Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
January

CVEs published in January 2018

1,346 vulnerabilities, 169 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2018-25844.3 MediumJanuary 18, 2018
netapp active iq unified manager, cloud backup, e-series santricity management plug-ins +17 more +19 moreVulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported...CVE-2018-2581Fix available4.7 MediumJanuary 18, 2018
oracle applications dbaVulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent:...CVE-2018-25804.4 MediumJanuary 18, 2018
oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...CVE-2018-25787.2 HighJanuary 18, 2018
oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...CVE-2018-25775.5 MediumJanuary 18, 2018
oracle database server, oracle corporation database +1 moreVulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are...CVE-2018-25752.0 LowJanuary 18, 2018
oracle corporation siebel crm desktop, oracle siebel customer relationship management desktop +1 moreVulnerability in the Siebel CRM Desktop component of Oracle Siebel CRM (subcomponent: Outlook...CVE-2018-25748.1 HighJanuary 18, 2018
oracle communications unified inventory managementVulnerability in the Oracle Communications Unified Inventory Management component of Oracle...CVE-2018-25715.4 MediumJanuary 18, 2018
oracle communications unified inventory managementVulnerability in the Oracle Communications Unified Inventory Management component of Oracle...CVE-2018-25706.3 MediumJanuary 18, 2018
oracle java me, oracle corporation java me - specifications +1 moreVulnerability in the Java ME SDK component of Oracle Java Micro Edition (subcomponent: Installer)...CVE-2018-25697.8 HighJanuary 18, 2018
oracle integrated lights out manager firmware, oracle corporation ssm - (hot-tamale) ilom: integrated lights out manager +1 moreVulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems...CVE-2018-25687.3 HighJanuary 18, 2018
oracle communications order and service managementVulnerability in the Oracle Communications Order and Service Management component of Oracle...CVE-2018-25676.1 MediumJanuary 18, 2018
oracle integrated lights out manager firmware, oracle corporation ssm - (hot-tamale) ilom: integrated lights out manager +1 moreVulnerability in the Integrated Lights Out Manager (ILOM) component of Oracle Sun Systems...CVE-2018-25667.7 HighJanuary 18, 2018
oracle webcenter contentVulnerability in the Oracle WebCenter Content component of Oracle Fusion Middleware (subcomponent...CVE-2018-25648.2 HighJanuary 18, 2018
ibm http serverVulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: Web...CVE-2018-25615.3 MediumJanuary 18, 2018
oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...CVE-2018-25605.0 MediumJanuary 18, 2018
intel minnowboard 3 firmware, intel corporation minnowboard 3 +1 moreInput validation error in Intel MinnowBoard 3 Firmware versions prior to 0.65 allow local...CVE-2017-56995.5 MediumJanuary 18, 2018
oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PRTL Interaction Hub component of Oracle PeopleSoft...CVE-2017-103018.1 HighJanuary 18, 2018
oracle database server, oracle corporation database +1 moreVulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are...CVE-2017-102829.1 CriticalJanuary 18, 2018
oracle jdeveloperVulnerability in the Oracle JDeveloper component of Oracle Fusion Middleware (subcomponent:...CVE-2017-10273Public exploit4.7 MediumJanuary 18, 2018
oracle access managerVulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent:...CVE-2017-102625.9 MediumJanuary 18, 2018
oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition component of Oracle Fusion...CVE-2017-100688.2 HighJanuary 18, 2018
intel graphics driverUntrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows...CVE-2017-56967.8 HighJanuary 18, 2018
long range zip project range zip, debian linux +1 moreIn Long Range Zip (aka lrzip) 0.631, there is a use-after-free in the ucompthread function ...CVE-2018-5747Fix available5.5 MediumJanuary 17, 2018
banconeon neonThe Neon app 1.6.14 iOS does not verify X.509 certificates from SSL servers, which allows remote...CVE-2018-52585.9 MediumJanuary 17, 2018
hancom office hword neo, thinkfree office neo +1 moreHancom NEO versions 9.6.1.5183 and earlier have a buffer Overflow vulnerability that leads remote...CVE-2018-51959.8 CriticalJanuary 17, 2018
atlassian jiraThe Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the...CVE-2017-168655.3 MediumJanuary 17, 2018
asuswrt-merlinStack-based buffer overflow in the ej_update_variables function in router/httpd/web.c on ASUS...CVE-2018-57218.8 HighJanuary 17, 2018
samba rsync, canonical ubuntu linux, debian linux +2 moreThe parse_arguments function in options.c in rsyncd in rsync before 3.1.3 does not prevent...CVE-2018-5764Public exploitFix available7.5 HighJanuary 17, 2018
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security :...CVE-2018-2703Fix available6.5 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security :...CVE-2018-2696Fix available7.5 HighJanuary 17, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2678Fix available4.3 MediumJanuary 17, 2018
oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT)....CVE-2018-2677Fix available4.3 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2668Fix available6.5 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2667Fix available4.9 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2665Fix available6.5 MediumJanuary 17, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2663Fix available4.3 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication)....CVE-2018-2647Fix available5.5 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML)....CVE-2018-2646Fix available4.9 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server +1 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Performance...CVE-2018-2645Fix available4.9 MediumJanuary 17, 2018
oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT)....CVE-2018-2641Fix available6.1 MediumJanuary 17, 2018
oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-2640Fix available6.5 MediumJanuary 17, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2637Fix available7.4 HighJanuary 17, 2018
oracle corporation java, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS)....CVE-2018-2634Fix available6.8 MediumJanuary 17, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2633Fix available8.3 HighJanuary 17, 2018
oracle jrockit, canonical ubuntu linux, debian linux +13 more +15 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2629Fix available5.3 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +13 more +15 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL)....CVE-2018-2622Fix available6.5 MediumJanuary 17, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2618Fix available5.9 MediumJanuary 17, 2018
oracle mysql, oracle corporation mysql server, canonical ubuntu linux +6 more +8 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported...CVE-2018-2612Fix available6.5 MediumJanuary 17, 2018
oracle jrockit, oracle corporation java, canonical ubuntu linux +14 more +16 moreVulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...CVE-2018-2603Fix available5.3 MediumJanuary 17, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open