Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2023-25136 vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2023-25136
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd...
Openssh Openssh 9.1
5.8
CVSSv2
CVE-2017-3506
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with...
Oracle Weblogic Server 12.2.1.0.0Oracle Weblogic Server 12.2.1.2.0Oracle Weblogic Server 12.2.1.1.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0
5
CVSSv2
CVE-2017-10271
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.1.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.2.0
7.5
CVSSv2
CVE-2018-2628
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.2.0Oracle Weblogic Server 12.2.1.3
7.5
CVSSv2
CVE-2018-2893
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle Weblogic Server 12.2.1.2.0Oracle Weblogic Server 12.2.1.3Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0
7.5
CVSSv2
CVE-2018-2894
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access...
Oracle Weblogic Server 12.2.1.2.0Oracle Weblogic Server 12.2.1.3Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0
7.5
CVSSv2
CVE-2018-3191
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access...
Oracle Weblogic Server 12.2.1.3.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0
7.5
CVSSv2
CVE-2018-3252
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access...
Oracle Weblogic Server 12.2.1.3.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0
7.5
CVSSv2
CVE-2018-3245
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access...
Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.3.0
10
CVSSv2
CVE-2016-3510
Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability...
Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.0.0Oracle Weblogic Server 10.3.6.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-25675CVE-2023-21072physicalCVE-2023-28446encryptionCVE-2023-21076server-side request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook