CVEs published April 15, 2020
512 CVEs were published on April 15, 2020: 25 critical, 149 high. 6 are now in CISA KEV.
- Published
- 512
- Critical
- 25
- High
- 149
- Medium
- 169
- Low
- 18
- Unrated
- 151
- Now in CISA KEV
- 6
- Fix available
- 37
Most affected products
- Microsoft Windows
- 67
- Oracle MySQL Server
- 34
- Oracle VM VirtualBox
- 19
- Oracle Java
- 14
- Microsoft SharePoint Enterprise Server · Microsoft Share… +1
- 12
- Oracle WebLogic Server
- 12
- McAfee Endpoint Security
- 11
- Oracle Marketing
- 10
- CA API Developer Portal
- 9
- Cisco UCS Director
- 9
Critical 25
- CVE-2020-3252Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3251Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3250Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3249Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3248Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3247Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3243Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3240Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3239Multiple Vulnerabilities in Cisco UCS Director and Cisco UCS Director Express for Big DataCisco UCS Director
- CVE-2020-3161Cisco IP Phones Web Server Remote Code Execution and Denial of Service VulnerabilityCisco IP phone
- CVE-2019-20642NETGEAR RAX40 devices before 1.0.3.64 are affected by authentication bypass.
- CVE-2020-11790NETGEAR R7800 devices before 1.0.2.68 are affected by remote code execution by unauthenticated attackers.
- CVE-2020-2953Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: PromotiOracle Retail Customer Management and Segmentation Foundati…
- CVE-2020-2961Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Discovery Framework (Oracle OHS)).Oracle Enterprise Manager Base Platform
- CVE-2020-2931Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Web Applications - InfoCenter).Oracle Knowledge
- CVE-2020-2950Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General).Oracle Business Intelligence Enterprise Edition
- CVE-2020-2915Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation).Oracle Coherence
- CVE-2020-2883Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-2884Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-2791Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console).Oracle Knowledge
- CVE-2020-2801Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).Oracle WebLogic Server
- CVE-2020-2733Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics).Oracle JD Edwards EnterpriseOne Tools
- CVE-2020-10511HGiga C&Cmail - Broken Access ControlHGiga C&Cmail
- CVE-2020-10507ALLE INFORMATION CO., LTD. School Manage System - Security MisconfigurationALLE INFORMATION CO. School Manage System
- CVE-2020-10505ALLE INFORMATION CO., LTD. School Manage System - SQL InjectionALLE INFORMATION CO. School Manage System
High 149
- CVE-2020-1632Junos OS and Junos OS Evolved: Invalid BGP UPDATE sent to peer device may cause BGP session to terminate.Juniper Networks Junos OS
- CVE-2020-3273Cisco Wireless LAN Controller 802.11 Generic Advertisement Service Denial of Service VulnerabilityCisco Wireless LAN Controller
- CVE-2020-3262Cisco Wireless LAN Controller CAPWAP Denial of Service VulnerabilityCisco Aironet Access Point Software
- CVE-2020-3261Cisco Mobility Express Software Cross-Site Request Forgery VulnerabilityCisco Mobility Express
- CVE-2020-3260Cisco Aironet Series Access Points Client Packet Processing Denial of Service VulnerabilityCisco Aironet Access Point Software
- CVE-2020-3194Cisco Webex Network Recording Player and Cisco Webex Player Arbitrary Code Execution VulnerabilityCisco Webex Meetings
- CVE-2020-3177Cisco Unified Communications Manager Path Traversal VulnerabilityCisco Unified Communications Manager
- CVE-2020-3162Cisco IoT Field Network Director Denial of Service VulnerabilityCisco IoT Field Network Director
- CVE-2019-20681Certain NETGEAR devices are affected by authentication bypass.
- CVE-2019-20680Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2019-20679NETGEAR MR1100 devices before 12.06.08.00 are affected by lack of access control at the function level.
- CVE-2019-20657Certain NETGEAR devices are affected by a buffer overflow by an authenticated user.
- CVE-2019-20655Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2019-20653Certain NETGEAR devices are affected by denial of service.
- CVE-2019-20652NETGEAR WAC505 devices before 8.2.1.16 are affected by disclosure of sensitive information.
- CVE-2019-20651Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2020-5350Dell EMC Integrated Data Protection Appliance versions 2.0, 2.1, 2.2, 2.3, 2.4 contain a command injection vulnerability in the ACM componenDell Integrated Data Protection Appliance
- CVE-2019-20643NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of sensitive information.
- CVE-2019-20641NETGEAR RAX40 devices before 1.0.3.64 are affected by lack of access control at the function level.
- CVE-2019-20640Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker.
