# CVEs published 2020-04-15

512 CVEs were published on April 15, 2020: 25 critical, 149 high. 6 are now in CISA KEV. Days are UTC.

- [CVE-2020-7486](https://cve.now/CVE-2020-7486.md): VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in… (no CVSS, Tricon TCM Model 4351, 4352, 4351A/B, 4352A/B)
- [CVE-2020-7485](https://cve.now/CVE-2020-7485.md): VERSION NOT SUPPORTED WHEN ASSIGNED A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper… (no CVSS, TriStation TS1131)
- [CVE-2020-7484](https://cve.now/CVE-2020-7484.md): VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability with the former 'password' feature could allow a denial of service attack if the user… (no CVSS, TriStation TS1131)
- [CVE-2020-7483](https://cve.now/CVE-2020-7483.md): VERSION NOT SUPPORTED WHEN ASSIGNED A vulnerability could cause certain data to be visible on the network when the 'password' feature is… (no CVSS, TriStation TS1131)
- [CVE-2020-5721](https://cve.now/CVE-2020-5721.md): MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password… (no CVSS, MikroTik WinBox)
- [CVE-2020-11660](https://cve.now/CVE-2020-11660.md): CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive… (no CVSS, CA API Developer Portal)
- [CVE-2020-11659](https://cve.now/CVE-2020-11659.md): CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user… (no CVSS, CA API Developer Portal)
- [CVE-2020-11658](https://cve.now/CVE-2020-11658.md): CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization. (no CVSS, CA API Developer Portal)
- [CVE-2020-1632](https://cve.now/CVE-2020-1632.md): Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate. (CVSS 8.6, Juniper Networks Junos OS)
- [CVE-2020-9280](https://cve.now/CVE-2020-9280.md): In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads"… (no CVSS, silverstripe/framework · silverstripe/userforms +1)
- [CVE-2020-3273](https://cve.now/CVE-2020-3273.md): Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service Vulnerability (CVSS 8.6, Cisco Wireless LAN Controller)
- [CVE-2020-3262](https://cve.now/CVE-2020-3262.md): Cisco Wireless LAN Controller CAPWAP Denial of Service Vulnerability (CVSS 8.6, Cisco Aironet Access Point Software)
- [CVE-2020-3261](https://cve.now/CVE-2020-3261.md): Cisco Mobility Express Software Cross-Site Request Forgery Vulnerability (CVSS 8.1, Cisco Mobility Express)
- [CVE-2020-3260](https://cve.now/CVE-2020-3260.md): Cisco Aironet Series Access Points Client Packet Processing Denial of Service Vulnerability (CVSS 7.4, Cisco Aironet Access Point Software)
- [CVE-2020-3252](https://cve.now/CVE-2020-3252.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3251](https://cve.now/CVE-2020-3251.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3250](https://cve.now/CVE-2020-3250.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3249](https://cve.now/CVE-2020-3249.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3248](https://cve.now/CVE-2020-3248.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3247](https://cve.now/CVE-2020-3247.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3243](https://cve.now/CVE-2020-3243.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3240](https://cve.now/CVE-2020-3240.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3239](https://cve.now/CVE-2020-3239.md): Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big Data (CVSS 9.8, Cisco UCS Director)
- [CVE-2020-3194](https://cve.now/CVE-2020-3194.md): Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution Vulnerability (CVSS 7.8, Cisco Webex Meetings)
- [CVE-2020-3177](https://cve.now/CVE-2020-3177.md): Cisco Unified Communications Manager Path Traversal Vulnerability (CVSS 7.5, Cisco Unified Communications Manager)
- [CVE-2020-3162](https://cve.now/CVE-2020-3162.md): Cisco IoT Field Network Director Denial of Service Vulnerability (CVSS 7.5, Cisco IoT Field Network Director)
- [CVE-2020-3161](https://cve.now/CVE-2020-3161.md): Cisco IP Phones Web Server Remote Code Execution and Denial of Service Vulnerability (CVSS 9.8, KEV, Cisco IP phone)
- [CVE-2019-20681](https://cve.now/CVE-2019-20681.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 7.1)
- [CVE-2019-20680](https://cve.now/CVE-2019-20680.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 7.0)
- [CVE-2019-20679](https://cve.now/CVE-2019-20679.md): NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level. (CVSS 7.3)
- [CVE-2019-20678](https://cve.now/CVE-2019-20678.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-10951](https://cve.now/CVE-2020-10951.md): Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages. (no CVSS)
- [CVE-2019-12519](https://cve.now/CVE-2019-12519.md): An issue was discovered in Squid through 4.7. (no CVSS)
- [CVE-2019-20677](https://cve.now/CVE-2019-20677.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-12520](https://cve.now/CVE-2019-12520.md): An issue was discovered in Squid through 4.7 and 5. (no CVSS)
- [CVE-2019-20676](https://cve.now/CVE-2019-20676.md): Certain NETGEAR devices are affected by lack of access control at the function level. (CVSS 6.0)
- [CVE-2019-20675](https://cve.now/CVE-2019-20675.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20674](https://cve.now/CVE-2019-20674.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20673](https://cve.now/CVE-2019-20673.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20672](https://cve.now/CVE-2019-20672.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20671](https://cve.now/CVE-2019-20671.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11663](https://cve.now/CVE-2020-11663.md): CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect… (no CVSS, CA API Developer Portal)
- [CVE-2020-11662](https://cve.now/CVE-2020-11662.md): CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource… (no CVSS, CA API Developer Portal)
- [CVE-2020-11661](https://cve.now/CVE-2020-11661.md): CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data. (no CVSS, CA API Developer Portal)
- [CVE-2019-20670](https://cve.now/CVE-2019-20670.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20669](https://cve.now/CVE-2019-20669.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20668](https://cve.now/CVE-2019-20668.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20667](https://cve.now/CVE-2019-20667.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20666](https://cve.now/CVE-2019-20666.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11666](https://cve.now/CVE-2020-11666.md): CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges. (no CVSS, CA API Developer Portal)
- [CVE-2019-20665](https://cve.now/CVE-2019-20665.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11665](https://cve.now/CVE-2020-11665.md): CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform… (no CVSS, CA API Developer Portal)
- [CVE-2020-11664](https://cve.now/CVE-2020-11664.md): CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform… (no CVSS, CA API Developer Portal)
- [CVE-2019-20664](https://cve.now/CVE-2019-20664.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20663](https://cve.now/CVE-2019-20663.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-12522](https://cve.now/CVE-2019-12522.md): An issue was discovered in Squid through 4.7. (no CVSS)
- [CVE-2019-20662](https://cve.now/CVE-2019-20662.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20661](https://cve.now/CVE-2019-20661.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20660](https://cve.now/CVE-2019-20660.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20659](https://cve.now/CVE-2019-20659.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 6.4)
- [CVE-2019-12521](https://cve.now/CVE-2019-12521.md): An issue was discovered in Squid through 4.7. (no CVSS)
- [CVE-2019-20658](https://cve.now/CVE-2019-20658.md): Certain NETGEAR devices are affected by disclosure of sensitive information. (CVSS 5.4)
- [CVE-2020-6996](https://cve.now/CVE-2020-6996.md): Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are… (no CVSS, Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstatio…)
- [CVE-2019-20657](https://cve.now/CVE-2019-20657.md): Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. (CVSS 8.0)
- [CVE-2019-20656](https://cve.now/CVE-2019-20656.md): Certain NETGEAR devices are affected by a hardcoded password. (CVSS 6.4)
