.0.658 Beta mishandles update logic. (no CVSS) - [CVE-2018-20720](https://cve.now/CVE-2018-20720.md): ABB Relion 630 devices 1.1 before 1.1.0.C0, 1.2 before 1.2.0.B3, and 1.3 before 1.3.0.A6 allow remote attackers to cause a denial of service (no CVSS) - [CVE-2019-6439](https://cve.now/CVE-2019-6439.md): examples/benchmark/tls\_bench.c in a benchmark tool in wolfSSL through 3.15.7 has a heap-based buffer overflow. (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2019-01-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.