- CVE-2019-20638NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of administrative credentials.
- CVE-2020-11792NETGEAR R8900, R9000, RAX120, and XR700 devices before 2020-01-20 are affected by Transport Layer Security (TLS) certificate private key dis
- CVE-2020-11789Certain NETGEAR devices are affected by command injection by an unauthenticated attacker.
- CVE-2020-4270IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a local user to gain escalated privileges due to weak file permissions.IBM Qradar
- CVE-2020-4269IBM QRadar 7.3.0 to 7.3.3 Patch 2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbounIBM Qradar
- CVE-2020-1027An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation oMicrosoft Windows
- CVE-2020-1020A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a speciallyMicrosoft Windows
- CVE-2020-0968A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'ScripMicrosoft Internet Explorer
- CVE-2020-0938A remote code execution vulnerability exists in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a speciallyMicrosoft Windows
- CVE-2020-11770Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2020-2956Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers).Oracle Human Resources
- CVE-2020-2958Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2959Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2963Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services).Oracle WebLogic Server
- CVE-2020-2964Vulnerability in the Oracle Financial Services Data Foundation product of Oracle Financial Services Applications (component: User Interface)Oracle Financial Services Data Foundation
- CVE-2020-2935Vulnerability in the Oracle Financial Services Hedge Management and IFRS Valuations product of Oracle Financial Services Applications (compoOracle Financial Services Hedge Management and IFRS Valuati…
- CVE-2020-2936Vulnerability in the Oracle Financial Services Balance Sheet Planning product of Oracle Financial Services Applications (component: User IntOracle Financial Services Balance Sheet Planning
- CVE-2020-2937Vulnerability in the Oracle Insurance Accounting Analyzer product of Oracle Financial Services Applications (component: User Interface).Oracle Insurance Accounting Analyzer
- CVE-2020-2938Vulnerability in the Oracle Financial Services Loan Loss Forecasting and Provisioning product of Oracle Financial Services Applications (comOracle Financial Services Loan Loss Forecasting and Provisi…
- CVE-2020-2939Vulnerability in the Oracle Financial Services Asset Liability Management product of Oracle Financial Services Applications (component: UserOracle Financial Services Asset Liability Management
- CVE-2020-2940Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications (component: User IOracle Financial Services Profitability Management
- CVE-2020-2941Vulnerability in the Oracle Financial Services Funds Transfer Pricing product of Oracle Financial Services Applications (component: User IntOracle Financial Services Funds Transfer Pricing
- CVE-2020-2942Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications (component: UsOracle Financial Services Price Creation and Discovery
- CVE-2020-2943Vulnerability in the Oracle Financial Services Liquidity Risk Measurement and Management product of Oracle Financial Services Applications (Oracle Financial Services Liquidity Risk Measurement and Ma…
- CVE-2020-2944Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment).Oracle Solaris Operating System
- CVE-2020-2945Vulnerability in the Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management product of Oracle Financial ServOracle Financial Services Deposit Insurance Calculations fo…
- CVE-2020-2907Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2908Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2911Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2913Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2914Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2927Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment).Oracle Solaris Operating System
- CVE-2020-2929Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2890Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics).Oracle Applications Framework
- CVE-2020-2891Vulnerability in the Oracle Financial Services Liquidity Risk Management product of Oracle Financial Services Applications (component: User Oracle Financial Services Liquidity Risk Management
- CVE-2020-2902Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2905Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2867Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).Oracle WebLogic Server
- CVE-2020-2870Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-2871Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).Oracle Advanced Outbound Telephony
- CVE-2020-2872Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile).Oracle iSupport
- CVE-2020-2873Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2020-2874Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Customer Search).Oracle Email Center
- CVE-2020-2876Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2877Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup).Oracle Partner Management
- CVE-2020-2878Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Mail).Oracle iSupport
- CVE-2020-2879Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous).Oracle Scripting
- CVE-2020-2880Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: OTA Training Activities).Oracle Learning Management
- CVE-2020-2881Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-2882Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Hierarchy Diagrammers).Oracle Human Resources
- CVE-2020-2885Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments).Oracle Document Management and Collaboration
- CVE-2020-2844Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-2845Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-2846Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-2847Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-2848Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-2849Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-2850Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-2851Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment).Oracle Solaris Operating System
- CVE-2020-2852Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Calendar).Oracle Advanced Outbound Telephony
- CVE-2020-2854Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).Oracle Advanced Outbound Telephony
- CVE-2020-2855Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Admin).Oracle iSupport
- CVE-2020-2856Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).Oracle Advanced Outbound Telephony
- CVE-2020-2857Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).Oracle Advanced Outbound Telephony
- CVE-2020-2858Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2859Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: nVision).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2860Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2861Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2863Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface).Oracle Advanced Outbound Telephony