- [CVE-2019-20655](https://cve.now/CVE-2019-20655.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 7.3)
- [CVE-2019-20654](https://cve.now/CVE-2019-20654.md): Certain NETGEAR devices are affected by incorrect configuration of security settings. (CVSS 4.3)
- [CVE-2019-20653](https://cve.now/CVE-2019-20653.md): Certain NETGEAR devices are affected by denial of service. (CVSS 7.4)
- [CVE-2019-20652](https://cve.now/CVE-2019-20652.md): NETGEAR WAC505 devices before 8.2.1.16 are affected by disclosure of sensitive information. (CVSS 7.9)
- [CVE-2019-20651](https://cve.now/CVE-2019-20651.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 8.1)
- [CVE-2020-10611](https://cve.now/CVE-2020-10611.md): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary… (no CVSS, Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…)
- [CVE-2019-12524](https://cve.now/CVE-2019-12524.md): An issue was discovered in Squid through 4.7. (no CVSS)
- [CVE-2020-10613](https://cve.now/CVE-2020-10613.md): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive… (no CVSS, Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…)
- [CVE-2020-10615](https://cve.now/CVE-2020-10615.md): Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a… (no CVSS, Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…)
- [CVE-2020-11799](https://cve.now/CVE-2020-11799.md): Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. (no CVSS)
- [CVE-2020-5350](https://cve.now/CVE-2020-5350.md): Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM… (CVSS 7.9, Dell Integrated Data Protection Appliance)
- [CVE-2020-5346](https://cve.now/CVE-2020-5346.md): RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console. (CVSS 4.8, Dell RSA Authentication Manager)
- [CVE-2019-20650](https://cve.now/CVE-2019-20650.md): Certain NETGEAR devices are affected by denial of service. (CVSS 5.3)
- [CVE-2019-20649](https://cve.now/CVE-2019-20649.md): NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information. (CVSS 6.9)
- [CVE-2019-20648](https://cve.now/CVE-2019-20648.md): NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings. (CVSS 4.6)
- [CVE-2019-20647](https://cve.now/CVE-2019-20647.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service. (CVSS 6.8)
- [CVE-2019-20646](https://cve.now/CVE-2019-20646.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials. (no CVSS)
- [CVE-2020-3953](https://cve.now/CVE-2020-3953.md): Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. (no CVSS, VMware vRealize Log Insight)
- [CVE-2019-20645](https://cve.now/CVE-2019-20645.md): NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. (CVSS 4.2)
- [CVE-2019-20644](https://cve.now/CVE-2019-20644.md): NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS. (CVSS 4.2)
- [CVE-2020-3954](https://cve.now/CVE-2020-3954.md): Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation. (no CVSS, VMware vRealize Log Insight)
- [CVE-2019-20643](https://cve.now/CVE-2019-20643.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information. (CVSS 7.7)
- [CVE-2019-20642](https://cve.now/CVE-2019-20642.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass. (CVSS 9.0)
- [CVE-2019-20641](https://cve.now/CVE-2019-20641.md): NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level. (CVSS 8.8)
- [CVE-2019-20640](https://cve.now/CVE-2019-20640.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. (CVSS 8.8)
- [CVE-2019-20639](https://cve.now/CVE-2019-20639.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2019-20638](https://cve.now/CVE-2019-20638.md): NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials. (CVSS 7.0)
- [CVE-2020-11792](https://cve.now/CVE-2020-11792.md): NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key… (CVSS 7.5)
- [CVE-2020-11791](https://cve.now/CVE-2020-11791.md): NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS. (CVSS 5.2)
- [CVE-2020-11790](https://cve.now/CVE-2020-11790.md): NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers. (CVSS 9.4)
- [CVE-2020-11789](https://cve.now/CVE-2020-11789.md): Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. (CVSS 8.3)
- [CVE-2020-11788](https://cve.now/CVE-2020-11788.md): Certain NETGEAR devices are affected by authentication bypass. (CVSS 6.5)
- [CVE-2020-11787](https://cve.now/CVE-2020-11787.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11786](https://cve.now/CVE-2020-11786.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-0600](https://cve.now/CVE-2020-0600.md): Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of… (no CVSS, Intel(R) NUC Firmware)
- [CVE-2020-0598](https://cve.now/CVE-2020-0598.md): Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated… (no CVSS, Intel(R) Binary Configuration Tool for Windows)
- [CVE-2020-0577](https://cve.now/CVE-2020-0577.md): Insufficient control flow for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable… (no CVSS, Intel(R) Modular Server Compute Module)
- [CVE-2020-0576](https://cve.now/CVE-2020-0576.md): Buffer overflow in Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of… (no CVSS, Intel(R) Modular Server Compute Module)
- [CVE-2020-0578](https://cve.now/CVE-2020-0578.md): Improper conditions check for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable… (no CVSS, Intel(R) Modular Server Compute Module)
- [CVE-2020-0568](https://cve.now/CVE-2020-0568.md): Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable… (no CVSS, Intel(R) Driver and Support Assistant)
- [CVE-2020-0558](https://cve.now/CVE-2020-0558.md): Improper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow… (no CVSS, Intel(R) PROSet/Wireless WiFi Software)
- [CVE-2020-0557](https://cve.now/CVE-2020-0557.md): Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated… (no CVSS, Intel(R) PROSet/Wireless WiFi Software)
- [CVE-2020-0547](https://cve.now/CVE-2020-0547.md): Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated… (no CVSS, Intel(R) Data Migration Software)
- [CVE-2020-10639](https://cve.now/CVE-2020-10639.md): Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. (no CVSS, Eaton HMiSoft VU3)
- [CVE-2020-10637](https://cve.now/CVE-2020-10637.md): Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues. (no CVSS, Eaton HMiSoft VU3)
- [CVE-2020-6992](https://cve.now/CVE-2020-6992.md): A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior. (no CVSS, GE Digital CIMPLICITY)
- [CVE-2019-19390](https://cve.now/CVE-2019-19390.md): The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters… (no CVSS)
- [CVE-2020-11785](https://cve.now/CVE-2020-11785.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11784](https://cve.now/CVE-2020-11784.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11728](https://cve.now/CVE-2020-11728.md): An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. (no CVSS)
- [CVE-2020-11729](https://cve.now/CVE-2020-11729.md): An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60. (no CVSS)
- [CVE-2020-8948](https://cve.now/CVE-2020-8948.md): The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary… (no CVSS)
- [CVE-2020-4294](https://cve.now/CVE-2020-4294.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). (CVSS 6.3, IBM Qradar)
- [CVE-2020-4274](https://cve.now/CVE-2020-4274.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate… (CVSS 5.4, IBM QRadar)
- [CVE-2020-4272](https://cve.now/CVE-2020-4272.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. (CVSS 5.5, IBM QRadar)
- [CVE-2020-4271](https://cve.now/CVE-2020-4271.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower… (CVSS 6.3, IBM Qradar)
- [CVE-2020-4270](https://cve.now/CVE-2020-4270.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions. (CVSS 8.4, IBM Qradar)
- [CVE-2020-4269](https://cve.now/CVE-2020-4269.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own… (CVSS 7.5, IBM Qradar)
- [CVE-2020-4268](https://cve.now/CVE-2020-4268.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. (CVSS 5.4, IBM Qradar)
- [CVE-2019-4654](https://cve.now/CVE-2019-4654.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a… (CVSS 3.7, IBM Qradar)
- [CVE-2019-4594](https://cve.now/CVE-2019-4594.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable… (CVSS 5.9, IBM QRadar)
- [CVE-2019-4593](https://cve.now/CVE-2019-4593.md): IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks… (CVSS 4.3, IBM Qradar)
- [CVE-2020-1094](https://cve.now/CVE-2020-1094.md): An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work… (no CVSS, Microsoft Windows)
