Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-2815 State: PUBLISHED Published: 2018-04-19T02:00:00.000Z Last Updated: 2025-05-06T14:59:02.355Z Vendors: Oracle Corporation Products: Java Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Description: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10
acle Java SE (subcomponent: Serialization). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to
through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.0 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2018:1278 - https://www.debian.org/security/2018/dsa-4185 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us - https://security.gentoo.org/glsa/201903-14
com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03857en_us - https://security.gentoo.org/glsa/201903-14 - https://www.debian.org/security/2018/dsa-4225 - http://www.securitytracker.com/id/1040697 - https://access.redhat.com/errata/RHSA-2018:1203 - http://www.securityfocus.com/bid/103848 - https://usn.ubuntu.com/3644-1/ - https://security.netapp.com/advisory/ntap-20180419-0001/ - https://access.redhat.com/errata/RHSA-2018:1201 - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - https://access.redhat.com/errata/RHSA-2018:1204 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://ac
hat.com/errata/RHSA-2018:1204 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://access.redhat.com/errata/RHSA-2018:1205 - https://usn.ubuntu.com/3691-1/ - https://access.redhat.com/errata/RHSA-2018:1202 - https://access.redhat.com/errata/RHSA-2018:1191 - https://access.redhat.com/errata/RHSA-2018:1188 - https://access.redhat.com/errata/RHSA-2018:1206 - https://access.redhat.com/errata/RHSA-2018:1270 - https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbst03915en_us
CVE ID: CVE-2018-2816 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:16:20.630Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker wi
ted versions that are affected are 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040698 - https://security.netapp.com/advisory/ntap-20180419-0002/ - http://www.securityfocus.com/bid/103789 - https://acce
0698 - https://security.netapp.com/advisory/ntap-20180419-0002/ - http://www.securityfocus.com/bid/103789 - https://access.redhat.com/errata/RHSA-2018:3655 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://usn.ubuntu.com/3629-1/ - https://usn.ubuntu.com/3629-3/
CVE ID: CVE-2018-2817 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:16:14.820Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability al
sions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.debian.org/security/2018/dsa-4341 - http://www.securitytracker.com/id/1040698 - https://access.redhat.com/errata/R
//www.debian.org/security/2018/dsa-4341 - http://www.securitytracker.com/id/1040698 - https://access.redhat.com/errata/RHSA-2018:1254 - https://security.netapp.com/advisory/ntap-20180419-0002/ - https://access.redhat.com/errata/RHSA-2018:2729 - https://www.debian.org/security/2018/dsa-4176 - https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html - https://lists.debian.org/debian-lts-announce/2018/04/msg00020.html - https://access.redhat.com/errata/RHSA-2018:3655 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securityfocus.com/bid/103818 - https://access.redhat.com/errata/RHSA-2018:2439 - https://usn.ubuntu.com/3629-1/ - https://usn.ubun
cus.com/bid/103818 - https://access.redhat.com/errata/RHSA-2018:2439 - https://usn.ubuntu.com/3629-1/ - https://usn.ubuntu.com/3629-2/ - https://usn.ubuntu.com/3629-3/ - https://access.redhat.com/errata/RHSA-2019:1258 - https://security.gentoo.org/glsa/201908-24
CVE ID: CVE-2018-2818 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:16:08.553Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploita
eges). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040698 - https://access.redhat.com/errata/RHSA-2018:1254 - http://www.
