Archive

18 July 2018

Vulnerabilities first published on this day (UTC), newest first.

← June 2018 2018 / July /18 August 2018 →

All Critical High Medium Low Exploited only Public exploit

253 results · Feed

Medium 6.1

CVE-2018-14380

Cross-site Scripting in Graylog Server

In Graylog before 2.4.6, XSS was possible in typeahead components, related to components/common/TypeAheadInput.jsx and components/search/QueryInput.ts.

org.graylog2:graylog2-server Maven

Jul 18, 2018
Medium 6.1

CVE-2018-14381

Pagekit open redirect vulnerability

Pagekit before 1.0.14 has a /user/login?redirect= open redirect vulnerability.

pagekit/pagekit Packagist

Jul 18, 2018
Unscored —

CVE-2018-8011 Scanner template EPSS 55%

mod_md, DoS via Coredumps on specially crafted requests

By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33).

Apache Software Foundation Apache HTTP Server apache2 apache2 Debian Alpine

Jul 18, 2018
Unscored —

CVE-2018-5232

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows …

Atlassian Jira Web / CMS

Jul 18, 2018
Unscored —

CVE-2017-18103

The atlassian-http library, as used in various Atlassian products, before version 2.0.2 allows remote attackers to spoo…

Atlassian atlassian-http

Jul 18, 2018
Unscored —

CVE-2018-3080

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are af…

Oracle MySQL Server

Jul 18, 2018
Unscored —

CVE-2018-3065

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

Oracle MySQL Server mysql-5.7 Ubuntu

Jul 18, 2018
Unscored —

CVE-2018-3003

Vulnerability in the Oracle Hospitality Cruise Fleet Management System component of Oracle Hospitality Applications (su…

Oracle Hospitality Cruise Fleet Management

Jul 18, 2018
Unscored —

CVE-2018-3022

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payment…

Oracle Banking Payments

Jul 18, 2018
Unscored —

CVE-2018-3061

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are af…

Oracle MySQL Server mysql-5.7 Ubuntu

Jul 18, 2018
Unscored —

CVE-2018-3045

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services…

Oracle FLEXCUBE Enterprise Limits and Collateral Management

Jul 18, 2018
Unscored —

CVE-2018-3031

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcompone…

Oracle FLEXCUBE Investor Servicing

Jul 18, 2018
Unscored —

CVE-2018-3103

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filte…

Oracle Outside In Technology

Jul 18, 2018
Unscored —

CVE-2018-3020

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payment…

Oracle Banking Payments

Jul 18, 2018
Unscored —

CVE-2018-3009

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filte…

Oracle Outside In Technology

Jul 18, 2018
Unscored —

CVE-2018-3050

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent…

Oracle Banking Corporate Lending

Jul 18, 2018
Unscored —

CVE-2018-3046

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent…

Oracle Banking Corporate Lending

Jul 18, 2018
Unscored —

CVE-2018-3055

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported versio…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jul 18, 2018
Unscored —

CVE-2018-3010

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filte…

Oracle Outside In Technology

Jul 18, 2018
Unscored —

CVE-2018-3023

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payment…

Oracle Banking Payments

Jul 18, 2018
Unscored —

CVE-2018-3063

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

Oracle MySQL Server mysql-5.5 mariadb-10.0 Ubuntu Alpine

Jul 18, 2018
Unscored —

CVE-2018-3101

Vulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent: Portlet Services). Su…

Oracle WebCenter Portal

Jul 18, 2018
Unscored —

CVE-2018-3037

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services…

Oracle FLEXCUBE Enterprise Limits and Collateral Management

Jul 18, 2018
Unscored —

CVE-2018-3051

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services…

Oracle FLEXCUBE Enterprise Limits and Collateral Management

Jul 18, 2018
Unscored —

CVE-2018-3007

Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core). Supported versions that …

Oracle Tuxedo

Jul 18, 2018
Unscored —

CVE-2018-3039

Vulnerability in the Oracle FLEXCUBE Enterprise Limits and Collateral Management component of Oracle Financial Services…

Oracle FLEXCUBE Enterprise Limits and Collateral Management

Jul 18, 2018
Unscored —

CVE-2018-3042

Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent…

Oracle Banking Corporate Lending

Jul 18, 2018
Unscored —

CVE-2018-3076

Vulnerability in the PeopleSoft Enterprise CS Financial Aid component of Oracle PeopleSoft Products (subcomponent: ISIR…

Oracle PeopleSoft Enterprise CS Financial Aid

Jul 18, 2018
Unscored —

CVE-2018-3035

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcompone…

Oracle FLEXCUBE Investor Servicing

Jul 18, 2018
Unscored —

CVE-2018-3021

Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payment…

Oracle Banking Payments

Jul 18, 2018
Unscored —

CVE-2018-3087

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported versio…

Oracle VM VirtualBox virtualbox Virtualization Ubuntu

Jul 18, 2018
Unscored —

CVE-2018-3096

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filte…

Oracle Outside In Technology

Jul 18, 2018
Unscored —

CVE-2018-3102

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filte…

Oracle Outside In Technology

Jul 18, 2018
Unscored —

CVE-2018-3104

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filte…

Oracle Outside In Technology

Jul 18, 2018
Unscored —

CVE-2018-3052

Vulnerability in the MICROS Relate CRM Software component of Oracle Retail Applications (subcomponent: Internal Operati…

Oracle MICROS Relate CRM Software

Jul 18, 2018
Unscored —

CVE-2018-3014

Vulnerability in the Oracle Hospitality OPERA 5 Property Services component of Oracle Hospitality Applications (subcomp…

Oracle Hospitality OPERA 5 Property Services

Jul 18, 2018
Unscored —

CVE-2018-3012

Vulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent: User Interface). Suppo…

Oracle Trade Management

Jul 18, 2018
Unscored —

CVE-2018-3056

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported ver…

Oracle MySQL Server mysql-5.7 Ubuntu

Jul 18, 2018
Unscored —

CVE-2018-3033

Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcompone…

Oracle FLEXCUBE Investor Servicing

Jul 18, 2018
Unscored —

CVE-2018-3093

Vulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware (subcomponent: Outside In Filte…

Oracle Outside In Technology

Jul 18, 2018