- [CVE-2020-1049](https://cve.now/CVE-2020-1049.md): A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web… (no CVSS, Microsoft Dynamics 365 Server,)
- [CVE-2020-1050](https://cve.now/CVE-2020-1050.md): A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web… (no CVSS, Microsoft Dynamics 365 Server,)
- [CVE-2020-1027](https://cve.now/CVE-2020-1027.md): An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation o (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2020-1029](https://cve.now/CVE-2020-1029.md): An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations… (no CVSS, Microsoft Windows)
- [CVE-2020-1022](https://cve.now/CVE-2020-1022.md): A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution… (no CVSS, Microsoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +2)
- [CVE-2020-1026](https://cve.now/CVE-2020-1026.md): A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the… (no CVSS, Microsoft Research JavaScript Cryptography Library · msrcry…)
- [CVE-2020-1018](https://cve.now/CVE-2020-1018.md): An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of… (no CVSS, Microsoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +1)
- [CVE-2020-1019](https://cve.now/CVE-2020-1019.md): An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka… (no CVSS, Microsoft RMS Sharing for Mac)
- [CVE-2020-1020](https://cve.now/CVE-2020-1020.md): A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially (CVSS 8.8, KEV, Microsoft Windows)
- [CVE-2020-1016](https://cve.now/CVE-2020-1016.md): An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-1017](https://cve.now/CVE-2020-1017.md): An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-1014](https://cve.now/CVE-2020-1014.md): An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-1015](https://cve.now/CVE-2020-1015.md): An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-1009](https://cve.now/CVE-2020-1009.md): An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected… (no CVSS, Microsoft Windows)
- [CVE-2020-1011](https://cve.now/CVE-2020-1011.md): An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-1007](https://cve.now/CVE-2020-1007.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel… (no CVSS, Microsoft Windows)
- [CVE-2020-1008](https://cve.now/CVE-2020-1008.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-1005](https://cve.now/CVE-2020-1005.md): An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-1006](https://cve.now/CVE-2020-1006.md): An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-1003](https://cve.now/CVE-2020-1003.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel… (no CVSS, Microsoft Windows)
- [CVE-2020-1004](https://cve.now/CVE-2020-1004.md): An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-1000](https://cve.now/CVE-2020-1000.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel… (no CVSS, Microsoft Windows)
- [CVE-2020-1001](https://cve.now/CVE-2020-1001.md): An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-1002](https://cve.now/CVE-2020-1002.md): An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit… (no CVSS, Microsoft Forefront Endpoint Protection · Microsoft Syst… +2)
- [CVE-2020-0996](https://cve.now/CVE-2020-0996.md): An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0999](https://cve.now/CVE-2020-0999.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0994](https://cve.now/CVE-2020-0994.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0995](https://cve.now/CVE-2020-0995.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0992](https://cve.now/CVE-2020-0992.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0993](https://cve.now/CVE-2020-0993.md): A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service… (no CVSS, Microsoft Windows)
- [CVE-2020-0988](https://cve.now/CVE-2020-0988.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0991](https://cve.now/CVE-2020-0991.md): A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory… (no CVSS, Microsoft Office)
- [CVE-2020-0984](https://cve.now/CVE-2020-0984.md): An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before… (no CVSS, Microsoft AutoUpdate for Mac)
- [CVE-2020-0985](https://cve.now/CVE-2020-0985.md): An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0987](https://cve.now/CVE-2020-0987.md): An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0982](https://cve.now/CVE-2020-0982.md): An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0983](https://cve.now/CVE-2020-0983.md): An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0980](https://cve.now/CVE-2020-0980.md): A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +2)
- [CVE-2020-0981](https://cve.now/CVE-2020-0981.md): A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully… (no CVSS, Microsoft Windows)
- [CVE-2020-0978](https://cve.now/CVE-2020-0978.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0979](https://cve.now/CVE-2020-0979.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka… (no CVSS, Microsoft Office 365 ProPlus)
- [CVE-2020-0976](https://cve.now/CVE-2020-0976.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0977](https://cve.now/CVE-2020-0977.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0973](https://cve.now/CVE-2020-0973.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0974](https://cve.now/CVE-2020-0974.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0975](https://cve.now/CVE-2020-0975.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0971](https://cve.now/CVE-2020-0971.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0972](https://cve.now/CVE-2020-0972.md): A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0969](https://cve.now/CVE-2020-0969.md): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0970](https://cve.now/CVE-2020-0970.md): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting… (no CVSS, Microsoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1)
- [CVE-2020-0967](https://cve.now/CVE-2020-0967.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code… (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0968](https://cve.now/CVE-2020-0968.md): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scrip (CVSS 7.5, KEV, Microsoft Internet Explorer)
- [CVE-2020-0964](https://cve.now/CVE-2020-0964.md): A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0965](https://cve.now/CVE-2020-0965.md): A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft… (no CVSS, Microsoft Windows)
- [CVE-2020-0966](https://cve.now/CVE-2020-0966.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code… (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0961](https://cve.now/CVE-2020-0961.md): A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory… (no CVSS, Microsoft Office)
- [CVE-2020-0962](https://cve.now/CVE-2020-0962.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information… (no CVSS, Microsoft Windows)
- [CVE-2020-0959](https://cve.now/CVE-2020-0959.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0960](https://cve.now/CVE-2020-0960.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0957](https://cve.now/CVE-2020-0957.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0958](https://cve.now/CVE-2020-0958.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0955](https://cve.now/CVE-2020-0955.md): An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0956](https://cve.now/CVE-2020-0956.md): An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0953](https://cve.now/CVE-2020-0953.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0954](https://cve.now/CVE-2020-0954.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0950](https://cve.now/CVE-2020-0950.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0952](https://cve.now/CVE-2020-0952.md): An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0947](https://cve.now/CVE-2020-0947.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation… (no CVSS, Microsoft Windows)
- [CVE-2020-0948](https://cve.now/CVE-2020-0948.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0949](https://cve.now/CVE-2020-0949.md): A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory… (no CVSS, Microsoft Windows)
- [CVE-2020-0945](https://cve.now/CVE-2020-0945.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation… (no CVSS, Microsoft Windows)