- CVE-2020-2824Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-2825Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-2826Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-2827Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-2828Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services).Oracle WebLogic Server
- CVE-2020-2831Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2832Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-2833Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware).Oracle Quoting
- CVE-2020-2834Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2835Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2836Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2837Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration).Oracle Marketing
- CVE-2020-2838Vulnerability in the Oracle CRM Gateway for Mobile Devices product of Oracle E-Business Suite (component: Setup of Mobile Applications).Oracle CRM Gateway for Mobile Devices
- CVE-2020-2839Vulnerability in the Oracle Service Intelligence product of Oracle E-Business Suite (component: Internal Operations- Search).Oracle Service Intelligence
- CVE-2020-2840Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups).Oracle E-Business Intelligence
- CVE-2020-2841Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin).Oracle Knowledge Management
- CVE-2020-2842Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Estimate and Actual Charges).Oracle Depot Repair
- CVE-2020-2843Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile).Oracle iSupport
- CVE-2020-2803Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2020-2805Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries).Oracle Java
- CVE-2020-2807Vulnerability in the Oracle Marketing Encyclopedia System product of Oracle E-Business Suite (component: Administration).Oracle Marketing Encyclopedia System
- CVE-2020-2808Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups).Oracle E-Business Intelligence
- CVE-2020-2809Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups).Oracle E-Business Intelligence
- CVE-2020-2813Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: KB Search).Oracle Email Center
- CVE-2020-2815Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile).Oracle iSupport
- CVE-2020-2816Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).Oracle Java
- CVE-2020-2817Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous).Oracle Scripting
- CVE-2020-2818Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration).Oracle Universal Work Queue
- CVE-2020-2819Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Administration).Oracle Universal Work Queue
- CVE-2020-2820Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes).Oracle Common Applications Calendar
- CVE-2020-2821Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Budget).Oracle Trade Management
- CVE-2020-2822Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claims).Oracle Trade Management
- CVE-2020-2823Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Notes).Oracle Common Applications Calendar
- CVE-2020-2782Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2784Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2785Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2786Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2787Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2793Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (comOracle Financial Services Analytical Applications Infrastru…
- CVE-2020-2794Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Email Address list and Message Display).Oracle Email Center
- CVE-2020-2796Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display).Oracle Email Center
- CVE-2020-2798Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Web Services).Oracle WebLogic Server
- CVE-2020-2802Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler).Oracle GraalVM Enterprise Edition
- CVE-2020-2776Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2739Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: Advanced UI).Oracle WebCenter Sites
- CVE-2020-2742Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2746Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications.Oracle Hospitality Reporting and Analytics
- CVE-2020-2750Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager).Oracle General Ledger
- CVE-2020-2758Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2019-2880Vulnerability in the Oracle Retail Store Inventory Management product of Oracle Retail Applications (component: Security).Oracle Retail Store Inventory Management
- CVE-2020-2735Vulnerability in the Java VM component of Oracle Database Server.Oracle Database
- CVE-2020-7250ENS symbolic link log file manipulation vulnerabilityMcAfee Endpoint Security
- CVE-2020-7257Privilege Escalation vulnerability through Symbolic links in ENSMcAfee Endpoint Security
- CVE-2020-7278McAfee firewall rules not enforced correctlyMcAfee Endpoint Security
- CVE-2020-3932Draytek VigorAP910C - Information LeakageDRAYTEK VigorAP910C
- CVE-2020-10514iCatch DVR - Command InjectioniCatch DVR firmware
- CVE-2020-10513iCatch DVR - Broken Access ControliCatch DVR firmware
- CVE-2020-10512HGiga C&Cmail - SQL InjectionHGiga C&Cmail
- CVE-2020-10506ALLE INFORMATION CO., LTD. School Manage System - Path TraversalALLE INFORMATION CO. School Manage System
- CVE-2020-10699A flaw was found in Linux, in targetcli-fb versions 2.1.50 and 2.1.51 where the socket used by targetclid was world-writable.Datera targetcli
Medium, low and unrated 338
- CVE-2020-7486**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause TCM modules to reset when under high network load in TCM v10.4.x and in Tricon TCM Model 4351, 4352, 4351A/B, 4352A/B
- CVE-2020-7485**VERSION NOT SUPPORTED WHEN ASSIGNED** A legacy support account in the TriStation software version v4.9.0 and earlier could cause improper TriStation TS1131
- CVE-2020-7484**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability with the former 'password' feature could allow a denial of service attack if the useTriStation TS1131
- CVE-2020-7483**VERSION NOT SUPPORTED WHEN ASSIGNED** A vulnerability could cause certain data to be visible on the network when the 'password' feature isTriStation TS1131
- CVE-2020-5721MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field MikroTik WinBox
- CVE-2020-11660CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view restricted sensitive informatCA API Developer Portal
- CVE-2020-11659CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to perform a restricted user administCA API Developer Portal
- CVE-2020-11658CA API Developer Portal 4.3.1 and earlier handles shared secret keys in an insecure manner, which allows attackers to bypass authorization.CA API Developer Portal
- CVE-2020-9280In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folsilverstripe/framework · silverstripe/userforms +1
- CVE-2019-20678Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-10951Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages.
