Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

CVE-2023-25136 vulnerabilities and exploits

(subscribe to this query)

NA
CVE-2023-25136
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd...
Openssh Openssh 9.1
535
VMScore
CVE-2017-3506
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2. Difficult to exploit vulnerability allows unauthenticated attacker with...
Oracle Weblogic Server 12.2.1.0.0Oracle Weblogic Server 12.2.1.2.0Oracle Weblogic Server 12.2.1.1.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0
526
VMScore
CVE-2017-10271
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.2.1.1.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.2.0
819
VMScore
CVE-2018-2628
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle Weblogic Server 10.3.6.0.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.2.0Oracle Weblogic Server 12.2.1.3
690
VMScore
CVE-2018-2893
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with...
Oracle Weblogic Server 12.2.1.2.0Oracle Weblogic Server 12.2.1.3Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0
698
VMScore
CVE-2018-2894
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access...
Oracle Weblogic Server 12.2.1.2.0Oracle Weblogic Server 12.2.1.3Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 10.3.6.0.0