CVEs published in April 2018
1,684 vulnerabilities, 383 critical, 5 exploited.
- oracle corporation siebel core - server framework, oracle siebel core-server framework +1 moreVulnerability in the Siebel Core - Server Framework component of Oracle Siebel CRM (subcomponent:...5.0 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...6.1 Medium
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...4.7 Medium
- oracle corporation peoplesoft enterprise pt peopletools, oracle peoplesoft enterprise peopletools +1 moreVulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products...7.3 High
- oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...8.8 High
- oracle adaptive access managerVulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware ...7.6 High
- oracle outside in technologyVulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware ...7.1 High
- oracle security service, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Security Service component of Oracle Fusion Middleware (subcomponent:...7.5 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...7.5 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: NTPD)....3.3 Low
- ibm http serverVulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OSSL...5.9 Medium
- oracle communications order and service managementVulnerability in the Oracle Communications Order and Service Management component of Oracle...6.3 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: ZVNET...7.7 High
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Python...6.0 Medium
- oracle peoplesoft enterprise human capital management, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise HCM component of Oracle PeopleSoft Products ...5.4 Medium
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager...7.1 High
- oracle banking corporate lending, banking payments, flexcube enterprise limits and collateral management +2 more +4 moreVulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services...5.4 Medium
- oracle banking corporate lending, banking payments, flexcube enterprise limits and collateral management +2 more +4 moreVulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services...6.1 Medium
- oracle banking corporate lending, banking payments, flexcube enterprise limits and collateral management +2 more +4 moreVulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services...6.5 Medium
- oracle banking corporate lending, banking payments, flexcube enterprise limits and collateral management +2 more +4 moreVulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services...7.1 High
- oracle enterprise manager ops centerVulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager...7.3 High
- oracle access manager, oracle corporation coreid access +1 moreVulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent:...9.3 Critical
- oracle retail central officeVulnerability in the Oracle Retail Central Office component of Oracle Retail Applications ...6.5 Medium
- oracle retail returns managementVulnerability in the Oracle Retail Returns Management component of Oracle Retail Applications ...6.5 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: RPC)....7.5 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...9.8 Critical
- oracle access manager, adaptive access manager +1 moreVulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent:...6.5 Medium
- oracle agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle...6.1 Medium
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP...4.2 Medium
- spotify, spotify music player +1 moreThis vulnerability allows remote attackers to execute arbitrary code on vulnerable installations...8.8 High
- microsoft windows 10, windows 10 servers, windows server 2016 +2 moreA security feature bypass vulnerability exists in Windows which could allow an attacker to bypass...5.3 Medium
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...8.8 High
- purevpnPureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its ...8.8 High
- d-link dir-615 t1 firmwareD-Link DIR-615 T1 devices allow XSS via the Add User feature.4.8 Medium
- indusoft web studio, industrial-software intouch machine edition 2017, ics-cert schneider electric indusoft web studio and intouch machine edition +2 moreA remote attacker could send a carefully crafted packet in InduSoft Web Studio v8.1 and prior...9.8 Critical
- schneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0203, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreA vulnerability exists in the web services to process SOAP requests in Schneider Electric's...7.5 High
- schneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0202, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreA vulnerability exists in the HTTP request parser in Schneider Electric's Modicon M340, Modicon...9.8 Critical
- schneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0201, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreAn authorization bypass vulnerability exists in Schneider Electric's Modicon M340, Modicon...9.8 Critical
- schneider electric se modicon m340, modicon premium, modicon quantum, bmxnor0200, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreA buffer overflow vulnerability exists in Schneider Electric's Modicon M340, Modicon Premium,...7.5 High
- schneider electric se micom p540d range with legacy ethernet board, schneider-electric micom p141 firmware, micom p142 firmware +21 more +23 moreA denial of service vulnerability exists in Schneider Electric's MiCOM Px4x (P540 range excluded)...6.5 Medium
- schneider electric se 66074 mge network management card transverse installed in mge ups and mge sts, schneider-electric 66074 mge network management card transverse +1 moreA cleartext transmission of sensitive information vulnerability exists in Schneider Electric's...9.8 Critical
- schneider electric se 66074 mge network management card transverse installed in mge ups and mge sts, schneider-electric 66074 mge network management card transverse +1 moreAn improper authorization vulnerability exists In Schneider Electric's 66074 MGE Network...9.1 Critical
- schneider electric se 66074 mge network management card transverse installed in mge ups and mge sts, schneider-electric 66074 mge network management card transverse +1 moreAn information disclosure vulnerability exists In Schneider Electric's 66074 MGE Network...5.3 Medium
- schneider electric se 66074 mge network management card transverse installed in mge ups and mge sts, schneider-electric 66074 mge network management card transverse +1 moreAn authorization bypass vulnerability exists In Schneider Electric's 66074 MGE Network Management...9.8 Critical
- schneider electric se modicon premium, modicon quantum, modicon m340, bmxnor0200, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreVulnerable hash algorithms exists in Schneider Electric's Modicon Premium, Modicon Quantum,...9.8 Critical
- schneider electric se modicon premium, modicon quantum, modicon m340, bmxnor0200, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +55 more +57 moreHard coded accounts exist in Schneider Electric's Modicon Premium, Modicon Quantum, Modicon M340,...9.8 Critical
- schneider electric se modicon quantum, schneider-electric 140cpu31110 firmware, 140cpu31110c firmware +11 more +13 moreA vulnerability exists in Schneider Electric's Modicon Quantum in all versions of the...8.8 High
- apache software foundation wicket-jquery-uiCross-site Scripting in wicket-jquery-ui6.1 Medium
- oisf suricata-updateOISF suricata-update unsafely deserializes YAML data7.8 High
- lightsamlLightSAML Incorrect Access Control vulnerability7.5 High
- Show moreLoading…