- CVE-2019-12519An issue was discovered in Squid through 4.7.
- CVE-2019-20677Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-12520An issue was discovered in Squid through 4.7 and 5.
- CVE-2019-20676Certain NETGEAR devices are affected by lack of access control at the function level.
- CVE-2019-20675Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20674Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20673Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20672Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20671Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11663CA API Developer Portal 4.3.1 and earlier handles 404 requests in an insecure manner, which allows attackers to perform open redirect attackCA API Developer Portal
- CVE-2020-11662CA API Developer Portal 4.3.1 and earlier handles requests insecurely, which allows remote attackers to exploit a Cross-Origin Resource SharCA API Developer Portal
- CVE-2020-11661CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows privileged users to view and edit user data.CA API Developer Portal
- CVE-2019-20670Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20669Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20668Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20667Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20666Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11666CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.CA API Developer Portal
- CVE-2019-20665Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11665CA API Developer Portal 4.3.1 and earlier handles loginRedirect page redirects in an insecure manner, which allows attackers to perform openCA API Developer Portal
- CVE-2020-11664CA API Developer Portal 4.3.1 and earlier handles homeRedirect page redirects in an insecure manner, which allows attackers to perform open CA API Developer Portal
- CVE-2019-20664Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20663Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-12522An issue was discovered in Squid through 4.7.
- CVE-2019-20662Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20661Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20660Certain NETGEAR devices are affected by stored XSS.
- CVE-2019-20659Certain NETGEAR devices are affected by command injection by an authenticated user.
- CVE-2019-12521An issue was discovered in Squid through 4.7.
- CVE-2019-20658Certain NETGEAR devices are affected by disclosure of sensitive information.
- CVE-2020-6996Triangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstation .NET Protocol components and DNP3 Outstation ANSI C source code libraries are aTriangle MicroWorks DNP3 Outstation LibrariesDNP3 Outstatio…
- CVE-2019-20656Certain NETGEAR devices are affected by a hardcoded password.
- CVE-2019-20654Certain NETGEAR devices are affected by incorrect configuration of security settings.
- CVE-2020-10611Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to execute arbitrary codTriangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…
- CVE-2019-12524An issue was discovered in Squid through 4.7.
- CVE-2020-10613Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers to disclose sensitive inTriangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…
- CVE-2020-10615Triangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.0.122, 2.41.0213 through 4.0.122 allows remote attackers cause a denial-of-servicTriangle MicroWorks SCADA Data Gateway 3.02.0697 through 4.…
- CVE-2020-11799Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task.
- CVE-2020-5346RSA Authentication Manager versions prior to 8.4 P11 contain a stored cross-site scripting vulnerability in the Security Console.Dell RSA Authentication Manager
- CVE-2019-20650Certain NETGEAR devices are affected by denial of service.
- CVE-2019-20649NETGEAR MR1100 devices before 12.06.08.00 are affected by disclosure of sensitive information.
- CVE-2019-20648NETGEAR RN42400 devices before 6.10.2 are affected by incorrect configuration of security settings.
- CVE-2019-20647NETGEAR RAX40 devices before 1.0.3.64 are affected by denial of service.
- CVE-2019-20646NETGEAR RAX40 devices before 1.0.3.64 are affected by disclosure of administrative credentials.
- CVE-2020-3953Cross Site Scripting (XSS) vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.VMware vRealize Log Insight
- CVE-2019-20645NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.
- CVE-2019-20644NETGEAR RAX40 devices before 1.0.3.62 are affected by stored XSS.
- CVE-2020-3954Open Redirect vulnerability exists in VMware vRealize Log Insight prior to 8.1.0 due to improper Input validation.VMware vRealize Log Insight
- CVE-2019-20639Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11791NETGEAR JGS516PE devices before 2.6.0.43 are affected by reflected XSS.
- CVE-2020-11788Certain NETGEAR devices are affected by authentication bypass.
- CVE-2020-11787Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11786Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-0600Improper buffer restrictions in firmware for some Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilegeIntel(R) NUC Firmware
- CVE-2020-0598Uncontrolled search path in the installer for the Intel(R) Binary Configuration Tool for Windows, all versions, may allow an authenticated uIntel(R) Binary Configuration Tool for Windows
- CVE-2020-0577Insufficient control flow for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable esIntel(R) Modular Server Compute Module
- CVE-2020-0576Buffer overflow in Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable denial of serIntel(R) Modular Server Compute Module
- CVE-2020-0578Improper conditions check for Intel(R) Modular Server MFS2600KISPP Compute Module may allow an unauthenticated user to potentially enable esIntel(R) Modular Server Compute Module
- CVE-2020-0568Race condition in the Intel(R) Driver and Support Assistant before version 20.1.5 may allow an authenticated user to potentially enable deniIntel(R) Driver and Support Assistant
- CVE-2020-0558Improper buffer restrictions in kernel mode driver for Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow aIntel(R) PROSet/Wireless WiFi Software
- CVE-2020-0557Insecure inherited permissions in Intel(R) PROSet/Wireless WiFi products before version 21.70 on Windows 10 may allow an authenticated user Intel(R) PROSet/Wireless WiFi Software
- CVE-2020-0547Incorrect default permissions in the installer for Intel(R) Data Migration Software versions 3.3 and earlier may allow an authenticated userIntel(R) Data Migration Software
- CVE-2020-10639Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues.Eaton HMiSoft VU3
- CVE-2020-10637Eaton HMiSoft VU3 (HMIVU3 runtime not impacted), Version 3.00.23 and prior, however, the HMIVU runtimes are not impacted by these issues.Eaton HMiSoft VU3
- CVE-2020-6992A local privilege escalation vulnerability has been identified in the GE Digital CIMPLICITY HMI/SCADA product v10.0 and prior.GE Digital CIMPLICITY
- CVE-2019-19390The Search parameter of the Software Catalogue section of Matrix42 Workspace Management 9.1.2.2765 and below accepts unfiltered parameters t
- CVE-2020-11785Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11784Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11728An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60.
- CVE-2020-11729An issue was discovered in DAViCal Andrew's Web Libraries (AWL) through 0.60.
- CVE-2020-8948The Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) before build 5043 allows an unprivileged user to overwrite arbitrary fil
- CVE-2020-4294IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF).IBM Qradar
- CVE-2020-4274IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to access data and perform unauthorized actions due to inadequate permisIBM QRadar
- CVE-2020-4272IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files.IBM QRadar
- CVE-2020-4271IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow an authenticated user to send a specially crafted command which would be executed as a lower pIBM Qradar
- CVE-2020-4268IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting.IBM Qradar
- CVE-2019-4654IBM QRadar 7.3.0 to 7.3.3 Patch 2 does not validate, or incorrectly validates, a certificate which could allow an attacker to spoof a trusteIBM Qradar
- CVE-2019-4594IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTIBM QRadar
- CVE-2019-4593IBM QRadar 7.3.0 to 7.3.3 Patch 2 generates an error message that includes sensitive information that could be used in further attacks againIBM Qradar
- CVE-2020-1094An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoMicrosoft Windows
- CVE-2020-1049A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web reqMicrosoft Dynamics 365 Server,
- CVE-2020-1050A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web reqMicrosoft Dynamics 365 Server,
- CVE-2020-1029An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaMicrosoft Windows
- CVE-2020-1022A remote code execution vulnerability exists in Microsoft Dynamics Business Central, aka 'Dynamics Business Central Remote Code Execution VuMicrosoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +2
- CVE-2020-1026A Security Feature Bypass vulnerability exists in the MSR JavaScript Cryptography Library that is caused by multiple bugs in the library’sMicrosoft Research JavaScript Cryptography Library · msrcry…
- CVE-2020-1018An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of aMicrosoft Dynamics NAV · Microsoft Dynamics 365 BC On Pr… +1
- CVE-2020-1019An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka 'MMicrosoft RMS Sharing for Mac
- CVE-2020-1016An information disclosure vulnerability exists when the Windows Push Notification Service improperly handles objects in memory, aka 'WindowsMicrosoft Windows
- CVE-2020-1017An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushMicrosoft Windows
- CVE-2020-1014An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'MicrMicrosoft Windows
- CVE-2020-1015An elevation of privilege vulnerability exists in the way that the User-Mode Power Service (UMPS) handles objects in memory, aka 'Windows ElMicrosoft Windows
- CVE-2020-1009An elevation of privilege vulnerability exists in the way that the Microsoft Store Install Service handles file operations in protected locaMicrosoft Windows
- CVE-2020-1011An elevation of privilege vulnerability exists when the Windows System Assessment Tool improperly handles file operations, aka 'Windows ElevMicrosoft Windows
- CVE-2020-1007An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMicrosoft Windows
- CVE-2020-1008A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-1005An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'MicrMicrosoft Windows
- CVE-2020-1006An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushMicrosoft Windows
- CVE-2020-1003An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1004An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiMicrosoft Windows
- CVE-2020-1000An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-1001An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushMicrosoft Windows
- CVE-2020-1002An elevation of privilege vulnerability exists when the MpSigStub.exe for Defender allows file deletion in arbitrary locations.To exploit thMicrosoft Forefront Endpoint Protection · Microsoft Syst… +2
- CVE-2020-0996An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows UpdateMicrosoft Windows
- CVE-2020-0999A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0994A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0995A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0992A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0993A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service VulneraMicrosoft Windows
- CVE-2020-0988A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0991A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka Microsoft Office
- CVE-2020-0984An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before eMicrosoft AutoUpdate for Mac
- CVE-2020-0985An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows UpdateMicrosoft Windows
- CVE-2020-0987An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'MicrMicrosoft Windows