- [CVE-2020-0946](https://cve.now/CVE-2020-0946.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation… (no CVSS, Microsoft Windows)
- [CVE-2020-0943](https://cve.now/CVE-2020-0943.md): An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application… (no CVSS, Microsoft Your Phone Companion App for Android)
- [CVE-2020-0944](https://cve.now/CVE-2020-0944.md): An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations… (no CVSS, Microsoft Windows)
- [CVE-2020-0940](https://cve.now/CVE-2020-0940.md): An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows… (no CVSS, Microsoft Windows)
- [CVE-2020-0942](https://cve.now/CVE-2020-0942.md): An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations… (no CVSS, Microsoft Windows)
- [CVE-2020-0938](https://cve.now/CVE-2020-0938.md): A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially (CVSS 7.8, KEV, Microsoft Windows)
- [CVE-2020-0939](https://cve.now/CVE-2020-0939.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation… (no CVSS, Microsoft Windows)
- [CVE-2020-0936](https://cve.now/CVE-2020-0936.md): An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections, aka 'Windows Scheduled… (no CVSS, Microsoft Windows)
- [CVE-2020-0937](https://cve.now/CVE-2020-0937.md): An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation… (no CVSS, Microsoft Windows)
- [CVE-2020-0933](https://cve.now/CVE-2020-0933.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0934](https://cve.now/CVE-2020-0934.md): An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability… (no CVSS, Microsoft Windows)
- [CVE-2020-0935](https://cve.now/CVE-2020-0935.md): An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka… (no CVSS, Microsoft OneDrive for Windows)
- [CVE-2020-0931](https://cve.now/CVE-2020-0931.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application… (no CVSS, Microsoft SharePoint Foundation · Microsoft SharePoint E… +2)
- [CVE-2020-0932](https://cve.now/CVE-2020-0932.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0929](https://cve.now/CVE-2020-0929.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0930](https://cve.now/CVE-2020-0930.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0926](https://cve.now/CVE-2020-0926.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0927](https://cve.now/CVE-2020-0927.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft SharePoi…)
- [CVE-2020-0923](https://cve.now/CVE-2020-0923.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0924](https://cve.now/CVE-2020-0924.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0925](https://cve.now/CVE-2020-0925.md): A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web… (CVSS 5.4, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0919](https://cve.now/CVE-2020-0919.md): An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries… (no CVSS, Microsoft Remote Desktop for Mac)
- [CVE-2020-0920](https://cve.now/CVE-2020-0920.md): A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application… (no CVSS, Microsoft SharePoint Enterprise Server · Microsoft Share… +1)
- [CVE-2020-0917](https://cve.now/CVE-2020-0917.md): An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0918](https://cve.now/CVE-2020-0918.md): An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-0910](https://cve.now/CVE-2020-0910.md): A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated… (no CVSS, Microsoft Windows)
- [CVE-2020-0913](https://cve.now/CVE-2020-0913.md): An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel… (no CVSS, Microsoft Windows)
- [CVE-2020-0906](https://cve.now/CVE-2020-0906.md): A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka… (no CVSS, Microsoft Office · Microsoft Excel)
- [CVE-2020-0907](https://cve.now/CVE-2020-0907.md): A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft… (no CVSS, Microsoft Windows)
- [CVE-2020-0899](https://cve.now/CVE-2020-0899.md): An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka… (no CVSS, Microsoft Visual Studio)
- [CVE-2020-0900](https://cve.now/CVE-2020-0900.md): An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka… (no CVSS, Microsoft Visual Studio)
- [CVE-2020-0888](https://cve.now/CVE-2020-0888.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege… (no CVSS, Microsoft Windows)
- [CVE-2020-0889](https://cve.now/CVE-2020-0889.md): A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database… (no CVSS, Microsoft Windows)
- [CVE-2020-0895](https://cve.now/CVE-2020-0895.md): A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine… (no CVSS, Microsoft Internet Explorer)
- [CVE-2020-0821](https://cve.now/CVE-2020-0821.md): An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel… (no CVSS, Microsoft Windows)
- [CVE-2020-0835](https://cve.now/CVE-2020-0835.md): An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows… (no CVSS, Microsoft Windows Defender antimalware platform)
- [CVE-2020-0784](https://cve.now/CVE-2020-0784.md): An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege… (no CVSS, Microsoft Windows)
- [CVE-2020-0794](https://cve.now/CVE-2020-0794.md): A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. (no CVSS, Microsoft Windows)
- [CVE-2020-0699](https://cve.now/CVE-2020-0699.md): An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information… (no CVSS, Microsoft Windows)
- [CVE-2020-0760](https://cve.now/CVE-2020-0760.md): A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote… (no CVSS, Microsoft Project · Microsoft Office +7)
- [CVE-2020-0687](https://cve.now/CVE-2020-0687.md): A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka… (no CVSS, Microsoft Windows)
- [CVE-2020-11783](https://cve.now/CVE-2020-11783.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11782](https://cve.now/CVE-2020-11782.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11781](https://cve.now/CVE-2020-11781.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11780](https://cve.now/CVE-2020-11780.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11779](https://cve.now/CVE-2020-11779.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11534](https://cve.now/CVE-2020-11534.md): An issue was discovered in ONLYOFFICE Document Server 5.5.0. (no CVSS)
- [CVE-2020-11535](https://cve.now/CVE-2020-11535.md): An issue was discovered in ONLYOFFICE Document Server 5.5.0. (no CVSS)
- [CVE-2020-11536](https://cve.now/CVE-2020-11536.md): An issue was discovered in ONLYOFFICE Document Server 5.5.0. (no CVSS)
- [CVE-2020-11537](https://cve.now/CVE-2020-11537.md): A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. (no CVSS)
- [CVE-2020-11778](https://cve.now/CVE-2020-11778.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11777](https://cve.now/CVE-2020-11777.md): Certain NETGEAR devices are affected by Stored XSS. (CVSS 6.0)
- [CVE-2020-11776](https://cve.now/CVE-2020-11776.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11775](https://cve.now/CVE-2020-11775.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11774](https://cve.now/CVE-2020-11774.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11773](https://cve.now/CVE-2020-11773.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11772](https://cve.now/CVE-2020-11772.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11771](https://cve.now/CVE-2020-11771.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11770](https://cve.now/CVE-2020-11770.md): Certain NETGEAR devices are affected by command injection by an authenticated user. (CVSS 8.0)
- [CVE-2020-11769](https://cve.now/CVE-2020-11769.md): Certain NETGEAR devices are affected by stored XSS. (CVSS 6.0)
- [CVE-2020-11768](https://cve.now/CVE-2020-11768.md): Certain NETGEAR devices are affected by Stored XSS. (CVSS 6.0)
- [CVE-2019-20767](https://cve.now/CVE-2019-20767.md): Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. (CVSS 6.8)
- [CVE-2020-2952](https://cve.now/CVE-2020-2952.md): Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). (CVSS 6.5, Oracle HTTP Server)
- [CVE-2020-2953](https://cve.now/CVE-2020-2953.md): Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component… (CVSS 9.8, Oracle Retail Customer Management and Segmentation Foundati…)
- [CVE-2020-2954](https://cve.now/CVE-2020-2954.md): Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Candidate Gateway). (CVSS 6.1, Oracle PeopleSoft Enterprise HCM Candidate Gateway)
