Oracle

Database Server

515 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2018-14719

  • EPSS 2.65%
  • Published 02.01.2019 18:29:00
  • Last modified 21.11.2024 03:49:40

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

6.5

CVE-2018-1000873

Exploit
  • EPSS 2.55%
  • Published 20.12.2018 17:29:00
  • Last modified 21.11.2024 03:40:32

Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious...

9.8

CVE-2018-3259

  • EPSS 6.62%
  • Published 17.10.2018 01:31:27
  • Last modified 21.11.2024 04:05:33

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18c. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protoco...

9.9

CVE-2018-3110

  • EPSS 0.8%
  • Published 10.08.2018 22:29:00
  • Last modified 21.11.2024 04:05:11

A vulnerability was discovered in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1 and 18. Easily exploitable vulnerability allows low privileged attacker having Create Session pri...

5.3

CVE-2018-3004

Exploit
  • EPSS 0.4%
  • Published 18.07.2018 13:29:05
  • Last modified 21.11.2024 04:04:56

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2,12.2.0.1 and 18.2. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure...

8.4

CVE-2018-2939

  • EPSS 0.12%
  • Published 18.07.2018 13:29:02
  • Last modified 21.11.2024 04:04:47

Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18.1 and 18.2. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege wi...

5.9

CVE-2018-10237

  • EPSS 3.26%
  • Published 26.04.2018 21:29:00
  • Last modified 21.11.2024 03:41:04

Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray...

8.5

CVE-2018-2841

  • EPSS 1.09%
  • Published 19.04.2018 02:29:05
  • Last modified 21.11.2024 04:04:35

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure priv...

9.8

CVE-2017-15095

  • EPSS 7.41%
  • Published 06.02.2018 15:29:00
  • Last modified 21.11.2024 03:14:03

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMappe...

8.3

CVE-2018-2680

  • EPSS 1.38%
  • Published 18.01.2018 02:29:22
  • Last modified 21.11.2024 04:04:13

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2 and 12.2.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols ...