CVEs published January 15, 2020
278 CVEs were published on January 15, 2020: 5 critical, 46 high. 2 are now in CISA KEV.
- Published
- 278
- Critical
- 5
- High
- 46
- Medium
- 153
- Low
- 14
- Unrated
- 60
- Now in CISA KEV
- 2
- Fix available
- 49
Most affected products
- Oracle Enterprise Manager Base Platform
- 36
- Oracle VM VirtualBox
- 18
- Oracle MySQL Server
- 15
- Juniper Networks Junos OS
- 10
- Oracle Database
- 10
- Oracle Java
- 9
- Oracle Solaris Operating System
- 9
- Oracle WebLogic Server
- 9
- Oracle PeopleSoft Enterprise PT PeopleTools
- 7
- Oracle iSupport
- 6
Critical 5
- CVE-2020-2586Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers).Oracle Human Resources
- CVE-2020-2587Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers).Oracle Human Resources
- CVE-2020-2546Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Application Container - JavaEE).Oracle WebLogic Server
- CVE-2020-2551Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).Oracle WebLogic Server
- CVE-2020-2555Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation).Oracle WebCenter Portal · Oracle Utilities Framework
High 46
- CVE-2019-15961Clam AntiVirus (ClamAV) Software Email Parsing VulnerabilityClamAV
- CVE-2020-2726Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2728Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM - LDAP user and role Synch).Oracle Identity Manager
- CVE-2020-2713Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core).Oracle Banking Payments
- CVE-2020-2718Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).Oracle Banking Corporate Lending
- CVE-2020-2723Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2020-2688Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-2696Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment).Oracle Solaris Operating System
- CVE-2020-2698Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2699Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2020-2701Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2702Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2665Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others).Oracle iSupport
- CVE-2020-2669Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2020-2670Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2020-2671Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2020-2672Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2020-2673Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder).Oracle Application Testing Suite
- CVE-2020-2674Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2675Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login).Oracle Hospitality OPERA 5 Property Services
- CVE-2020-2682Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2651Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-2652Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-2653Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-2658Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others).Oracle iSupport
- CVE-2020-2661Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others).Oracle iSupport
- CVE-2020-2662Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others).Oracle iSupport
- CVE-2020-2604Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).Oracle Java
- CVE-2020-2605Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem).Oracle Solaris Operating System
- CVE-2020-2591Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Application Service).Oracle Web Applications Desktop Integrator
- CVE-2020-2565Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure).Oracle Solaris Operating System
- CVE-2020-2582Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2020-2543Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2549Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).Oracle WebLogic Server
- CVE-2020-2556Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Core).Oracle Primavera P6 Professional Project Management
- CVE-2020-2510Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2020-2511Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2020-2518Vulnerability in the Java VM component of Oracle Database Server.Oracle Database
- CVE-2020-2537Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions).Oracle Business Intelligence Enterprise Edition
- CVE-2020-2538Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI).Oracle WebCenter Sites
- CVE-2020-1609Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv6 packets and arbitrarily execute commands on the target device.Juniper Networks Junos OS
- CVE-2020-1608Junos OS: MX Series: In BBE configurations, receipt of a specific MPLS or IPv6 packet causes a Denial of ServiceJuniper Networks Junos OS
- CVE-2020-1607Junos OS: Cross-Site Scripting (XSS) in J-WebJuniper Networks Junos OS
- CVE-2020-1605Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets and arbitrarily execute commands on the target device.Juniper Networks Junos OS
- CVE-2020-1603Junos OS: Improper handling of specific IPv6 packets sent by clients eventually kernel crash (vmcore) the device.Juniper Networks Junos OS
- CVE-2020-1602Junos OS and Junos OS Evolved: A vulnerability in JDHCPD allows an attacker to send crafted IPv4 packets may take over the code execution of the JDHCPD process.Juniper Networks Junos OS
Medium, low and unrated 227
- CVE-2019-19854An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
- CVE-2019-19855An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
- CVE-2019-19856An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
- CVE-2019-19857An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
- CVE-2019-19858An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
- CVE-2019-19859An issue was discovered in Serpico (aka SimplE RePort wrIting and CollaboratiOn tool) 1.3.0.
- CVE-2019-20097Bitbucket Server and Bitbucket Data Center versions starting from 1.0.0 before 5.16.11, from version 6.0.0 before 6.0.11, from version 6.1.0Atlassian Bitbucket Server · Atlassian Bitbucket Data Center
- CVE-2019-15012Bitbucket Server and Bitbucket Data Center from version 4.13.Atlassian Bitbucket Server · Atlassian Bitbucket Data Center
- CVE-2019-15010Bitbucket Server and Bitbucket Data Center versions starting from version 3.0.0 before version 5.16.11, from version 6.0.0 before 6.0.11, frAtlassian Bitbucket Server · Atlassian Bitbucket Data Center
- CVE-2009-5068There is a file disclosure vulnerability in SMF (Simple Machines Forum) affecting versions through v2.0.3.SMF
- CVE-2009-5025A backdoor (aka BMSA-2009-07) was found in PyForum v1.0.3 where an attacker who knows a valid user email could force a password reset on behPyForum
- CVE-2009-3724python-markdown2 before 1.0.1.14 has multiple cross-site scripting (XSS) issues.python-markdown2 · markdown2
- CVE-2020-3941The repair operation of VMware Tools for Windows 10.x.y has a race condition which may allow for privilege escalation in the Virtual MachineVMware Tools for Windows
- CVE-2020-1929The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an option to disable SSL trust verification.Apache Beam · org.apache.beam:beam-sdks-java-io-mongodb
- CVE-2019-18244In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts arOSIsoft PI System multiple products and versions
- CVE-2019-18273OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1.OSIsoft PI Vision
- CVE-2019-18271OSIsoft PI Vision, All versions of PI Vision prior to 2019.OSIsoft PI Vision
- CVE-2019-18275OSIsoft PI Vision, All versions of PI Vision prior to 2019.OSIsoft PI Vision
- CVE-2015-6591Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local u
- CVE-2015-1811XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XCloudBees Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2015-1809XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers to read arbitrary XCloudBees Jenkins · org.jenkins-ci.main:jenkins-core
- CVE-2014-6448Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute
- CVE-2009-1120EMC RepliStor Server Service before ESA-09-003 has a DoASOCommand Remote Code Execution Vulnerability.EMC RepliStor
- CVE-2015-5071AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "
- CVE-2015-5072The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users
- CVE-2019-9510Microsoft Windows RDP can bypass the Windows lock screenMicrosoft Windows 10 or newer system using RDP · Microsoft…
- CVE-2019-9493MyCar Controls uses hard-coded credentialsAutoMobility Distribution MyCar Controls
- CVE-2017-3211Centire Yopify leaks customer informationCentire Yopify
- CVE-2015-6497The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.2.1 and Enterprise Emagento/core
- CVE-2007-4774The Linux kernel before 2.4.36-rc1 has a race condition.
- CVE-2020-2725Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2727Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2729Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Advanced Console).Oracle Identity Manager
- CVE-2020-2730Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: Oracle Financial Services Revenue Management and Billing
- CVE-2020-2731Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2020-2704Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2705Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2707Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: WebAcceOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2020-2709Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages).Oracle iLearning
- CVE-2020-2710Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core).Oracle Banking Payments
- CVE-2020-2711Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core).Oracle Banking Payments
- CVE-2020-2712Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core).Oracle Banking Payments
- CVE-2020-2714Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core).Oracle Banking Payments
- CVE-2020-2715Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).Oracle Banking Corporate Lending
- CVE-2020-2716Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).Oracle Banking Corporate Lending
- CVE-2020-2717Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).Oracle Banking Corporate Lending
- CVE-2020-2719Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).Oracle Banking Corporate Lending
- CVE-2020-2720Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2020-2721Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2020-2722Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2020-2724Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Investor Servicing
- CVE-2020-2684Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2020-2685Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2020-2686Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2687Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2689Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2690Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2691Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2692Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2693Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2694Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2020-2695Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Approval Framework).Oracle PeopleSoft Enterprise CC Common Application Objects
- CVE-2020-2697Vulnerability in the Oracle Hospitality Suites Management component of Oracle Food and Beverage Applications.Oracle Hospitality Suites Management
- CVE-2020-2700Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2020-2703Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2664Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem).Oracle Solaris Operating System
- CVE-2020-2666Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).Oracle Applications Framework
- CVE-2020-2667Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others).Oracle iSupport
- CVE-2020-2668Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Others).Oracle iSupport
- CVE-2020-2676Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Printing).Oracle Hospitality OPERA 5 Property Services
- CVE-2020-2677Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Login).Oracle Hospitality OPERA 5 Property Services
- CVE-2020-2678Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2679Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2680Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem).Oracle Solaris Operating System
- CVE-2020-2681Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2683Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).Oracle FLEXCUBE Universal Banking
- CVE-2020-2644Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service).Oracle Enterprise Manager Base Platform
- CVE-2020-2645Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2646Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Command Line Interface).Oracle Enterprise Manager Base Platform
- CVE-2020-2647Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2020-2648Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: InternaOracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-2649Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: InternaOracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-2650Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: PromotiOracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-2654Vulnerability in the Java SE product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2020-2655Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).Oracle Java
- CVE-2020-2656Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System).Oracle Solaris Operating System
- CVE-2020-2657Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-2659Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).Oracle Java
- CVE-2020-2660Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2663Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2624Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2625Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System).Oracle Enterprise Manager Base Platform
- CVE-2020-2626Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Cloud Control Manager - OMS).Oracle Enterprise Manager Base Platform
- CVE-2020-2627Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).Oracle MySQL Server
- CVE-2020-2628Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2629Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2630Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Extensibility Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2631Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt).Oracle Enterprise Manager Base Platform
- CVE-2020-2632Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring).Oracle Enterprise Manager Base Platform
- CVE-2020-2633Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2634Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Configuration Standard Framewk).Oracle Enterprise Manager Base Platform
- CVE-2020-2635Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: System Monitoring).Oracle Enterprise Manager Base Platform
- CVE-2020-2636Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Application Service Level Mgmt).Oracle Enterprise Manager Base Platform
- CVE-2020-2637Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Change Manager - web based).Enterprise Manager for Oracle Database