- [CVE-2020-2955](https://cve.now/CVE-2020-2955.md): Vulnerability in the Oracle FLEXCUBE Core Banking product of Oracle Financial Services Applications (component: Transaction Processing). (CVSS 6.3, Oracle FLEXCUBE Core Banking)
- [CVE-2020-2956](https://cve.now/CVE-2020-2956.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). (CVSS 8.1, Oracle Human Resources)
- [CVE-2020-2958](https://cve.now/CVE-2020-2958.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2959](https://cve.now/CVE-2020-2959.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.6, Oracle VM VirtualBox)
- [CVE-2020-2961](https://cve.now/CVE-2020-2961.md): Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework (Oracle OHS)). (CVSS 9.8, Oracle Enterprise Manager Base Platform)
- [CVE-2020-2963](https://cve.now/CVE-2020-2963.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2020-2964](https://cve.now/CVE-2020-2964.md): Vulnerability in the Oracle Financial Services Data Foundation product of Oracle Financial Services Applications (component: User… (CVSS 7.1, Oracle Financial Services Data Foundation)
- [CVE-2020-2931](https://cve.now/CVE-2020-2931.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Web Applications - InfoCenter). (CVSS 9.8, Oracle Knowledge)
- [CVE-2020-2932](https://cve.now/CVE-2020-2932.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 5.9, Oracle Knowledge)
- [CVE-2020-2933](https://cve.now/CVE-2020-2933.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 2.2, Oracle MySQL Connectors)
- [CVE-2020-2934](https://cve.now/CVE-2020-2934.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 5.0, Oracle WebLogic Server)
- [CVE-2020-2935](https://cve.now/CVE-2020-2935.md): Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations product of Oracle Financial Services Applications… (CVSS 7.1, Oracle Financial Services Hedge Management and IFRS Valuati…)
- [CVE-2020-2936](https://cve.now/CVE-2020-2936.md): Vulnerability in the Oracle Financial Services Balance Sheet Planning product of Oracle Financial Services Applications (component: User… (CVSS 7.1, Oracle Financial Services Balance Sheet Planning)
- [CVE-2020-2937](https://cve.now/CVE-2020-2937.md): Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface). (CVSS 7.1, Oracle Insurance Accounting Analyzer)
- [CVE-2020-2938](https://cve.now/CVE-2020-2938.md): Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications… (CVSS 7.1, Oracle Financial Services Loan Loss Forecasting and Provisi…)
- [CVE-2020-2939](https://cve.now/CVE-2020-2939.md): Vulnerability in the Oracle Financial Services Asset Liability Management product of Oracle Financial Services Applications (component… (CVSS 7.1, Oracle Financial Services Asset Liability Management)
- [CVE-2020-2940](https://cve.now/CVE-2020-2940.md): Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications (component: User… (CVSS 7.1, Oracle Financial Services Profitability Management)
- [CVE-2020-2941](https://cve.now/CVE-2020-2941.md): Vulnerability in the Oracle Financial Services Funds Transfer Pricing product of Oracle Financial Services Applications (component: User… (CVSS 7.1, Oracle Financial Services Funds Transfer Pricing)
- [CVE-2020-2942](https://cve.now/CVE-2020-2942.md): Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications (component… (CVSS 7.1, Oracle Financial Services Price Creation and Discovery)
- [CVE-2020-2943](https://cve.now/CVE-2020-2943.md): Vulnerability in the Oracle Financial Services Liquidity Risk Measurement and Management product of Oracle Financial Services Applications… (CVSS 7.1, Oracle Financial Services Liquidity Risk Measurement and Ma…)
- [CVE-2020-2944](https://cve.now/CVE-2020-2944.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 8.8, Oracle Solaris Operating System)
- [CVE-2020-2945](https://cve.now/CVE-2020-2945.md): Vulnerability in the Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management product of Oracle Financial… (CVSS 7.1, Oracle Financial Services Deposit Insurance Calculations fo…)
- [CVE-2020-2946](https://cve.now/CVE-2020-2946.md): Vulnerability in the Application Performance Management product of Oracle Enterprise Manager (component: EM Request Monitoring). (CVSS 6.0, Oracle APM - Application Performance Management)
- [CVE-2020-2947](https://cve.now/CVE-2020-2947.md): Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management). (CVSS 4.3, Oracle PeopleSoft Enterprise HCM Absence Management)
- [CVE-2020-2949](https://cve.now/CVE-2020-2949.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). (CVSS 5.3, Oracle Coherence)
- [CVE-2020-2950](https://cve.now/CVE-2020-2950.md): Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). (CVSS 9.8, Oracle Business Intelligence Enterprise Edition)
- [CVE-2020-2951](https://cve.now/CVE-2020-2951.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2906](https://cve.now/CVE-2020-2906.md): Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Change). (CVSS 6.5, Oracle PeopleSoft Enterprise SCM Purchasing)
- [CVE-2020-2907](https://cve.now/CVE-2020-2907.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2908](https://cve.now/CVE-2020-2908.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2909](https://cve.now/CVE-2020-2909.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 2.8, Oracle VM VirtualBox)
- [CVE-2020-2910](https://cve.now/CVE-2020-2910.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.5, Oracle VM VirtualBox)
- [CVE-2020-2911](https://cve.now/CVE-2020-2911.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.5, Oracle VM VirtualBox)
- [CVE-2020-2912](https://cve.now/CVE-2020-2912.md): Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Self-Service). (CVSS 5.0, Oracle PeopleSoft Enterprise CS Campus Community)
- [CVE-2020-2913](https://cve.now/CVE-2020-2913.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.0, Oracle VM VirtualBox)
- [CVE-2020-2914](https://cve.now/CVE-2020-2914.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.0, Oracle VM VirtualBox)
- [CVE-2020-2915](https://cve.now/CVE-2020-2915.md): Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). (CVSS 9.8, Oracle Coherence)
- [CVE-2020-2920](https://cve.now/CVE-2020-2920.md): Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security). (CVSS 6.1, Oracle Agile PLM Framework)
- [CVE-2020-2921](https://cve.now/CVE-2020-2921.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-2922](https://cve.now/CVE-2020-2922.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 3.7, Oracle MySQL Server)
- [CVE-2020-2923](https://cve.now/CVE-2020-2923.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2924](https://cve.now/CVE-2020-2924.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2925](https://cve.now/CVE-2020-2925.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2926](https://cve.now/CVE-2020-2926.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-2927](https://cve.now/CVE-2020-2927.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 7.8, Oracle Solaris Operating System)
- [CVE-2020-2928](https://cve.now/CVE-2020-2928.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2929](https://cve.now/CVE-2020-2929.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 7.8, Oracle VM VirtualBox)
- [CVE-2020-2930](https://cve.now/CVE-2020-2930.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). (CVSS 4.4, Oracle MySQL Server)
- [CVE-2020-2886](https://cve.now/CVE-2020-2886.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 4.7, Oracle CRM Technical Foundation)
- [CVE-2020-2887](https://cve.now/CVE-2020-2887.md): Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). (CVSS 5.3, Oracle Customer Interaction History)
- [CVE-2020-2888](https://cve.now/CVE-2020-2888.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners). (CVSS 5.3, Oracle Marketing)
- [CVE-2020-2889](https://cve.now/CVE-2020-2889.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 5.3, Oracle CRM Technical Foundation)
- [CVE-2020-2890](https://cve.now/CVE-2020-2890.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). (CVSS 8.2, Oracle Applications Framework)
- [CVE-2020-2891](https://cve.now/CVE-2020-2891.md): Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component… (CVSS 7.1, Oracle Financial Services Liquidity Risk Management)