References: - http://www.securitytracker.com/id/1040698 - https://access.redhat.com/errata/RHSA-2018:1254 - http://www.securityfocus.com/bid/103824 - https://security.netapp.com/advisory/ntap-20180419-0002/ - https://www.debian.org/security/2018/dsa-4176 - https://lists.debian.org/debian-lts-announce/2018/04/msg00020.html - https://access.redhat.com/errata/RHSA-2018:3655 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - https://usn.ubuntu.com/3629-1/ - https://usn.ubuntu.com/3629-2/ - https://usn.ubuntu.com/3629-3/
CVE ID: CVE-2018-2819 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:16:01.952Z Vendors: Oracle Corporation Products: MySQL Server Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows
that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.debian.org/security/2018/dsa-4341 - http://www.securitytracker.com/id/1040698 - https://access.redhat.com/errata/RHSA-2
.debian.org/security/2018/dsa-4341 - http://www.securitytracker.com/id/1040698 - https://access.redhat.com/errata/RHSA-2018:1254 - https://security.netapp.com/advisory/ntap-20180419-0002/ - https://access.redhat.com/errata/RHSA-2018:2729 - https://www.debian.org/security/2018/dsa-4176 - https://lists.debian.org/debian-lts-announce/2018/06/msg00015.html - https://lists.debian.org/debian-lts-announce/2018/04/msg00020.html - https://access.redhat.com/errata/RHSA-2018:3655 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securityfocus.com/bid/103814 - https://access.redhat.com/errata/RHSA-2018:2439 - https://usn.ubuntu.com/3629-1/ - https://usn.ubuntu.co
om/bid/103814 - https://access.redhat.com/errata/RHSA-2018:2439 - https://usn.ubuntu.com/3629-1/ - https://usn.ubuntu.com/3629-2/ - https://usn.ubuntu.com/3629-3/ - https://access.redhat.com/errata/RHSA-2019:1258 - https://security.gentoo.org/glsa/201908-24
CVE ID: CVE-2018-2820 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:15:55.565Z Vendors: Oracle Corporation Products: PeopleSoft Enterprise PT PeopleTools Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. Description: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploita
eSoft Products (subcomponent: Fluid Core). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103893 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-
References: - http://www.securityfocus.com/bid/103893 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securitytracker.com/id/1040701
CVE ID: CVE-2018-2821 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:15:50.131Z Vendors: Oracle Corporation Products: PeopleSoft Enterprise PT PeopleTools Problem Types: Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessi
rability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. Description: Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: Rich Text Editor). Supported versions that are affected are 8.54, 8.55 and 8.56. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Peopl
ccessful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securi
:L/I:L/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103910 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securitytracker.com/id/1040701
CVE ID: CVE-2018-2822 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:15:44.177Z Vendors: Oracle Corporation Products: Solaris Cluster Problem Types: Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Solaris Cluster accessible data as well as unauthorized update, insert or delete access to some of Solaris Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris Cluster. Description: Vulne
data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris Cluster. Description: Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite (subcomponent: Cluster Geo). The supported version that is affected is 4.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris Cluster executes to compromise Solaris Cluster. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Solaris Cluster accessible data as well as unauthorized update, insert or delete access to some of Solaris Cluster accessible data and unauthorized
ata as well as unauthorized update, insert or delete access to some of Solaris Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Solaris Cluster. CVSS 3.0 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040702 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securityfocus.com/bid/103883
CVE ID: CVE-2018-2823 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:15:37.643Z Vendors: Oracle Corporation Products: Transportation Management Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Management accessible data. Description: Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is affected is 6.4.
component of Oracle Supply Chain Products Suite (subcomponent: Database). The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Management accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103902 - http://www.ora
- CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103902 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
CVE ID: CVE-2018-2824 State: PUBLISHED Published: 2018-04-19T02:00:00 Last Updated: 2024-10-03T20:15:31.280Z Vendors: Oracle Corporation Products: Hospitality Simphony Problem Types: Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. While the vulnerability is in Oracle Hospitality Simphony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data. Description: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Application
cessible data. Description: Vulnerability in the Oracle Hospitality Simphony component of Oracle Hospitality Applications (subcomponent: Enterprise Management Console). Supported versions that are affected are 2.8, 2.9 and 2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Simphony. While the vulnerability is in Oracle Hospitality Simphony, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 7.7 (Confidentiality impacts). CVSS Vec
e access to all Oracle Hospitality Simphony accessible data. CVSS 3.0 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/103900 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html
CVE ID: CVE-2018-2825 State: PUBLISHED Published: 2018-04-19T02:00:00.000Z Last Updated: 2025-05-06T14:58:56.664Z Vendors: Oracle Corporation Products: Java Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Description: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is
ability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is Java SE: 10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted co
cally in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1040697 - https://usn.ubuntu.com/3747-1/ - https://security.netapp.com/
References: - http://www.securitytracker.com/id/1040697 - https://usn.ubuntu.com/3747-1/ - https://security.netapp.com/advisory/ntap-20180419-0001/ - https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0 - http://www.oracle.com/technetwork/security-advisory/cpuapr2018-3678067.html - http://www.securityfocus.com/bid/103782
CVE ID: CVE-2018-2826 State: PUBLISHED Published: 2018-04-19T02:00:00.000Z Last Updated: 2025-05-06T14:53:10.423Z Vendors: Oracle Corporation Products: Java Problem Types: Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Description: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries). The supported version that is affected is