- CVE-2020-2638Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2639Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Host Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2640Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Target Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2641Vulnerability in the Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Discovery Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2642Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Connector Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2643Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Job System).Oracle Enterprise Manager Base Platform
- CVE-2020-2603Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless).Oracle Field Service
- CVE-2020-2606Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2607Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2608Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Repository).Oracle Enterprise Manager Base Platform
- CVE-2020-2609Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2610Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2611Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2612Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2613Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Global EM Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2614Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: APM Mesh).Oracle APM - Application Performance Management
- CVE-2020-2615Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Oracle Management Service).Oracle Enterprise Manager Base Platform
- CVE-2020-2616Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Manager Repository).Oracle Enterprise Manager Base Platform
- CVE-2020-2617Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2618Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2619Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2620Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2621Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Enterprise Config Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2622Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).Oracle Enterprise Manager Base Platform
- CVE-2020-2623Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metrics Framework).Oracle Enterprise Manager Base Platform
- CVE-2020-2583Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).Oracle Java
- CVE-2020-2584Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options).Oracle MySQL Server
- CVE-2020-2585Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX).Oracle Java
- CVE-2020-2588Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2020-2589Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-2590Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).Oracle Java
- CVE-2020-2592Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security).Oracle AutoVue 3D Professional Advanced
- CVE-2020-2593Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking).Oracle Java
- CVE-2020-2595Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler).Oracle GraalVM Enterprise Edition
- CVE-2020-2596Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Message Hooks).Oracle CRM Technical Foundation
- CVE-2020-2597Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Call Phone Number Page).Oracle One-to-One Fulfillment
- CVE-2020-2598Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Activity Guide).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2599Vulnerability in the Oracle Hospitality Cruise Materials Management product of Oracle Hospitality Applications (component: MMS All).Oracle Hospitality Cruise Materials Management
- CVE-2020-2600Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2601Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).Oracle Java
- CVE-2020-2602Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2561Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Company Dir / Org Chart Viewer).Oracle PeopleSoft Enterprise HCM Human Resources
- CVE-2020-2563Vulnerability in the Hyperion Financial Close Management product of Oracle Hyperion (component: Close Manager).Oracle Hyperion Financial Close Management
- CVE-2020-2564Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI).Oracle Siebel UI Framework
- CVE-2020-2566Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).Oracle Applications Framework
- CVE-2020-2567Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: SecuritOracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-2568Vulnerability in the Oracle Applications DBA component of Oracle Database Server.Oracle Database
- CVE-2020-2569Vulnerability in the Oracle Applications DBA component of Oracle Database Server.Oracle PL/SQL
- CVE-2020-2570Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2020-2571Vulnerability in the Oracle VM Server for SPARC product of Oracle Systems (component: Templates).Oracle LDOMS
- CVE-2020-2572Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin).Oracle MySQL Server
- CVE-2020-2573Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2020-2574Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2020-2576Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2577Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-2578Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2020-2579Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2580Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL).Oracle MySQL Server
- CVE-2020-2581Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter).Oracle GraalVM Enterprise Edition
- CVE-2020-2541Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2542Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2544Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-2545Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module).Oracle Security Service
- CVE-2020-2547Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-2548Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).Oracle WebLogic Server
- CVE-2020-2550Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).Oracle WebLogic Server
- CVE-2020-2552Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).Oracle WebLogic Server
- CVE-2020-2557Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Security).Oracle Demantra Demand Management
- CVE-2020-2558Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel).Oracle Solaris Operating System
- CVE-2020-2559Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: UIF Open UI).Oracle Siebel UI Framework
- CVE-2020-2560Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: SWSE Server).Oracle Siebel UI Framework
- CVE-2020-2512Vulnerability in the Database Gateway for ODBC component of Oracle Database Server.Oracle Database