- [CVE-2020-2892](https://cve.now/CVE-2020-2892.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2893](https://cve.now/CVE-2020-2893.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2894](https://cve.now/CVE-2020-2894.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-2895](https://cve.now/CVE-2020-2895.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2896](https://cve.now/CVE-2020-2896.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2897](https://cve.now/CVE-2020-2897.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2898](https://cve.now/CVE-2020-2898.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2899](https://cve.now/CVE-2020-2899.md): Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing). (CVSS 4.8, Oracle PeopleSoft Enterprise SCM Purchasing)
- [CVE-2020-2900](https://cve.now/CVE-2020-2900.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Tools). (CVSS 3.7, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2901](https://cve.now/CVE-2020-2901.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2902](https://cve.now/CVE-2020-2902.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.8, Oracle VM VirtualBox)
- [CVE-2020-2903](https://cve.now/CVE-2020-2903.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2904](https://cve.now/CVE-2020-2904.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2905](https://cve.now/CVE-2020-2905.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2865](https://cve.now/CVE-2020-2865.md): Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation). (CVSS 5.3, Oracle Configurator)
- [CVE-2020-2866](https://cve.now/CVE-2020-2866.md): Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload). (CVSS 5.3, Oracle Applications Framework)
- [CVE-2020-2867](https://cve.now/CVE-2020-2867.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). (CVSS 8.2, Oracle WebLogic Server)
- [CVE-2020-2868](https://cve.now/CVE-2020-2868.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Diagnostic Framework). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2869](https://cve.now/CVE-2020-2869.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 4.3, Oracle WebLogic Server)
- [CVE-2020-2870](https://cve.now/CVE-2020-2870.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2871](https://cve.now/CVE-2020-2871.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2872](https://cve.now/CVE-2020-2872.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2873](https://cve.now/CVE-2020-2873.md): Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). (CVSS 8.2, Oracle Customer Interaction History)
- [CVE-2020-2874](https://cve.now/CVE-2020-2874.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Customer Search). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2875](https://cve.now/CVE-2020-2875.md): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). (CVSS 4.7, Oracle MySQL Connectors)
- [CVE-2020-2876](https://cve.now/CVE-2020-2876.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2877](https://cve.now/CVE-2020-2877.md): Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). (CVSS 8.2, Oracle Partner Management)
- [CVE-2020-2878](https://cve.now/CVE-2020-2878.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Mail). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2879](https://cve.now/CVE-2020-2879.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). (CVSS 8.2, Oracle Scripting)
- [CVE-2020-2880](https://cve.now/CVE-2020-2880.md): Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: OTA Training Activities). (CVSS 8.2, Oracle Learning Management)
- [CVE-2020-2881](https://cve.now/CVE-2020-2881.md): Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). (CVSS 8.2, Oracle CRM Technical Foundation)
- [CVE-2020-2882](https://cve.now/CVE-2020-2882.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers). (CVSS 8.1, Oracle Human Resources)
- [CVE-2020-2883](https://cve.now/CVE-2020-2883.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, KEV, Oracle WebLogic Server)
- [CVE-2020-2884](https://cve.now/CVE-2020-2884.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-2885](https://cve.now/CVE-2020-2885.md): Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). (CVSS 8.2, Oracle Document Management and Collaboration)
- [CVE-2020-2844](https://cve.now/CVE-2020-2844.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2845](https://cve.now/CVE-2020-2845.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2846](https://cve.now/CVE-2020-2846.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2847](https://cve.now/CVE-2020-2847.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2848](https://cve.now/CVE-2020-2848.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2849](https://cve.now/CVE-2020-2849.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2850](https://cve.now/CVE-2020-2850.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2851](https://cve.now/CVE-2020-2851.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). (CVSS 7.8, Oracle Solaris Operating System)
- [CVE-2020-2852](https://cve.now/CVE-2020-2852.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Calendar). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2853](https://cve.now/CVE-2020-2853.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2854](https://cve.now/CVE-2020-2854.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2855](https://cve.now/CVE-2020-2855.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Admin). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2856](https://cve.now/CVE-2020-2856.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2857](https://cve.now/CVE-2020-2857.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.2, Oracle Advanced Outbound Telephony)
- [CVE-2020-2858](https://cve.now/CVE-2020-2858.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2859](https://cve.now/CVE-2020-2859.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision). (CVSS 7.5, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2860](https://cve.now/CVE-2020-2860.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2861](https://cve.now/CVE-2020-2861.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2862](https://cve.now/CVE-2020-2862.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 4.7, Oracle One-to-One Fulfillment)
- [CVE-2020-2863](https://cve.now/CVE-2020-2863.md): Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). (CVSS 8.5, Oracle Advanced Outbound Telephony)
- [CVE-2020-2864](https://cve.now/CVE-2020-2864.md): Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts). (CVSS 5.3, Oracle iSupplier Portal)
- [CVE-2020-2824](https://cve.now/CVE-2020-2824.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2825](https://cve.now/CVE-2020-2825.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2826](https://cve.now/CVE-2020-2826.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2827](https://cve.now/CVE-2020-2827.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2828](https://cve.now/CVE-2020-2828.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services). (CVSS 7.5, Oracle WebLogic Server)
- [CVE-2020-2829](https://cve.now/CVE-2020-2829.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Management Services). (CVSS 4.9, Oracle WebLogic Server)
- [CVE-2020-2830](https://cve.now/CVE-2020-2830.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). (CVSS 5.3, Oracle Java)
- [CVE-2020-2831](https://cve.now/CVE-2020-2831.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2832](https://cve.now/CVE-2020-2832.md): Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). (CVSS 8.2, Oracle One-to-One Fulfillment)
- [CVE-2020-2833](https://cve.now/CVE-2020-2833.md): Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). (CVSS 8.2, Oracle Quoting)
- [CVE-2020-2834](https://cve.now/CVE-2020-2834.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2835](https://cve.now/CVE-2020-2835.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2836](https://cve.now/CVE-2020-2836.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2837](https://cve.now/CVE-2020-2837.md): Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). (CVSS 8.2, Oracle Marketing)
- [CVE-2020-2838](https://cve.now/CVE-2020-2838.md): Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications). (CVSS 8.6, Oracle CRM Gateway for Mobile Devices)
- [CVE-2020-2839](https://cve.now/CVE-2020-2839.md): Vulnerability in the Oracle Service Intelligence product of Oracle E-Business Suite (component: Internal Operations- Search). (CVSS 8.2, Oracle Service Intelligence)
