Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2018
October

CVEs published in October 2018

1,469 vulnerabilities, 177 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

oracle glassfish serverVulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent:...CVE-2018-31527.5 HighOctober 17, 2018
oracle iprocurementVulnerability in the Oracle iProcurement component of Oracle E-Business Suite (subcomponent: E...CVE-2018-31517.5 HighOctober 17, 2018
oracle primavera unifierVulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite ...CVE-2018-31486.1 MediumOctober 17, 2018
oracle outside in technologyVulnerability in the Oracle Outside In Technology component of Oracle Fusion Middleware ...CVE-2018-31474.3 MediumOctober 17, 2018
oracle ilearningVulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner...CVE-2018-31468.2 HighOctober 17, 2018
oracle mysql, netapp oncommand insight, oncommand unified manager +3 more +5 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser)....CVE-2018-31456.5 MediumOctober 17, 2018
oracle hyperion, oracle corporation hyperion essbase administration services +1 moreVulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion ...CVE-2018-31427.7 HighOctober 17, 2018
oracle hyperion, oracle corporation hyperion essbase administration services +1 moreVulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion ...CVE-2018-31415.8 MediumOctober 17, 2018
oracle hyperion, oracle corporation hyperion essbase administration services +1 moreVulnerability in the Hyperion Essbase Administration Services component of Oracle Hyperion ...CVE-2018-31406.1 MediumOctober 17, 2018
oracle application object library, oracle corporation applications framework +1 moreVulnerability in the Oracle Application Object Library component of Oracle E-Business Suite ...CVE-2018-31388.2 HighOctober 17, 2018
oracle mysql, oracle corporation mysql server, netapp oncommand insight +4 more +6 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer)....CVE-2018-31376.5 MediumOctober 17, 2018
oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...CVE-2018-31354.7 MediumOctober 17, 2018
oracle agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process component of Oracle...CVE-2018-31345.0 MediumOctober 17, 2018
oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...CVE-2018-31326.1 MediumOctober 17, 2018
oracle hospitality gift and loyaltyVulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage...CVE-2018-31316.1 MediumOctober 17, 2018
oracle peoplesoft enterprise interaction hub, oracle corporation peoplesoft enterprise prtl interaction hub +1 moreVulnerability in the PeopleSoft Enterprise Interaction Hub component of Oracle PeopleSoft...CVE-2018-31305.4 MediumOctober 17, 2018
oracle peoplesoft enterprise peopletools, oracle corporation peoplesoft enterprise pt peopletools +1 moreVulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products ...CVE-2018-31294.3 MediumOctober 17, 2018
oracle hospitality reporting and analyticsVulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and...CVE-2018-31288.1 HighOctober 17, 2018
oracle demantra demand managementVulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products...CVE-2018-31274.3 MediumOctober 17, 2018
oracle retail xstore point of serviceVulnerability in the Oracle Retail Xstore Point of Service component of Oracle Retail...CVE-2018-31266.6 MediumOctober 17, 2018
oracle retail open commerce platform, oracle corporation retail open commerce platform cloud service +1 moreVulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications...CVE-2018-31226.8 MediumOctober 17, 2018
oracle retail sales auditVulnerability in the Oracle Retail Sales Audit component of Oracle Retail Applications ...CVE-2018-31157.7 HighOctober 17, 2018
oracle siebel ui frameworkVulnerability in the Siebel UI Framework component of Oracle Siebel CRM (subcomponent: UIF Open...CVE-2018-30596.1 MediumOctober 17, 2018
oracle trade managementVulnerability in the Oracle Trade Management component of Oracle E-Business Suite (subcomponent:...CVE-2018-30118.2 HighOctober 17, 2018