- CVE-2020-2515Vulnerability in the Database Gateway for ODBC component of Oracle Database Server.Oracle Database
- CVE-2020-2516Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2020-2517Vulnerability in the Database Gateway for ODBC component of Oracle Database Server.Oracle Database
- CVE-2020-2519Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-2527Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2020-2530Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).Oracle HTTP Server
- CVE-2020-2531Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security).Oracle Business Intelligence Enterprise Edition
- CVE-2020-2533Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).Oracle Reports Developer
- CVE-2020-2534Vulnerability in the Oracle Reports Developer product of Oracle Fusion Middleware (component: Security and Authentication).Oracle Reports Developer
- CVE-2020-2535Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Server).Oracle Business Intelligence Enterprise Edition
- CVE-2020-2536Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2539Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI).Oracle WebCenter Sites
- CVE-2020-2540Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2015-5230The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote attackers to cause a denPowerDNS Authoritative Server
- CVE-2007-4773Systrace before 1.6.0 has insufficient escape policy enforcement.
- CVE-2015-5952Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item pa
- CVE-2019-16467Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability.Adobe Experience Manager
- CVE-2019-16468Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an user interface injection vulnerability.Adobe Experience Manager
- CVE-2019-16469Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have an expression language injection vulnerability.Adobe Experience Manager
- CVE-2019-16466Adobe Experience Manager versions 6.5, 6.4, 6.3, 6.2, 6.1, and 6.0 have a reflected cross-site scripting vulnerability.Adobe Experience Manager
- CVE-2005-4891Simple Machine Forum (SMF) versions 1.0.4 and earlier have an SQL injection vulnerability that allows remote attackers to inject arbitrary SSimple Machine Forum
- CVE-2015-5466Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.1090 allows local user
- CVE-2015-5484Cross-site scripting (XSS) vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitra
- CVE-2020-2096Jenkins Gitlab Hook Plugin 1.4.2 and earlier does not escape project names in the build_now endpoint, resulting in a reflected XSS vulnerabiJenkins project Jenkins Gitlab Hook Plugin · org.jenkins-ci…
- CVE-2020-2097Jenkins Sounds Plugin 0.5 and earlier does not perform permission checks in URLs performing form validation, allowing attackers with OverallJenkins project Jenkins Sounds Plugin · org.jenkins-ci.plug…
- CVE-2020-2098A cross-site request forgery vulnerability in Jenkins Sounds Plugin 0.5 and earlier allows attacker to execute arbitrary OS commands as the Jenkins project Jenkins Sounds Plugin · org.jenkins-ci.plug…
- CVE-2020-2094A missing permission check in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers with Overall/Read permission to seJenkins project Jenkins Health Advisor by CloudBees Plugin…
- CVE-2020-2095Jenkins Redgate SQL Change Automation Plugin 2.0.4 and earlier stored an API key unencrypted in job config.xml files on the Jenkins master wJenkins project Jenkins Redgate SQL Change Automation Plugi…
- CVE-2020-2092Jenkins Robot Framework Plugin 2.0.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks, allowing usJenkins project Jenkins Robot Framework Plugin · org.jenkin…
- CVE-2020-2093A cross-site request forgery vulnerability in Jenkins Health Advisor by CloudBees Plugin 3.0 and earlier allows attackers to send an email wJenkins project Jenkins Health Advisor by CloudBees Plugin…
- CVE-2020-2090A cross-site request forgery vulnerability in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers to connect to an attacker-specifieJenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…
- CVE-2019-18412JetBrains IDETalk plugin before version 193.4099.10 allows XXE
- CVE-2015-7874Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary code via a long nick
- CVE-2015-7556DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program.National Institute of Advanced Industrial Science and Techn…
- CVE-2015-8549XML external entity (XXE) vulnerability in PyAMF before 0.8.0 allows remote attackers to cause a denial of service or read arbitrary files vpyamf
- CVE-2011-4907Joomla! 1.5x through 1.5.12: Missing JEXEC CheckJoomla!
- CVE-2011-4336Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.Tiki Wiki CMS Groupware
- CVE-2012-0070spamdyke prior to 4.2.1: STARTTLS reveals plaintextspamdyke
- CVE-2012-1326Cisco IronPort Web Security Appliance up to and including 7.5 does not validate the basic constraints of the certificate authority which couCisco IronPort Web Security Appliance
- CVE-2012-1316Cisco IronPort Web Security Appliance does not check for certificate revocation which could lead to MITM attacksCisco IronPort Web Security Appliance
- CVE-2012-1563Joomla! before 2.5.3 allows Admin Account Creation.Joomla!
- CVE-2012-1562Joomla! core before 2.5.3 allows unauthorized password change.Joomla! core
- CVE-2012-0334Cisco IronPort Web Security Appliance AsyncOS software prior to 7.5 has a SSL Certificate Caching vulnerability which could allow man-in-theCisco IronPort Web Security Appliance AsyncOS
- CVE-2012-0945whoopsie-daisy before 0.1.26: Root user can remove arbitrary fileswhoopsie-daisy
- CVE-2020-1611Junos Space: Malicious HTTP packets sent to Junos Space allow an attacker to view all files on the device.Juniper Networks Junos Space
- CVE-2020-1606Junos OS: Path traversal vulnerability in J-WebJuniper Networks Junos OS
- CVE-2020-1604Junos OS: EX4300/EX4600/QFX3500/QFX5100 Series: Stateless IP firewall filter may fail to evaluate certain packetsJuniper Networks Junos OS
- CVE-2020-1601Junos OS: Upon receipt of certain types of malformed PCEP packets the pccd process may crash.Juniper Networks Junos OS
- CVE-2020-1600Junos OS: A specific SNMP command can trigger a high CPU usage Denial of Service in the RPD daemon.Juniper Networks Junos OS
- CVE-2020-7058data_input.php in Cacti 1.2.8 allows remote code execution via a crafted Input String to Data Collection -> Data Input Methods -> Unix -> Pi
- CVE-2020-2091A missing permission check in Jenkins Amazon EC2 Plugin 1.47 and earlier allows attackers with Overall/Read permission to connect to an attaJenkins project Jenkins Amazon EC2 Plugin · org.jenkins-ci.…