- [CVE-2020-2840](https://cve.now/CVE-2020-2840.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.2, Oracle E-Business Intelligence)
- [CVE-2020-2841](https://cve.now/CVE-2020-2841.md): Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). (CVSS 8.2, Oracle Knowledge Management)
- [CVE-2020-2842](https://cve.now/CVE-2020-2842.md): Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges). (CVSS 8.2, Oracle Depot Repair)
- [CVE-2020-2843](https://cve.now/CVE-2020-2843.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2803](https://cve.now/CVE-2020-2803.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 8.3, Oracle Java)
- [CVE-2020-2804](https://cve.now/CVE-2020-2804.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached). (CVSS 5.9, Oracle MySQL Server)
- [CVE-2020-2805](https://cve.now/CVE-2020-2805.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). (CVSS 8.3, Oracle Java)
- [CVE-2020-2806](https://cve.now/CVE-2020-2806.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). (CVSS 5.3, Oracle MySQL Server)
- [CVE-2020-2807](https://cve.now/CVE-2020-2807.md): Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Administration). (CVSS 8.2, Oracle Marketing Encyclopedia System)
- [CVE-2020-2808](https://cve.now/CVE-2020-2808.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.2, Oracle E-Business Intelligence)
- [CVE-2020-2809](https://cve.now/CVE-2020-2809.md): Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). (CVSS 8.2, Oracle E-Business Intelligence)
- [CVE-2020-2810](https://cve.now/CVE-2020-2810.md): Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). (CVSS 4.7, Oracle iStore)
- [CVE-2020-2811](https://cve.now/CVE-2020-2811.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 6.1, Oracle WebLogic Server)
- [CVE-2020-2812](https://cve.now/CVE-2020-2812.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2813](https://cve.now/CVE-2020-2813.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: KB Search). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2814](https://cve.now/CVE-2020-2814.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2815](https://cve.now/CVE-2020-2815.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). (CVSS 8.2, Oracle iSupport)
- [CVE-2020-2816](https://cve.now/CVE-2020-2816.md): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (CVSS 7.5, Oracle Java)
- [CVE-2020-2817](https://cve.now/CVE-2020-2817.md): Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). (CVSS 8.2, Oracle Scripting)
- [CVE-2020-2818](https://cve.now/CVE-2020-2818.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration). (CVSS 8.2, Oracle Universal Work Queue)
- [CVE-2020-2819](https://cve.now/CVE-2020-2819.md): Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration). (CVSS 8.2, Oracle Universal Work Queue)
- [CVE-2020-2820](https://cve.now/CVE-2020-2820.md): Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes). (CVSS 8.2, Oracle Common Applications Calendar)
- [CVE-2020-2821](https://cve.now/CVE-2020-2821.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Budget). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-2822](https://cve.now/CVE-2020-2822.md): Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claims). (CVSS 8.2, Oracle Trade Management)
- [CVE-2020-2823](https://cve.now/CVE-2020-2823.md): Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes). (CVSS 8.2, Oracle Common Applications Calendar)
- [CVE-2020-2780](https://cve.now/CVE-2020-2780.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2781](https://cve.now/CVE-2020-2781.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). (CVSS 5.3, Oracle Java)
- [CVE-2020-2782](https://cve.now/CVE-2020-2782.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query). (CVSS 7.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2783](https://cve.now/CVE-2020-2783.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 5.3, Oracle Outside In Technology)
- [CVE-2020-2784](https://cve.now/CVE-2020-2784.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2785](https://cve.now/CVE-2020-2785.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2786](https://cve.now/CVE-2020-2786.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2787](https://cve.now/CVE-2020-2787.md): Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). (CVSS 7.3, Oracle Outside In Technology)
- [CVE-2020-2789](https://cve.now/CVE-2020-2789.md): Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Interface). (CVSS 4.7, Oracle iSupport)
- [CVE-2020-2790](https://cve.now/CVE-2020-2790.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). (CVSS 6.5, Oracle MySQL Server)
- [CVE-2020-2791](https://cve.now/CVE-2020-2791.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 9.8, Oracle Knowledge)
- [CVE-2020-2793](https://cve.now/CVE-2020-2793.md): Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications… (CVSS 7.1, Oracle Financial Services Analytical Applications Infrastru…)
- [CVE-2020-2794](https://cve.now/CVE-2020-2794.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Email Address list and Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2795](https://cve.now/CVE-2020-2795.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 6.3, Oracle Knowledge)
- [CVE-2020-2796](https://cve.now/CVE-2020-2796.md): Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). (CVSS 8.2, Oracle Email Center)
- [CVE-2020-2797](https://cve.now/CVE-2020-2797.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2798](https://cve.now/CVE-2020-2798.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services). (CVSS 7.2, Oracle WebLogic Server)
- [CVE-2020-2799](https://cve.now/CVE-2020-2799.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). (CVSS 6.3, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2800](https://cve.now/CVE-2020-2800.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server). (CVSS 4.8, Oracle Java)
- [CVE-2020-2801](https://cve.now/CVE-2020-2801.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). (CVSS 9.8, Oracle WebLogic Server)
- [CVE-2020-2802](https://cve.now/CVE-2020-2802.md): Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler). (CVSS 7.7, Oracle GraalVM Enterprise Edition)
- [CVE-2020-2759](https://cve.now/CVE-2020-2759.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2760](https://cve.now/CVE-2020-2760.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 5.5, Oracle MySQL Server)
- [CVE-2020-2761](https://cve.now/CVE-2020-2761.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2762](https://cve.now/CVE-2020-2762.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2763](https://cve.now/CVE-2020-2763.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2764](https://cve.now/CVE-2020-2764.md): Vulnerability in the Java SE product of Oracle Java SE (component: Advanced Management Console). (CVSS 3.7, Oracle Java)
- [CVE-2020-2765](https://cve.now/CVE-2020-2765.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2766](https://cve.now/CVE-2020-2766.md): Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). (CVSS 5.3, Oracle WebLogic Server)
- [CVE-2020-2767](https://cve.now/CVE-2020-2767.md): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (CVSS 4.8, Oracle Java)
- [CVE-2020-2768](https://cve.now/CVE-2020-2768.md): Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). (CVSS 6.3, Oracle MySQL Cluster)
- [CVE-2020-2769](https://cve.now/CVE-2020-2769.md): Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer). (CVSS 2.4, Oracle Hyperion Financial Reporting)
- [CVE-2020-2770](https://cve.now/CVE-2020-2770.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2771](https://cve.now/CVE-2020-2771.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: Whodo). (CVSS 2.5, Oracle Solaris Operating System)
- [CVE-2020-2772](https://cve.now/CVE-2020-2772.md): Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Absence Recording, Maintenance). (CVSS 4.1, Oracle Human Resources)
- [CVE-2020-2773](https://cve.now/CVE-2020-2773.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). (CVSS 3.7, Oracle Java)
- [CVE-2020-2774](https://cve.now/CVE-2020-2774.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2775](https://cve.now/CVE-2020-2775.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 5.3, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2776](https://cve.now/CVE-2020-2776.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). (CVSS 8.6, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2777](https://cve.now/CVE-2020-2777.md): Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security). (CVSS 4.2, Oracle Hyperion Financial Management)
- [CVE-2020-2778](https://cve.now/CVE-2020-2778.md): Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). (CVSS 3.7, Oracle Java)
- [CVE-2020-2779](https://cve.now/CVE-2020-2779.md): Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). (CVSS 4.9, Oracle MySQL Server)
- [CVE-2020-2738](https://cve.now/CVE-2020-2738.md): Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE). (CVSS 4.3, Oracle Siebel UI Framework)
- [CVE-2020-2739](https://cve.now/CVE-2020-2739.md): Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI). (CVSS 7.4, Oracle WebCenter Sites)
- [CVE-2020-2740](https://cve.now/CVE-2020-2740.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). (CVSS 4.6, Oracle Access Manager)
- [CVE-2020-2741](https://cve.now/CVE-2020-2741.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-2742](https://cve.now/CVE-2020-2742.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2020-2743](https://cve.now/CVE-2020-2743.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 6.0, Oracle VM VirtualBox)
- [CVE-2020-2744](https://cve.now/CVE-2020-2744.md): Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Security). (CVSS 5.4, Oracle Transportation Management)
- [CVE-2020-2745](https://cve.now/CVE-2020-2745.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation). (CVSS 4.3, Oracle Access Manager)
- [CVE-2020-2746](https://cve.now/CVE-2020-2746.md): Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. (CVSS 8.1, Oracle Hospitality Reporting and Analytics)
- [CVE-2020-2747](https://cve.now/CVE-2020-2747.md): Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: SSO Engine). (CVSS 5.4, Oracle Access Manager)
- [CVE-2020-2748](https://cve.now/CVE-2020-2748.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 3.2, Oracle VM VirtualBox)
- [CVE-2020-2749](https://cve.now/CVE-2020-2749.md): Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF command svcbundle). (CVSS 2.5, Oracle Solaris Operating System)
- [CVE-2020-2750](https://cve.now/CVE-2020-2750.md): Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager). (CVSS 7.5, Oracle General Ledger)
- [CVE-2020-2751](https://cve.now/CVE-2020-2751.md): Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). (CVSS 6.1, Oracle PeopleSoft Enterprise PT PeopleTools)
- [CVE-2020-2752](https://cve.now/CVE-2020-2752.md): Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). (CVSS 5.3, Oracle MySQL Server)
- [CVE-2020-2753](https://cve.now/CVE-2020-2753.md): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). (CVSS 5.3, Oracle Workflow)
- [CVE-2020-2754](https://cve.now/CVE-2020-2754.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). (CVSS 3.7, Oracle Java)
- [CVE-2020-2755](https://cve.now/CVE-2020-2755.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). (CVSS 3.7, Oracle Java)
- [CVE-2020-2756](https://cve.now/CVE-2020-2756.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java)
- [CVE-2020-2757](https://cve.now/CVE-2020-2757.md): Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). (CVSS 3.7, Oracle Java)
- [CVE-2020-2758](https://cve.now/CVE-2020-2758.md): Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). (CVSS 8.2, Oracle VM VirtualBox)
- [CVE-2019-2880](https://cve.now/CVE-2019-2880.md): Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications (component: Security). (CVSS 8.8, Oracle Retail Store Inventory Management)
- [CVE-2020-2514](https://cve.now/CVE-2020-2514.md): Vulnerability in the Oracle Application Express component of Oracle Database Server. (CVSS 4.6, Oracle Application Express)
- [CVE-2020-2522](https://cve.now/CVE-2020-2522.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 4.3, Oracle Knowledge)
- [CVE-2020-2524](https://cve.now/CVE-2020-2524.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search). (CVSS 5.9, Oracle Knowledge)
- [CVE-2020-2553](https://cve.now/CVE-2020-2553.md): Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). (CVSS 4.8, Oracle Knowledge)
- [CVE-2020-2594](https://cve.now/CVE-2020-2594.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component… (CVSS 6.5, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2020-2706](https://cve.now/CVE-2020-2706.md): Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component… (CVSS 5.4, Oracle Primavera P6 Enterprise Project Portfolio Management)
- [CVE-2020-2733](https://cve.now/CVE-2020-2733.md): Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics). (CVSS 9.8, Oracle JD Edwards EnterpriseOne Tools)
- [CVE-2020-2734](https://cve.now/CVE-2020-2734.md): Vulnerability in the RDBMS/Optimizer component of Oracle Database Server. (CVSS 2.4, Oracle Database)
- [CVE-2020-2735](https://cve.now/CVE-2020-2735.md): Vulnerability in the Java VM component of Oracle Database Server. (CVSS 8.0, Oracle Database)
- [CVE-2020-2737](https://cve.now/CVE-2020-2737.md): Vulnerability in the Core RDBMS component of Oracle Database Server. (CVSS 6.4, Oracle Database)
- [CVE-2019-19500](https://cve.now/CVE-2019-19500.md): Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment… (no CVSS)
- [CVE-2020-7255](https://cve.now/CVE-2020-7255.md): Privilege Escalation vulnerability in ENS (CVSS 3.9, McAfee Endpoint Security)
- [CVE-2020-7250](https://cve.now/CVE-2020-7250.md): ENS symbolic link log file manipulation vulnerability (CVSS 8.2, McAfee Endpoint Security)
- [CVE-2020-7257](https://cve.now/CVE-2020-7257.md): Privilege Escalation vulnerability through Symbolic links in ENS (CVSS 8.4, McAfee Endpoint Security)
- [CVE-2020-7259](https://cve.now/CVE-2020-7259.md): Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rules (CVSS 6.6, McAfee Endpoint Security)
- [CVE-2020-7261](https://cve.now/CVE-2020-7261.md): Buffer overwrite in ENS allowed to bypass AMSI protection (CVSS 6.1, McAfee Endpoint Security)
- [CVE-2020-7273](https://cve.now/CVE-2020-7273.md): Autorun registry bypass (CVSS 6.7, McAfee Endpoint Security)
- [CVE-2020-7275](https://cve.now/CVE-2020-7275.md): Unquoted service paths for some McAfee ENS files (CVSS 4.8, McAfee Endpoint Security)
- [CVE-2020-7274](https://cve.now/CVE-2020-7274.md): ENS elevated permissions vulnerability (CVSS 6.6, McAfee Endpoint Security)
- [CVE-2020-7277](https://cve.now/CVE-2020-7277.md): McAfee processes not protected (CVSS 6.8, McAfee Endpoint Security)
- [CVE-2020-7276](https://cve.now/CVE-2020-7276.md): Unrestricted Policy Management using MfeUpgradeTool.exe (CVSS 6.4, McAfee Endpoint Security)
- [CVE-2020-7278](https://cve.now/CVE-2020-7278.md): McAfee firewall rules not enforced correctly (CVSS 7.4, McAfee Endpoint Security)
- [CVE-2020-3932](https://cve.now/CVE-2020-3932.md): Draytek VigorAP910C - Information Leakage (CVSS 7.5, DRAYTEK VigorAP910C)
- [CVE-2020-10514](https://cve.now/CVE-2020-10514.md): iCatch DVR - Command Injection (CVSS 8.8, iCatch DVR firmware)
- [CVE-2020-10513](https://cve.now/CVE-2020-10513.md): iCatch DVR - Broken Access Control (CVSS 8.8, iCatch DVR firmware)
- [CVE-2020-10512](https://cve.now/CVE-2020-10512.md): HGiga C&Cmail - SQL Injection (CVSS 8.8, HGiga C&Cmail)
- [CVE-2020-10511](https://cve.now/CVE-2020-10511.md): HGiga C&Cmail - Broken Access Control (CVSS 9.8, HGiga C&Cmail)
- [CVE-2020-10507](https://cve.now/CVE-2020-10507.md): ALLE INFORMATION CO., LTD. School Manage System - Security Misconfiguration (CVSS 9.8, ALLE INFORMATION CO. School Manage System)
- [CVE-2020-10506](https://cve.now/CVE-2020-10506.md): ALLE INFORMATION CO., LTD. School Manage System - Path Traversal (CVSS 7.5, ALLE INFORMATION CO. School Manage System)
- [CVE-2020-10505](https://cve.now/CVE-2020-10505.md): ALLE INFORMATION CO., LTD. School Manage System - SQL Injection (CVSS 9.8, ALLE INFORMATION CO. School Manage System)
- [CVE-2020-11767](https://cve.now/CVE-2020-11767.md): Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. (no CVSS)
- [CVE-2020-10699](https://cve.now/CVE-2020-10699.md): A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable. (CVSS 7.8, Datera targetcli)
- [CVE-2020-10932](https://cve.now/CVE-2020-10932.md): An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2020-04-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.