oracle applications frameworkVulnerability in the Oracle Applications Framework component of Oracle E-Business Suite ...CVE-2018-29714.3 MediumOctober 17, 2018
oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel...CVE-2018-29222.5 LowOctober 17, 2018
oracle goldengateVulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager)....CVE-2018-29147.5 HighOctober 17, 2018
oracle goldengateVulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring...CVE-2018-291310.0 CriticalOctober 17, 2018
oracle goldengateVulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager)....CVE-2018-29127.5 HighOctober 17, 2018
oracle glassfish serverVulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent:...CVE-2018-29118.3 HighOctober 17, 2018
oracle vm virtualboxVulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core)...CVE-2018-29098.6 HighOctober 17, 2018
oracle weblogic serverVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...CVE-2018-29024.3 MediumOctober 17, 2018
oracle micros retail-jVulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent:...CVE-2018-28897.5 HighOctober 17, 2018
oracle micros retail-jVulnerability in the MICROS Retail-J component of Oracle Retail Applications (subcomponent: Back...CVE-2018-28876.5 MediumOctober 17, 2018
linux kernel, canonical ubuntu linux, redhat enterprise linux desktop +5 more +7 moreIn the Linux kernel 4.14.x, 4.15.x, 4.16.x, 4.17.x, and 4.18.x before 4.18.13, faulty computation...CVE-2018-18445Fix available7.8 HighOctober 17, 2018
digitalcorpora tcpflow, canonical ubuntu linux, fedoraproject fedora +2 moreA stack-based buffer over-read exists in setbit() at iptree.h of TCPFLOW 1.5.0, due to received...CVE-2018-18409Fix available5.5 MediumOctober 17, 2018
linux kernel, canonical ubuntu linux +1 moredrivers/tty/n_tty.c in the Linux kernel before 4.14.11 allows local attackers (who are able to...CVE-2018-18386Fix available3.3 LowOctober 17, 2018
bigtreecms bigtree cmsIn the 4.2.23 version of BigTree, a Stored XSS vulnerability has been discovered in /admin/ajax...CVE-2018-18308Public exploit6.1 MediumOctober 16, 2018
pydioPydio 4.2.1 through 8.2.1 has an authenticated remote code execution vulnerability in which an...CVE-2018-14772Public exploit7.2 HighOctober 16, 2018
amazon fire oskernel/omap/drivers/mfd/twl6030-gpadc.c in the kernel component in Amazon Kindle Fire HD(3rd)...CVE-2018-110257.5 HighOctober 16, 2018
amazon fire oskernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd...CVE-2018-110247.5 HighOctober 16, 2018
amazon fire oskernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD (3rd...CVE-2018-110237.5 HighOctober 16, 2018
amazon fire oskernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd)...CVE-2018-110227.5 HighOctober 16, 2018
amazon fire oskernel/omap/drivers/video/omap2/dsscomp/device.c in the kernel component in Amazon Kindle Fire HD...CVE-2018-110217.5 HighOctober 16, 2018
amazon fire oskernel/omap/drivers/rpmsg/rpmsg_omx.c in the kernel component in Amazon Kindle Fire HD(3rd) Fire...CVE-2018-110204.4 MediumOctober 16, 2018
amazon fire oskernel/omap/drivers/misc/gcx/gcioctl/gcif.c in the kernel component in Amazon Kindle Fire HD(3rd)...CVE-2018-110197.5 HighOctober 16, 2018
Microsoft.AspNetCore.All NuGet, Microsoft.AspNetCore.App NuGet, Microsoft.AspNetCore.Server.Kestrel.Core NuGet +2 moreModerate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.CoreGHSA-cgpw-2gph-2r9gFix availableNo scoreOctober 16, 2018
Microsoft.AspNetCore.All NuGet, Microsoft.AspNetCore.Server.Kestrel.Core NuGet, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions NuGet +1 more +3 moreModerate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.Server.Kestrel.Core, Microsoft.AspNetCore.Server.Kestrel.Transport.Abstractions, and Microsoft.AspNetCore.Se…GHSA-3m2r-q8x3-xmf7Fix availableNo scoreOctober 16, 2018
vmware esxi, fusion, workstation +2 moreVMware ESXi (6.7 before ESXi670-201810101-SG, 6.5 before ESXi650-201808401-BG, and 6.0 before...CVE-2018-69748.8 HighOctober 16, 2018
ibm websphere application serverIBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting....CVE-2018-17775.4 MediumOctober 16, 2018
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open