- CVE-2020-0982An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'MicrMicrosoft Windows
- CVE-2020-0983An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'WinMicrosoft Windows
- CVE-2020-0980A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft WMicrosoft SharePoint Enterprise Server · Microsoft Share… +2
- CVE-2020-0981A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploiMicrosoft Windows
- CVE-2020-0978A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0979A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Office 365 ProPlus
- CVE-2020-0976A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0977A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0973A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0974A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0975A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0971A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0972A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0969A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-bMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0970A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting EnginMicrosoft ChakraCore · Microsoft Edge (EdgeHTML-based) o… +1
- CVE-2020-0967A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer
- CVE-2020-0964A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka Microsoft Windows
- CVE-2020-0965A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft WinMicrosoft Windows
- CVE-2020-0966A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'VBScript Remote Code ExecutMicrosoft Internet Explorer
- CVE-2020-0961A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka Microsoft Office
- CVE-2020-0962An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisMicrosoft Windows
- CVE-2020-0959A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0960A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0957An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-0958An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-0955An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory, aka 'Windows Kernel Microsoft Windows
- CVE-2020-0956An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, akMicrosoft Windows
- CVE-2020-0953A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0954A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0950A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-0952An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows Microsoft Windows
- CVE-2020-0947An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation InformationMicrosoft Windows
- CVE-2020-0948A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-0949A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory CoMicrosoft Windows
- CVE-2020-0945An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation InformationMicrosoft Windows
- CVE-2020-0946An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation InformationMicrosoft Windows
- CVE-2020-0943An authentication bypass vulnerability exists in Microsoft YourPhoneCompanion application for Android, in the way the application processes Microsoft Your Phone Companion App for Android
- CVE-2020-0944An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaMicrosoft Windows
- CVE-2020-0940An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows PushMicrosoft Windows
- CVE-2020-0942An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, akaMicrosoft Windows
- CVE-2020-0939An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation InformationMicrosoft Windows
- CVE-2020-0936An elevation of privilege vulnerability exists when a Windows scheduled task improperly handles file redirections, aka 'Windows Scheduled TaMicrosoft Windows
- CVE-2020-0937An information disclosure vulnerability exists when Media Foundation improperly handles objects in memory, aka 'Media Foundation InformationMicrosoft Windows
- CVE-2020-0933A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0934An elevation of privilege vulnerability exists when the Windows WpcDesktopMonSvc improperly manages memory.To exploit this vulnerability, anMicrosoft Windows
- CVE-2020-0935An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneMicrosoft OneDrive for Windows
- CVE-2020-0931A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paMicrosoft SharePoint Foundation · Microsoft SharePoint E… +2
- CVE-2020-0932A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0929A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0930A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0926A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0927A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2020-0923A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0924A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0925A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0919An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, akaMicrosoft Remote Desktop for Mac
- CVE-2020-0920A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application paMicrosoft SharePoint Enterprise Server · Microsoft Share… +1
- CVE-2020-0917An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'WindowMicrosoft Windows
- CVE-2020-0918An elevation of privilege vulnerability exists when Windows Hyper-V on a host server fails to properly handle objects in memory, aka 'WindowMicrosoft Windows
- CVE-2020-0910A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usMicrosoft Windows
- CVE-2020-0913An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaMicrosoft Windows
- CVE-2020-0906A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Office · Microsoft Excel
- CVE-2020-0907A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft GraphicsMicrosoft Windows
- CVE-2020-0899An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'MicrosMicrosoft Visual Studio
- CVE-2020-0900An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'VMicrosoft Visual Studio
- CVE-2020-0888An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerMicrosoft Windows
- CVE-2020-0889A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database EnMicrosoft Windows
- CVE-2020-0895A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine RemMicrosoft Internet Explorer
- CVE-2020-0821An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel InformationMicrosoft Windows
- CVE-2020-0835An elevation of privilege vulnerability exists when Windows Defender antimalware platform improperly handles hard links, aka 'Windows DefendMicrosoft Windows Defender antimalware platform
- CVE-2020-0784An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka 'DirectX Elevation of Privilege VulnerMicrosoft Windows
- CVE-2020-0794A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'.Microsoft Windows
- CVE-2020-0699An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information DisMicrosoft Windows
- CVE-2020-0760A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote CMicrosoft Project · Microsoft Office +7
- CVE-2020-0687A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'MicrosoMicrosoft Windows
- CVE-2020-11783Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11782Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11781Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11780Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11779Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11534An issue was discovered in ONLYOFFICE Document Server 5.5.0.
- CVE-2020-11535An issue was discovered in ONLYOFFICE Document Server 5.5.0.
- CVE-2020-11536An issue was discovered in ONLYOFFICE Document Server 5.5.0.
- CVE-2020-11537A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0.
- CVE-2020-11778Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11777Certain NETGEAR devices are affected by Stored XSS.
- CVE-2020-11776Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11775Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11774Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11773Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11772Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11771Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11769Certain NETGEAR devices are affected by stored XSS.
- CVE-2020-11768Certain NETGEAR devices are affected by Stored XSS.
- CVE-2019-20767Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user.
- CVE-2020-2952Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener).Oracle HTTP Server
- CVE-2020-2954Vulnerability in the PeopleSoft Enterprise HRMS product of Oracle PeopleSoft (component: Candidate Gateway).Oracle PeopleSoft Enterprise HCM Candidate Gateway
- CVE-2020-2955Vulnerability in the Oracle FLEXCUBE Core Banking product of Oracle Financial Services Applications (component: Transaction Processing).Oracle FLEXCUBE Core Banking
- CVE-2020-2932Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console).Oracle Knowledge
- CVE-2020-2933Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Oracle MySQL Connectors
- CVE-2020-2934Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Oracle WebLogic Server
- CVE-2020-2946Vulnerability in the Application Performance Management product of Oracle Enterprise Manager (component: EM Request Monitoring).Oracle APM - Application Performance Management
- CVE-2020-2947Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management).Oracle PeopleSoft Enterprise HCM Absence Management
- CVE-2020-2949Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation).Oracle Coherence
- CVE-2020-2951Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2906Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Supplier Change).Oracle PeopleSoft Enterprise SCM Purchasing
- CVE-2020-2909Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2910Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2912Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Self-Service).Oracle PeopleSoft Enterprise CS Campus Community
- CVE-2020-2920Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).Oracle Agile PLM Framework
- CVE-2020-2921Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin).Oracle MySQL Server
- CVE-2020-2922Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2020-2923Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2924Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2925Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS).Oracle MySQL Server
- CVE-2020-2926Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS).Oracle MySQL Server
- CVE-2020-2928Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2930Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser).Oracle MySQL Server
- CVE-2020-2886Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-2887Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result).Oracle Customer Interaction History
- CVE-2020-2888Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Partners).Oracle Marketing
- CVE-2020-2889Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences).Oracle CRM Technical Foundation
- CVE-2020-2892Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2893Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-2894Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2895Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-2896Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).Oracle MySQL Server
- CVE-2020-2897Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2898Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Charsets).Oracle MySQL Server
- CVE-2020-2899Vulnerability in the PeopleSoft Enterprise SCM Purchasing product of Oracle PeopleSoft (component: Purchasing).Oracle PeopleSoft Enterprise SCM Purchasing
- CVE-2020-2900Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Tools).Oracle GraalVM Enterprise Edition
- CVE-2020-2901Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2903Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling).Oracle MySQL Server
- CVE-2020-2904Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2865Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: Installation).Oracle Configurator
- CVE-2020-2866Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Attachments / File Upload).Oracle Applications Framework
- CVE-2020-2868Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Diagnostic Framework).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2869Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-2875Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).Oracle MySQL Connectors
- CVE-2020-2853Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-2862Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server).Oracle One-to-One Fulfillment
- CVE-2020-2864Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Accounts).Oracle iSupplier Portal
- CVE-2020-2829Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Management Services).Oracle WebLogic Server
- CVE-2020-2830Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency).Oracle Java
- CVE-2020-2804Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Memcached).Oracle MySQL Server
- CVE-2020-2806Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling).Oracle MySQL Server
- CVE-2020-2810Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).Oracle iStore
- CVE-2020-2811Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-2812Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure).Oracle MySQL Server
- CVE-2020-2814Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-2780Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).Oracle MySQL Server
- CVE-2020-2781Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE).Oracle Java
- CVE-2020-2783Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters).Oracle Outside In Technology
- CVE-2020-2789Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Interface).Oracle iSupport
- CVE-2020-2790Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth).Oracle MySQL Server
- CVE-2020-2795Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console).Oracle Knowledge
- CVE-2020-2797Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Process Scheduler).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2799Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: GraalVM Compiler).Oracle GraalVM Enterprise Edition
- CVE-2020-2800Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server).Oracle Java
- CVE-2020-2759Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2020-2760Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-2761Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-2762Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB).Oracle MySQL Server
- CVE-2020-2763Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication).Oracle MySQL Server
- CVE-2020-2764Vulnerability in the Java SE product of Oracle Java SE (component: Advanced Management Console).Oracle Java
- CVE-2020-2765Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).Oracle MySQL Server
- CVE-2020-2766Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console).Oracle WebLogic Server
- CVE-2020-2767Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).Oracle Java
- CVE-2020-2768Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).Oracle MySQL Cluster
- CVE-2020-2769Vulnerability in the Hyperion Financial Reporting product of Oracle Hyperion (component: Web Based Report Designer).Oracle Hyperion Financial Reporting
- CVE-2020-2770Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging).Oracle MySQL Server
- CVE-2020-2771Vulnerability in the Oracle Solaris product of Oracle Systems (component: Whodo).Oracle Solaris Operating System
- CVE-2020-2772Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: Absence Recording, Maintenance).Oracle Human Resources
- CVE-2020-2773Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security).Oracle Java
- CVE-2020-2774Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-2775Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2777Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Security).Oracle Hyperion Financial Management
- CVE-2020-2778Vulnerability in the Java SE product of Oracle Java SE (component: JSSE).Oracle Java
- CVE-2020-2779Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).Oracle MySQL Server
- CVE-2020-2738Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI, SWSE).Oracle Siebel UI Framework
- CVE-2020-2740Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).Oracle Access Manager
- CVE-2020-2741Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2743Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2744Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Security).Oracle Transportation Management
- CVE-2020-2745Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation).Oracle Access Manager
- CVE-2020-2747Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: SSO Engine).Oracle Access Manager
- CVE-2020-2748Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core).Oracle VM VirtualBox
- CVE-2020-2749Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF command svcbundle).Oracle Solaris Operating System
- CVE-2020-2751Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal).Oracle PeopleSoft Enterprise PT PeopleTools
- CVE-2020-2752Vulnerability in the MySQL Client product of Oracle MySQL (component: C API).Oracle MySQL Server
- CVE-2020-2753Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).Oracle Workflow
- CVE-2020-2754Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting).Oracle Java
- CVE-2020-2755Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting).Oracle Java
- CVE-2020-2756Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).Oracle Java
- CVE-2020-2757Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization).Oracle Java
- CVE-2020-2514Vulnerability in the Oracle Application Express component of Oracle Database Server.Oracle Application Express
- CVE-2020-2522Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console).Oracle Knowledge
- CVE-2020-2524Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search).Oracle Knowledge
- CVE-2020-2553Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console).Oracle Knowledge
- CVE-2020-2594Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: ProjectOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2020-2706Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: ProjectOracle Primavera P6 Enterprise Project Portfolio Management
- CVE-2020-2734Vulnerability in the RDBMS/Optimizer component of Oracle Database Server.Oracle Database
- CVE-2020-2737Vulnerability in the Core RDBMS component of Oracle Database Server.Oracle Database
- CVE-2019-19500Matrix42 Workspace Management 9.1.2.2765 and below allows stored XSS via unfiltered description parameters, as demonstrated by the comment f
- CVE-2020-7255Privilege Escalation vulnerability in ENSMcAfee Endpoint Security
- CVE-2020-7259Unsigned executable vulnerability in ENS can be used to bypass intended self-protection rulesMcAfee Endpoint Security
- CVE-2020-7261Buffer overwrite in ENS allowed to bypass AMSI protectionMcAfee Endpoint Security
- CVE-2020-7273Autorun registry bypassMcAfee Endpoint Security
- CVE-2020-7275Unquoted service paths for some McAfee ENS filesMcAfee Endpoint Security
- CVE-2020-7274ENS elevated permissions vulnerabilityMcAfee Endpoint Security
- CVE-2020-7277McAfee processes not protectedMcAfee Endpoint Security
- CVE-2020-7276Unrestricted Policy Management using MfeUpgradeTool.exeMcAfee Endpoint Security
- CVE-2020-11767Istio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue.
- CVE-2020-10932An issue was discovered in Arm Mbed TLS before 2.16.6 and 2.7.x before 2.7.15.